<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="96">
<package pkgid="8b5c25b4839ddcf5a20b575c652451f311cc576f22364148d3915313c279567f" name="cluster-md-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.43.1"/>
  <changelog author="tiwai@suse.de" date="1642593600">- Add cherry-picked IDs for qemu fw_cfg patches
- commit 8f947ad</changelog>
  <changelog author="msuchanek@suse.de" date="1642593601">- powerpc/pseries/cpuhp: delete add/remove_by_count code
  (bsc#1065729).
- powerpc/pseries/cpuhp: cache node corrections (bsc#1065729).
- commit 9c04898</changelog>
  <changelog author="tiwai@suse.de" date="1642593602">- dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
  (git-fixes).
- dmaengine: at_xdmac: Fix lld view setting (git-fixes).
- dmaengine: at_xdmac: Fix concurrency over xfers_list
  (git-fixes).
- dmaengine: at_xdmac: Print debug message after realeasing the
  lock (git-fixes).
- dmaengine: at_xdmac: Don't start transactions at tx_submit level
  (git-fixes).
- Documentation: dmaengine: Correctly describe dmatest with
  channel unset (git-fixes).
- rpmsg: core: Clean up resources on announce_create failure
  (git-fixes).
- ACPI: APD: Check for NULL pointer after calling devm_ioremap()
  (git-fixes).
- Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2 (git-fixes).
- Input: ti_am335x_tsc - set ADCREFM for X configuration
  (git-fixes).
- i3c: master: dw: check return of dw_i3c_master_get_free_pos()
  (git-fixes).
- i3c: fix incorrect address slot lookup on 64-bit (git-fixes).
- commit 3d8614c</changelog>
  <changelog author="msuchanek@suse.de" date="1642593603">- powerpc/prom_init: Fix improper check of prom_getprop()
  (bsc#1065729).
- commit 954fa51</changelog>
  <changelog author="msuchanek@suse.de" date="1642593604">- powerpc/perf: Fix PMU callbacks to clear pending PMI before
  resetting an overflown PMC (bsc#1156395).
- commit 8bdce1e</changelog>
  <changelog author="mbenes@suse.cz" date="1642593605">- livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
- commit 27c7aa0</changelog>
  <changelog author="msuchanek@suse.de" date="1642593606">- blacklist.conf: Add 79ca6f74dae0 tpm: fix Atmel TPM crash caused by too frequent queries
  Breaks kABI, there is no report of this problem affecting users, likely
  broken old TPM firmware.
- commit 4ea9f96</changelog>
  <changelog author="msuchanek@suse.de" date="1642593607">- Update patches.suse/tpm-fix-potential-NULL-pointer-access-in-tpm_del_cha.patch
  (git-fixes bsc#1193660 ltc#195634).
- commit 11ac3f6</changelog>
  <changelog author="lhenriques@suse.de" date="1642680000">- fuse: Pass correct lend value to filemap_write_and_wait_range()
  (bsc#1194953).
- commit d2355ea</changelog>
  <changelog author="msuchanek@suse.de" date="1642680001">- blacklist.conf: Add a2308836880b powerpc: Fix arch_stack_walk() to have
  running function as first entry
  The stacktrace interface in this kernel version does not provide the
  parameters used to implement the fix.
- commit ee041a3</changelog>
  <changelog author="msuchanek@suse.de" date="1642680002">- powerpc/64s: fix program check interrupt emergency stack path
  (bsc#1156395).
- commit a3c26ed</changelog>
  <changelog author="msuchanek@suse.de" date="1642680003">- powerpc/traps: do not enable irqs in _exception (bsc#1065729).
- powerpc: add interrupt_cond_local_irq_enable helper
  (bsc#1065729).
- commit 65f660c</changelog>
  <changelog author="msuchanek@suse.de" date="1642680004">- powerpc/pseries/mobility: ignore ibm, platform-facilities
  updates (bsc#1065729).
- commit b253330</changelog>
  <changelog author="rgoldwyn@suse.com" date="1642680005">- vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).
- commit 4717473</changelog>
  <changelog author="vkarasulli@suse.de" date="1642680006">- moxart: fix potential use-after-free on remove path
  (bsc#1194516).
- commit 3fae095</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1642766400">- sctp: account stream padding length for reconf chunk
  (bsc#1194985 CVE-2022-0322).
- commit a6cab40</changelog>
  <changelog author="ddiss@suse.de" date="1642766401">- vfs: fs_context: fix up param length parsing in
  legacy_parse_param (CVE-2022-0185 bsc#1194517).
- Rename and retag following upstream merge from:
  patches.suse/vfs-Out-of-bounds-write-of-heap-buffer-in-fs_context-c.patch
  to patches.suse/vfs-fs_context-fix-up-param-length-parsing-in-legacy.patch
- commit 33860f2</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766402">- series.conf: cleanup
- move to "mainline soon" section:
  - patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch
- commit 07d55c3</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766403">- series.conf: refresh
- update upstream references and resort:
  - patches.suse/powerpc-fadump-Fix-inaccurate-CPU-state-info-in-vmco.patch
  - patches.suse/powerpc-handle-kdump-appropriately-with-crash_kexec_.patch
  - patches.suse/powerpc-watchdog-Avoid-holding-wd_smp_lock-over-prin.patch
  - patches.suse/powerpc-watchdog-Fix-missed-watchdog-reset-due-to-me.patch
  - patches.suse/powerpc-watchdog-Fix-wd_smp_last_reset_tb-reporting.patch
  - patches.suse/powerpc-watchdog-read-TB-close-to-where-it-is-used.patch
  - patches.suse/powerpc-watchdog-tighten-non-atomic-read-modify-writ.patch
- commit 72b7db7</changelog>
  <changelog author="osalvador@suse.de" date="1642939200">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit 84178b8</changelog>
</package>
<package pkgid="7ca6a4e60e4f790df24314590ce4f87f24ae077f6a50acf455f840595f54e46b" name="dlm-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.43.1"/>
  <changelog author="tiwai@suse.de" date="1642593600">- Add cherry-picked IDs for qemu fw_cfg patches
- commit 8f947ad</changelog>
  <changelog author="msuchanek@suse.de" date="1642593601">- powerpc/pseries/cpuhp: delete add/remove_by_count code
  (bsc#1065729).
- powerpc/pseries/cpuhp: cache node corrections (bsc#1065729).
- commit 9c04898</changelog>
  <changelog author="tiwai@suse.de" date="1642593602">- dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
  (git-fixes).
- dmaengine: at_xdmac: Fix lld view setting (git-fixes).
- dmaengine: at_xdmac: Fix concurrency over xfers_list
  (git-fixes).
- dmaengine: at_xdmac: Print debug message after realeasing the
  lock (git-fixes).
- dmaengine: at_xdmac: Don't start transactions at tx_submit level
  (git-fixes).
- Documentation: dmaengine: Correctly describe dmatest with
  channel unset (git-fixes).
- rpmsg: core: Clean up resources on announce_create failure
  (git-fixes).
- ACPI: APD: Check for NULL pointer after calling devm_ioremap()
  (git-fixes).
- Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2 (git-fixes).
- Input: ti_am335x_tsc - set ADCREFM for X configuration
  (git-fixes).
- i3c: master: dw: check return of dw_i3c_master_get_free_pos()
  (git-fixes).
- i3c: fix incorrect address slot lookup on 64-bit (git-fixes).
- commit 3d8614c</changelog>
  <changelog author="msuchanek@suse.de" date="1642593603">- powerpc/prom_init: Fix improper check of prom_getprop()
  (bsc#1065729).
- commit 954fa51</changelog>
  <changelog author="msuchanek@suse.de" date="1642593604">- powerpc/perf: Fix PMU callbacks to clear pending PMI before
  resetting an overflown PMC (bsc#1156395).
- commit 8bdce1e</changelog>
  <changelog author="mbenes@suse.cz" date="1642593605">- livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
- commit 27c7aa0</changelog>
  <changelog author="msuchanek@suse.de" date="1642593606">- blacklist.conf: Add 79ca6f74dae0 tpm: fix Atmel TPM crash caused by too frequent queries
  Breaks kABI, there is no report of this problem affecting users, likely
  broken old TPM firmware.
- commit 4ea9f96</changelog>
  <changelog author="msuchanek@suse.de" date="1642593607">- Update patches.suse/tpm-fix-potential-NULL-pointer-access-in-tpm_del_cha.patch
  (git-fixes bsc#1193660 ltc#195634).
- commit 11ac3f6</changelog>
  <changelog author="lhenriques@suse.de" date="1642680000">- fuse: Pass correct lend value to filemap_write_and_wait_range()
  (bsc#1194953).
- commit d2355ea</changelog>
  <changelog author="msuchanek@suse.de" date="1642680001">- blacklist.conf: Add a2308836880b powerpc: Fix arch_stack_walk() to have
  running function as first entry
  The stacktrace interface in this kernel version does not provide the
  parameters used to implement the fix.
- commit ee041a3</changelog>
  <changelog author="msuchanek@suse.de" date="1642680002">- powerpc/64s: fix program check interrupt emergency stack path
  (bsc#1156395).
- commit a3c26ed</changelog>
  <changelog author="msuchanek@suse.de" date="1642680003">- powerpc/traps: do not enable irqs in _exception (bsc#1065729).
- powerpc: add interrupt_cond_local_irq_enable helper
  (bsc#1065729).
- commit 65f660c</changelog>
  <changelog author="msuchanek@suse.de" date="1642680004">- powerpc/pseries/mobility: ignore ibm, platform-facilities
  updates (bsc#1065729).
- commit b253330</changelog>
  <changelog author="rgoldwyn@suse.com" date="1642680005">- vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).
- commit 4717473</changelog>
  <changelog author="vkarasulli@suse.de" date="1642680006">- moxart: fix potential use-after-free on remove path
  (bsc#1194516).
- commit 3fae095</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1642766400">- sctp: account stream padding length for reconf chunk
  (bsc#1194985 CVE-2022-0322).
- commit a6cab40</changelog>
  <changelog author="ddiss@suse.de" date="1642766401">- vfs: fs_context: fix up param length parsing in
  legacy_parse_param (CVE-2022-0185 bsc#1194517).
- Rename and retag following upstream merge from:
  patches.suse/vfs-Out-of-bounds-write-of-heap-buffer-in-fs_context-c.patch
  to patches.suse/vfs-fs_context-fix-up-param-length-parsing-in-legacy.patch
- commit 33860f2</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766402">- series.conf: cleanup
- move to "mainline soon" section:
  - patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch
- commit 07d55c3</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766403">- series.conf: refresh
- update upstream references and resort:
  - patches.suse/powerpc-fadump-Fix-inaccurate-CPU-state-info-in-vmco.patch
  - patches.suse/powerpc-handle-kdump-appropriately-with-crash_kexec_.patch
  - patches.suse/powerpc-watchdog-Avoid-holding-wd_smp_lock-over-prin.patch
  - patches.suse/powerpc-watchdog-Fix-missed-watchdog-reset-due-to-me.patch
  - patches.suse/powerpc-watchdog-Fix-wd_smp_last_reset_tb-reporting.patch
  - patches.suse/powerpc-watchdog-read-TB-close-to-where-it-is-used.patch
  - patches.suse/powerpc-watchdog-tighten-non-atomic-read-modify-writ.patch
- commit 72b7db7</changelog>
  <changelog author="osalvador@suse.de" date="1642939200">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit 84178b8</changelog>
</package>
<package pkgid="55fa3b1acc03021ecf33a26de0a064ede8ae29360fde8c70293a0b7b0953e9e5" name="dtb-aarch64" arch="src">
  <version epoch="0" ver="5.3.18" rel="150300.59.43.1"/>
  <changelog author="tiwai@suse.de" date="1642593600">- Add cherry-picked IDs for qemu fw_cfg patches
- commit 8f947ad</changelog>
  <changelog author="msuchanek@suse.de" date="1642593601">- powerpc/pseries/cpuhp: delete add/remove_by_count code
  (bsc#1065729).
- powerpc/pseries/cpuhp: cache node corrections (bsc#1065729).
- commit 9c04898</changelog>
  <changelog author="tiwai@suse.de" date="1642593602">- dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
  (git-fixes).
- dmaengine: at_xdmac: Fix lld view setting (git-fixes).
- dmaengine: at_xdmac: Fix concurrency over xfers_list
  (git-fixes).
- dmaengine: at_xdmac: Print debug message after realeasing the
  lock (git-fixes).
- dmaengine: at_xdmac: Don't start transactions at tx_submit level
  (git-fixes).
- Documentation: dmaengine: Correctly describe dmatest with
  channel unset (git-fixes).
- rpmsg: core: Clean up resources on announce_create failure
  (git-fixes).
- ACPI: APD: Check for NULL pointer after calling devm_ioremap()
  (git-fixes).
- Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2 (git-fixes).
- Input: ti_am335x_tsc - set ADCREFM for X configuration
  (git-fixes).
- i3c: master: dw: check return of dw_i3c_master_get_free_pos()
  (git-fixes).
- i3c: fix incorrect address slot lookup on 64-bit (git-fixes).
- commit 3d8614c</changelog>
  <changelog author="msuchanek@suse.de" date="1642593603">- powerpc/prom_init: Fix improper check of prom_getprop()
  (bsc#1065729).
- commit 954fa51</changelog>
  <changelog author="msuchanek@suse.de" date="1642593604">- powerpc/perf: Fix PMU callbacks to clear pending PMI before
  resetting an overflown PMC (bsc#1156395).
- commit 8bdce1e</changelog>
  <changelog author="mbenes@suse.cz" date="1642593605">- livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
- commit 27c7aa0</changelog>
  <changelog author="msuchanek@suse.de" date="1642593606">- blacklist.conf: Add 79ca6f74dae0 tpm: fix Atmel TPM crash caused by too frequent queries
  Breaks kABI, there is no report of this problem affecting users, likely
  broken old TPM firmware.
- commit 4ea9f96</changelog>
  <changelog author="msuchanek@suse.de" date="1642593607">- Update patches.suse/tpm-fix-potential-NULL-pointer-access-in-tpm_del_cha.patch
  (git-fixes bsc#1193660 ltc#195634).
- commit 11ac3f6</changelog>
  <changelog author="lhenriques@suse.de" date="1642680000">- fuse: Pass correct lend value to filemap_write_and_wait_range()
  (bsc#1194953).
- commit d2355ea</changelog>
  <changelog author="msuchanek@suse.de" date="1642680001">- blacklist.conf: Add a2308836880b powerpc: Fix arch_stack_walk() to have
  running function as first entry
  The stacktrace interface in this kernel version does not provide the
  parameters used to implement the fix.
- commit ee041a3</changelog>
  <changelog author="msuchanek@suse.de" date="1642680002">- powerpc/64s: fix program check interrupt emergency stack path
  (bsc#1156395).
- commit a3c26ed</changelog>
  <changelog author="msuchanek@suse.de" date="1642680003">- powerpc/traps: do not enable irqs in _exception (bsc#1065729).
- powerpc: add interrupt_cond_local_irq_enable helper
  (bsc#1065729).
- commit 65f660c</changelog>
  <changelog author="msuchanek@suse.de" date="1642680004">- powerpc/pseries/mobility: ignore ibm, platform-facilities
  updates (bsc#1065729).
- commit b253330</changelog>
  <changelog author="rgoldwyn@suse.com" date="1642680005">- vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).
- commit 4717473</changelog>
  <changelog author="vkarasulli@suse.de" date="1642680006">- moxart: fix potential use-after-free on remove path
  (bsc#1194516).
- commit 3fae095</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1642766400">- sctp: account stream padding length for reconf chunk
  (bsc#1194985 CVE-2022-0322).
- commit a6cab40</changelog>
  <changelog author="ddiss@suse.de" date="1642766401">- vfs: fs_context: fix up param length parsing in
  legacy_parse_param (CVE-2022-0185 bsc#1194517).
- Rename and retag following upstream merge from:
  patches.suse/vfs-Out-of-bounds-write-of-heap-buffer-in-fs_context-c.patch
  to patches.suse/vfs-fs_context-fix-up-param-length-parsing-in-legacy.patch
- commit 33860f2</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766402">- series.conf: cleanup
- move to "mainline soon" section:
  - patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch
- commit 07d55c3</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766403">- series.conf: refresh
- update upstream references and resort:
  - patches.suse/powerpc-fadump-Fix-inaccurate-CPU-state-info-in-vmco.patch
  - patches.suse/powerpc-handle-kdump-appropriately-with-crash_kexec_.patch
  - patches.suse/powerpc-watchdog-Avoid-holding-wd_smp_lock-over-prin.patch
  - patches.suse/powerpc-watchdog-Fix-missed-watchdog-reset-due-to-me.patch
  - patches.suse/powerpc-watchdog-Fix-wd_smp_last_reset_tb-reporting.patch
  - patches.suse/powerpc-watchdog-read-TB-close-to-where-it-is-used.patch
  - patches.suse/powerpc-watchdog-tighten-non-atomic-read-modify-writ.patch
- commit 72b7db7</changelog>
  <changelog author="osalvador@suse.de" date="1642939200">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit 84178b8</changelog>
</package>
<package pkgid="9451b04b055997dab49b9d774e759828592e0fd8d310581a78b1a0e212fc242f" name="dtb-al" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="150300.59.43.1"/>
  <changelog author="tiwai@suse.de" date="1642593600">- Add cherry-picked IDs for qemu fw_cfg patches
- commit 8f947ad</changelog>
  <changelog author="msuchanek@suse.de" date="1642593601">- powerpc/pseries/cpuhp: delete add/remove_by_count code
  (bsc#1065729).
- powerpc/pseries/cpuhp: cache node corrections (bsc#1065729).
- commit 9c04898</changelog>
  <changelog author="tiwai@suse.de" date="1642593602">- dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
  (git-fixes).
- dmaengine: at_xdmac: Fix lld view setting (git-fixes).
- dmaengine: at_xdmac: Fix concurrency over xfers_list
  (git-fixes).
- dmaengine: at_xdmac: Print debug message after realeasing the
  lock (git-fixes).
- dmaengine: at_xdmac: Don't start transactions at tx_submit level
  (git-fixes).
- Documentation: dmaengine: Correctly describe dmatest with
  channel unset (git-fixes).
- rpmsg: core: Clean up resources on announce_create failure
  (git-fixes).
- ACPI: APD: Check for NULL pointer after calling devm_ioremap()
  (git-fixes).
- Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2 (git-fixes).
- Input: ti_am335x_tsc - set ADCREFM for X configuration
  (git-fixes).
- i3c: master: dw: check return of dw_i3c_master_get_free_pos()
  (git-fixes).
- i3c: fix incorrect address slot lookup on 64-bit (git-fixes).
- commit 3d8614c</changelog>
  <changelog author="msuchanek@suse.de" date="1642593603">- powerpc/prom_init: Fix improper check of prom_getprop()
  (bsc#1065729).
- commit 954fa51</changelog>
  <changelog author="msuchanek@suse.de" date="1642593604">- powerpc/perf: Fix PMU callbacks to clear pending PMI before
  resetting an overflown PMC (bsc#1156395).
- commit 8bdce1e</changelog>
  <changelog author="mbenes@suse.cz" date="1642593605">- livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
- commit 27c7aa0</changelog>
  <changelog author="msuchanek@suse.de" date="1642593606">- blacklist.conf: Add 79ca6f74dae0 tpm: fix Atmel TPM crash caused by too frequent queries
  Breaks kABI, there is no report of this problem affecting users, likely
  broken old TPM firmware.
- commit 4ea9f96</changelog>
  <changelog author="msuchanek@suse.de" date="1642593607">- Update patches.suse/tpm-fix-potential-NULL-pointer-access-in-tpm_del_cha.patch
  (git-fixes bsc#1193660 ltc#195634).
- commit 11ac3f6</changelog>
  <changelog author="lhenriques@suse.de" date="1642680000">- fuse: Pass correct lend value to filemap_write_and_wait_range()
  (bsc#1194953).
- commit d2355ea</changelog>
  <changelog author="msuchanek@suse.de" date="1642680001">- blacklist.conf: Add a2308836880b powerpc: Fix arch_stack_walk() to have
  running function as first entry
  The stacktrace interface in this kernel version does not provide the
  parameters used to implement the fix.
- commit ee041a3</changelog>
  <changelog author="msuchanek@suse.de" date="1642680002">- powerpc/64s: fix program check interrupt emergency stack path
  (bsc#1156395).
- commit a3c26ed</changelog>
  <changelog author="msuchanek@suse.de" date="1642680003">- powerpc/traps: do not enable irqs in _exception (bsc#1065729).
- powerpc: add interrupt_cond_local_irq_enable helper
  (bsc#1065729).
- commit 65f660c</changelog>
  <changelog author="msuchanek@suse.de" date="1642680004">- powerpc/pseries/mobility: ignore ibm, platform-facilities
  updates (bsc#1065729).
- commit b253330</changelog>
  <changelog author="rgoldwyn@suse.com" date="1642680005">- vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).
- commit 4717473</changelog>
  <changelog author="vkarasulli@suse.de" date="1642680006">- moxart: fix potential use-after-free on remove path
  (bsc#1194516).
- commit 3fae095</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1642766400">- sctp: account stream padding length for reconf chunk
  (bsc#1194985 CVE-2022-0322).
- commit a6cab40</changelog>
  <changelog author="ddiss@suse.de" date="1642766401">- vfs: fs_context: fix up param length parsing in
  legacy_parse_param (CVE-2022-0185 bsc#1194517).
- Rename and retag following upstream merge from:
  patches.suse/vfs-Out-of-bounds-write-of-heap-buffer-in-fs_context-c.patch
  to patches.suse/vfs-fs_context-fix-up-param-length-parsing-in-legacy.patch
- commit 33860f2</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766402">- series.conf: cleanup
- move to "mainline soon" section:
  - patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch
- commit 07d55c3</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766403">- series.conf: refresh
- update upstream references and resort:
  - patches.suse/powerpc-fadump-Fix-inaccurate-CPU-state-info-in-vmco.patch
  - patches.suse/powerpc-handle-kdump-appropriately-with-crash_kexec_.patch
  - patches.suse/powerpc-watchdog-Avoid-holding-wd_smp_lock-over-prin.patch
  - patches.suse/powerpc-watchdog-Fix-missed-watchdog-reset-due-to-me.patch
  - patches.suse/powerpc-watchdog-Fix-wd_smp_last_reset_tb-reporting.patch
  - patches.suse/powerpc-watchdog-read-TB-close-to-where-it-is-used.patch
  - patches.suse/powerpc-watchdog-tighten-non-atomic-read-modify-writ.patch
- commit 72b7db7</changelog>
  <changelog author="osalvador@suse.de" date="1642939200">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit 84178b8</changelog>
</package>
<package pkgid="840f75e8c11fdc76f3228d636a77a1c93fe3a29188c257c1f931e5e7071d0bd7" name="dtb-zte" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="150300.59.43.1"/>
  <changelog author="tiwai@suse.de" date="1642593600">- Add cherry-picked IDs for qemu fw_cfg patches
- commit 8f947ad</changelog>
  <changelog author="msuchanek@suse.de" date="1642593601">- powerpc/pseries/cpuhp: delete add/remove_by_count code
  (bsc#1065729).
- powerpc/pseries/cpuhp: cache node corrections (bsc#1065729).
- commit 9c04898</changelog>
  <changelog author="tiwai@suse.de" date="1642593602">- dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
  (git-fixes).
- dmaengine: at_xdmac: Fix lld view setting (git-fixes).
- dmaengine: at_xdmac: Fix concurrency over xfers_list
  (git-fixes).
- dmaengine: at_xdmac: Print debug message after realeasing the
  lock (git-fixes).
- dmaengine: at_xdmac: Don't start transactions at tx_submit level
  (git-fixes).
- Documentation: dmaengine: Correctly describe dmatest with
  channel unset (git-fixes).
- rpmsg: core: Clean up resources on announce_create failure
  (git-fixes).
- ACPI: APD: Check for NULL pointer after calling devm_ioremap()
  (git-fixes).
- Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2 (git-fixes).
- Input: ti_am335x_tsc - set ADCREFM for X configuration
  (git-fixes).
- i3c: master: dw: check return of dw_i3c_master_get_free_pos()
  (git-fixes).
- i3c: fix incorrect address slot lookup on 64-bit (git-fixes).
- commit 3d8614c</changelog>
  <changelog author="msuchanek@suse.de" date="1642593603">- powerpc/prom_init: Fix improper check of prom_getprop()
  (bsc#1065729).
- commit 954fa51</changelog>
  <changelog author="msuchanek@suse.de" date="1642593604">- powerpc/perf: Fix PMU callbacks to clear pending PMI before
  resetting an overflown PMC (bsc#1156395).
- commit 8bdce1e</changelog>
  <changelog author="mbenes@suse.cz" date="1642593605">- livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
- commit 27c7aa0</changelog>
  <changelog author="msuchanek@suse.de" date="1642593606">- blacklist.conf: Add 79ca6f74dae0 tpm: fix Atmel TPM crash caused by too frequent queries
  Breaks kABI, there is no report of this problem affecting users, likely
  broken old TPM firmware.
- commit 4ea9f96</changelog>
  <changelog author="msuchanek@suse.de" date="1642593607">- Update patches.suse/tpm-fix-potential-NULL-pointer-access-in-tpm_del_cha.patch
  (git-fixes bsc#1193660 ltc#195634).
- commit 11ac3f6</changelog>
  <changelog author="lhenriques@suse.de" date="1642680000">- fuse: Pass correct lend value to filemap_write_and_wait_range()
  (bsc#1194953).
- commit d2355ea</changelog>
  <changelog author="msuchanek@suse.de" date="1642680001">- blacklist.conf: Add a2308836880b powerpc: Fix arch_stack_walk() to have
  running function as first entry
  The stacktrace interface in this kernel version does not provide the
  parameters used to implement the fix.
- commit ee041a3</changelog>
  <changelog author="msuchanek@suse.de" date="1642680002">- powerpc/64s: fix program check interrupt emergency stack path
  (bsc#1156395).
- commit a3c26ed</changelog>
  <changelog author="msuchanek@suse.de" date="1642680003">- powerpc/traps: do not enable irqs in _exception (bsc#1065729).
- powerpc: add interrupt_cond_local_irq_enable helper
  (bsc#1065729).
- commit 65f660c</changelog>
  <changelog author="msuchanek@suse.de" date="1642680004">- powerpc/pseries/mobility: ignore ibm, platform-facilities
  updates (bsc#1065729).
- commit b253330</changelog>
  <changelog author="rgoldwyn@suse.com" date="1642680005">- vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).
- commit 4717473</changelog>
  <changelog author="vkarasulli@suse.de" date="1642680006">- moxart: fix potential use-after-free on remove path
  (bsc#1194516).
- commit 3fae095</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1642766400">- sctp: account stream padding length for reconf chunk
  (bsc#1194985 CVE-2022-0322).
- commit a6cab40</changelog>
  <changelog author="ddiss@suse.de" date="1642766401">- vfs: fs_context: fix up param length parsing in
  legacy_parse_param (CVE-2022-0185 bsc#1194517).
- Rename and retag following upstream merge from:
  patches.suse/vfs-Out-of-bounds-write-of-heap-buffer-in-fs_context-c.patch
  to patches.suse/vfs-fs_context-fix-up-param-length-parsing-in-legacy.patch
- commit 33860f2</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766402">- series.conf: cleanup
- move to "mainline soon" section:
  - patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch
- commit 07d55c3</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766403">- series.conf: refresh
- update upstream references and resort:
  - patches.suse/powerpc-fadump-Fix-inaccurate-CPU-state-info-in-vmco.patch
  - patches.suse/powerpc-handle-kdump-appropriately-with-crash_kexec_.patch
  - patches.suse/powerpc-watchdog-Avoid-holding-wd_smp_lock-over-prin.patch
  - patches.suse/powerpc-watchdog-Fix-missed-watchdog-reset-due-to-me.patch
  - patches.suse/powerpc-watchdog-Fix-wd_smp_last_reset_tb-reporting.patch
  - patches.suse/powerpc-watchdog-read-TB-close-to-where-it-is-used.patch
  - patches.suse/powerpc-watchdog-tighten-non-atomic-read-modify-writ.patch
- commit 72b7db7</changelog>
  <changelog author="osalvador@suse.de" date="1642939200">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit 84178b8</changelog>
</package>
<package pkgid="8b641c6d573dcd193ec84080c0eb14797b80df1e6e761e83e51695c1d897fc61" name="gfs2-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.43.1"/>
  <changelog author="tiwai@suse.de" date="1642593600">- Add cherry-picked IDs for qemu fw_cfg patches
- commit 8f947ad</changelog>
  <changelog author="msuchanek@suse.de" date="1642593601">- powerpc/pseries/cpuhp: delete add/remove_by_count code
  (bsc#1065729).
- powerpc/pseries/cpuhp: cache node corrections (bsc#1065729).
- commit 9c04898</changelog>
  <changelog author="tiwai@suse.de" date="1642593602">- dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
  (git-fixes).
- dmaengine: at_xdmac: Fix lld view setting (git-fixes).
- dmaengine: at_xdmac: Fix concurrency over xfers_list
  (git-fixes).
- dmaengine: at_xdmac: Print debug message after realeasing the
  lock (git-fixes).
- dmaengine: at_xdmac: Don't start transactions at tx_submit level
  (git-fixes).
- Documentation: dmaengine: Correctly describe dmatest with
  channel unset (git-fixes).
- rpmsg: core: Clean up resources on announce_create failure
  (git-fixes).
- ACPI: APD: Check for NULL pointer after calling devm_ioremap()
  (git-fixes).
- Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2 (git-fixes).
- Input: ti_am335x_tsc - set ADCREFM for X configuration
  (git-fixes).
- i3c: master: dw: check return of dw_i3c_master_get_free_pos()
  (git-fixes).
- i3c: fix incorrect address slot lookup on 64-bit (git-fixes).
- commit 3d8614c</changelog>
  <changelog author="msuchanek@suse.de" date="1642593603">- powerpc/prom_init: Fix improper check of prom_getprop()
  (bsc#1065729).
- commit 954fa51</changelog>
  <changelog author="msuchanek@suse.de" date="1642593604">- powerpc/perf: Fix PMU callbacks to clear pending PMI before
  resetting an overflown PMC (bsc#1156395).
- commit 8bdce1e</changelog>
  <changelog author="mbenes@suse.cz" date="1642593605">- livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
- commit 27c7aa0</changelog>
  <changelog author="msuchanek@suse.de" date="1642593606">- blacklist.conf: Add 79ca6f74dae0 tpm: fix Atmel TPM crash caused by too frequent queries
  Breaks kABI, there is no report of this problem affecting users, likely
  broken old TPM firmware.
- commit 4ea9f96</changelog>
  <changelog author="msuchanek@suse.de" date="1642593607">- Update patches.suse/tpm-fix-potential-NULL-pointer-access-in-tpm_del_cha.patch
  (git-fixes bsc#1193660 ltc#195634).
- commit 11ac3f6</changelog>
  <changelog author="lhenriques@suse.de" date="1642680000">- fuse: Pass correct lend value to filemap_write_and_wait_range()
  (bsc#1194953).
- commit d2355ea</changelog>
  <changelog author="msuchanek@suse.de" date="1642680001">- blacklist.conf: Add a2308836880b powerpc: Fix arch_stack_walk() to have
  running function as first entry
  The stacktrace interface in this kernel version does not provide the
  parameters used to implement the fix.
- commit ee041a3</changelog>
  <changelog author="msuchanek@suse.de" date="1642680002">- powerpc/64s: fix program check interrupt emergency stack path
  (bsc#1156395).
- commit a3c26ed</changelog>
  <changelog author="msuchanek@suse.de" date="1642680003">- powerpc/traps: do not enable irqs in _exception (bsc#1065729).
- powerpc: add interrupt_cond_local_irq_enable helper
  (bsc#1065729).
- commit 65f660c</changelog>
  <changelog author="msuchanek@suse.de" date="1642680004">- powerpc/pseries/mobility: ignore ibm, platform-facilities
  updates (bsc#1065729).
- commit b253330</changelog>
  <changelog author="rgoldwyn@suse.com" date="1642680005">- vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).
- commit 4717473</changelog>
  <changelog author="vkarasulli@suse.de" date="1642680006">- moxart: fix potential use-after-free on remove path
  (bsc#1194516).
- commit 3fae095</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1642766400">- sctp: account stream padding length for reconf chunk
  (bsc#1194985 CVE-2022-0322).
- commit a6cab40</changelog>
  <changelog author="ddiss@suse.de" date="1642766401">- vfs: fs_context: fix up param length parsing in
  legacy_parse_param (CVE-2022-0185 bsc#1194517).
- Rename and retag following upstream merge from:
  patches.suse/vfs-Out-of-bounds-write-of-heap-buffer-in-fs_context-c.patch
  to patches.suse/vfs-fs_context-fix-up-param-length-parsing-in-legacy.patch
- commit 33860f2</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766402">- series.conf: cleanup
- move to "mainline soon" section:
  - patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch
- commit 07d55c3</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766403">- series.conf: refresh
- update upstream references and resort:
  - patches.suse/powerpc-fadump-Fix-inaccurate-CPU-state-info-in-vmco.patch
  - patches.suse/powerpc-handle-kdump-appropriately-with-crash_kexec_.patch
  - patches.suse/powerpc-watchdog-Avoid-holding-wd_smp_lock-over-prin.patch
  - patches.suse/powerpc-watchdog-Fix-missed-watchdog-reset-due-to-me.patch
  - patches.suse/powerpc-watchdog-Fix-wd_smp_last_reset_tb-reporting.patch
  - patches.suse/powerpc-watchdog-read-TB-close-to-where-it-is-used.patch
  - patches.suse/powerpc-watchdog-tighten-non-atomic-read-modify-writ.patch
- commit 72b7db7</changelog>
  <changelog author="osalvador@suse.de" date="1642939200">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit 84178b8</changelog>
</package>
<package pkgid="d0349b6815964d1f7361ec0e5c05a04da88b8c5493e7273159cb59c01192b276" name="ghostscript" arch="aarch64">
  <version epoch="0" ver="9.52" rel="158.1"/>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
</package>
<package pkgid="9a1529a5a20ceb72c5f7fafd2a866371cb90c6a4435c936f8be388de1fc49c1b" name="ghostscript" arch="ppc64le">
  <version epoch="0" ver="9.52" rel="158.1"/>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
</package>
<package pkgid="e38313acf238b5007166f578356c8c74189689806ee973359fe4c163f3d2d38f" name="ghostscript" arch="s390x">
  <version epoch="0" ver="9.52" rel="158.1"/>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
</package>
<package pkgid="c32285ea0a163ca73dba0a1794b0cc3a33038c2754499826506ffec8ec2d7231" name="ghostscript" arch="src">
  <version epoch="0" ver="9.52" rel="158.1"/>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
</package>
<package pkgid="0737eb895095c25e55b1fcca84aea1e33d39ee3c395ec9d1c884352328934bf5" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.52" rel="158.1"/>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
</package>
<package pkgid="60cfcbefc1041721f436a60b3e0c67c9b5c871cc3ce3bcbbe47aac118ff38736" name="ghostscript-devel" arch="aarch64">
  <version epoch="0" ver="9.52" rel="158.1"/>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
</package>
<package pkgid="1b231dd1d95f6176c7ba5b4e72d57493dd5202e153c55b6f8c0d7ca7187e88e9" name="ghostscript-devel" arch="ppc64le">
  <version epoch="0" ver="9.52" rel="158.1"/>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
</package>
<package pkgid="4e96473a7b52bc094ef5bd6a573408220796040cdd6792a579a3cb605ffbd290" name="ghostscript-devel" arch="s390x">
  <version epoch="0" ver="9.52" rel="158.1"/>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
</package>
<package pkgid="6d2e2b9b977c38ed579fa45456c348e0972b079635be17a862b32006d5f699b9" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.52" rel="158.1"/>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
</package>
<package pkgid="5c63c25f4e39889483b8d33e83075e3a938db7d50483e9d62033bfa38d284472" name="ghostscript-x11" arch="aarch64">
  <version epoch="0" ver="9.52" rel="158.1"/>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
</package>
<package pkgid="8fb9da7f495a298b89c3f175f7ee4ba756400012d211922d6d009508b0db8787" name="ghostscript-x11" arch="ppc64le">
  <version epoch="0" ver="9.52" rel="158.1"/>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
</package>
<package pkgid="c1992dbd1029ab46d94ca22a943d9c890ed5b4b91198c54510c9d991fece467c" name="ghostscript-x11" arch="s390x">
  <version epoch="0" ver="9.52" rel="158.1"/>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
</package>
<package pkgid="66d8af15d47fd402a43b662f7b4c6e249410e15863e10733b6783e1c70788009" name="ghostscript-x11" arch="x86_64">
  <version epoch="0" ver="9.52" rel="158.1"/>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
</package>
<package pkgid="4b6cb82e713f680148f81587f0e58e30a161055d285d7509fd00ec7c94db78dc" name="java-11-openjdk" arch="aarch64">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="82417ea51721a50275d4aed47c2516767f61c5f16dbdf6f2c7a22a7cc83b41cb" name="java-11-openjdk" arch="ppc64le">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="f555770bc08624780f52982840d99fb72529ae49b561bbd8b8adf295ef610e26" name="java-11-openjdk" arch="s390x">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="012fee54215976189d801201bf800745af50742c89d45268d1b3c2457d5332b6" name="java-11-openjdk" arch="src">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="1f122f994d96d6ee697b2356174adee1869fe413d0dada95d0024f43df4501c6" name="java-11-openjdk" arch="x86_64">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="81de5c622e8a451470f6e179a5bb2311c228bdd672741fe51f3efdca27e0a15b" name="java-11-openjdk-accessibility" arch="aarch64">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="97f74027db46e27343e9fd55f9073e7292ce87cbb58f455aaa45c817595ef71d" name="java-11-openjdk-accessibility" arch="ppc64le">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="f15e0f2a50fe0c37c9c691e5b7359240b21a3fe1729eabf943572ca64709066b" name="java-11-openjdk-accessibility" arch="s390x">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="a185a9c356c7928a779438140a3260e5e1fb9f7cc2cbcc8a15727b3d6b405306" name="java-11-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="c98e058c476c05a1a45ec748fe13bfeaec2b5a7cc2411a2e45c2d1fba04a314a" name="java-11-openjdk-demo" arch="aarch64">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="b11aa5a220130ee00c41b4af1fb58921bd661bc41fa5398c6d7d81f8828a4a23" name="java-11-openjdk-demo" arch="ppc64le">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="a023462b667043771a4c5800810c787ef3d9f465c792bd47a1e326aad5043e1e" name="java-11-openjdk-demo" arch="s390x">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="ad8695d20a3b8411ec6ae09e14bceeb4ee7a837de5cf7171d2eeda02e79a611d" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="e489deb4b7c89779a8b1e75204d7aeac68307dc47b9a0aa7261a53ae5bf3a7b9" name="java-11-openjdk-devel" arch="aarch64">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="156d261d0292162b970a4d17660242f2d28729845c14c18a69594d5771d457bb" name="java-11-openjdk-devel" arch="ppc64le">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="d1f3beb09d5b61bbc357b2ae3747d7d4158429074c626f6d33dc361eb57141cb" name="java-11-openjdk-devel" arch="s390x">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="4cc81f35e8c4765af56c0efe3469b63b3346104121eb692b87fb4385dec63113" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="0c4d901febb0fc3eb8c5472847ae128687d8c1584c41697a4b6d1a6794107c9b" name="java-11-openjdk-headless" arch="aarch64">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="9d25cdf34a7395e27002b02943c42ba42a7f4d748e81c5c5754f2dd12d6b92f8" name="java-11-openjdk-headless" arch="ppc64le">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="354fc3f9f2f576c76074627a64f64f1b37bd526751aa9898078760377f2ca4ea" name="java-11-openjdk-headless" arch="s390x">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="770335fbfc54aefd91dc21e22f532650b578447ade268410676f5434f9be5073" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="ef77b6813690a9af92e2227a0015085e5530e9975e9d6c7e770b4c702a4810f3" name="java-11-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="31f2ba34686b4ea93285f8bdfb6563e22546587e70b4b2fbcba9274cbc546e48" name="java-11-openjdk-jmods" arch="aarch64">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="764b138b651223b25976b254c63853acd6de7518e28d67f9007c42c2d92953da" name="java-11-openjdk-jmods" arch="ppc64le">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="a5ea0934cbd518201b0e3d8e00146ce747cbd5b77fcf3d15f491328a75456774" name="java-11-openjdk-jmods" arch="s390x">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="04d63dbdb7e1dd371287dc828fc7994987b5e61b90507df9aa5350a5f24dfc1a" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="1dcdb99cad74fa461ab553465b21a15cc5a3244e0fcea7ef0d8bbf6c38a47101" name="java-11-openjdk-src" arch="aarch64">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="cc649cd576fcb2c94933848394640ec0795d749205e9066136016032f31fa571" name="java-11-openjdk-src" arch="ppc64le">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="721927549ddfd1edc5b663fe2333540708746d4d3b3f2c2a24d8cb7775de9ba7" name="java-11-openjdk-src" arch="s390x">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="9f856775e073b8a4b652fa1f17d672f85ca51ec5fa421960a11fb001ce43bb14" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="0" ver="11.0.13.0" rel="3.68.1"/>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
</package>
<package pkgid="e80e23d7098d7224b0a6441fded05758f2caa43c58f8a1f9f070d3b603f31282" name="kernel-preempt" arch="src">
  <version epoch="0" ver="5.3.18" rel="150300.59.43.1"/>
  <changelog author="tiwai@suse.de" date="1642593600">- Add cherry-picked IDs for qemu fw_cfg patches
- commit 8f947ad</changelog>
  <changelog author="msuchanek@suse.de" date="1642593601">- powerpc/pseries/cpuhp: delete add/remove_by_count code
  (bsc#1065729).
- powerpc/pseries/cpuhp: cache node corrections (bsc#1065729).
- commit 9c04898</changelog>
  <changelog author="tiwai@suse.de" date="1642593602">- dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
  (git-fixes).
- dmaengine: at_xdmac: Fix lld view setting (git-fixes).
- dmaengine: at_xdmac: Fix concurrency over xfers_list
  (git-fixes).
- dmaengine: at_xdmac: Print debug message after realeasing the
  lock (git-fixes).
- dmaengine: at_xdmac: Don't start transactions at tx_submit level
  (git-fixes).
- Documentation: dmaengine: Correctly describe dmatest with
  channel unset (git-fixes).
- rpmsg: core: Clean up resources on announce_create failure
  (git-fixes).
- ACPI: APD: Check for NULL pointer after calling devm_ioremap()
  (git-fixes).
- Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2 (git-fixes).
- Input: ti_am335x_tsc - set ADCREFM for X configuration
  (git-fixes).
- i3c: master: dw: check return of dw_i3c_master_get_free_pos()
  (git-fixes).
- i3c: fix incorrect address slot lookup on 64-bit (git-fixes).
- commit 3d8614c</changelog>
  <changelog author="msuchanek@suse.de" date="1642593603">- powerpc/prom_init: Fix improper check of prom_getprop()
  (bsc#1065729).
- commit 954fa51</changelog>
  <changelog author="msuchanek@suse.de" date="1642593604">- powerpc/perf: Fix PMU callbacks to clear pending PMI before
  resetting an overflown PMC (bsc#1156395).
- commit 8bdce1e</changelog>
  <changelog author="mbenes@suse.cz" date="1642593605">- livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
- commit 27c7aa0</changelog>
  <changelog author="msuchanek@suse.de" date="1642593606">- blacklist.conf: Add 79ca6f74dae0 tpm: fix Atmel TPM crash caused by too frequent queries
  Breaks kABI, there is no report of this problem affecting users, likely
  broken old TPM firmware.
- commit 4ea9f96</changelog>
  <changelog author="msuchanek@suse.de" date="1642593607">- Update patches.suse/tpm-fix-potential-NULL-pointer-access-in-tpm_del_cha.patch
  (git-fixes bsc#1193660 ltc#195634).
- commit 11ac3f6</changelog>
  <changelog author="lhenriques@suse.de" date="1642680000">- fuse: Pass correct lend value to filemap_write_and_wait_range()
  (bsc#1194953).
- commit d2355ea</changelog>
  <changelog author="msuchanek@suse.de" date="1642680001">- blacklist.conf: Add a2308836880b powerpc: Fix arch_stack_walk() to have
  running function as first entry
  The stacktrace interface in this kernel version does not provide the
  parameters used to implement the fix.
- commit ee041a3</changelog>
  <changelog author="msuchanek@suse.de" date="1642680002">- powerpc/64s: fix program check interrupt emergency stack path
  (bsc#1156395).
- commit a3c26ed</changelog>
  <changelog author="msuchanek@suse.de" date="1642680003">- powerpc/traps: do not enable irqs in _exception (bsc#1065729).
- powerpc: add interrupt_cond_local_irq_enable helper
  (bsc#1065729).
- commit 65f660c</changelog>
  <changelog author="msuchanek@suse.de" date="1642680004">- powerpc/pseries/mobility: ignore ibm, platform-facilities
  updates (bsc#1065729).
- commit b253330</changelog>
  <changelog author="rgoldwyn@suse.com" date="1642680005">- vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).
- commit 4717473</changelog>
  <changelog author="vkarasulli@suse.de" date="1642680006">- moxart: fix potential use-after-free on remove path
  (bsc#1194516).
- commit 3fae095</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1642766400">- sctp: account stream padding length for reconf chunk
  (bsc#1194985 CVE-2022-0322).
- commit a6cab40</changelog>
  <changelog author="ddiss@suse.de" date="1642766401">- vfs: fs_context: fix up param length parsing in
  legacy_parse_param (CVE-2022-0185 bsc#1194517).
- Rename and retag following upstream merge from:
  patches.suse/vfs-Out-of-bounds-write-of-heap-buffer-in-fs_context-c.patch
  to patches.suse/vfs-fs_context-fix-up-param-length-parsing-in-legacy.patch
- commit 33860f2</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766402">- series.conf: cleanup
- move to "mainline soon" section:
  - patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch
- commit 07d55c3</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766403">- series.conf: refresh
- update upstream references and resort:
  - patches.suse/powerpc-fadump-Fix-inaccurate-CPU-state-info-in-vmco.patch
  - patches.suse/powerpc-handle-kdump-appropriately-with-crash_kexec_.patch
  - patches.suse/powerpc-watchdog-Avoid-holding-wd_smp_lock-over-prin.patch
  - patches.suse/powerpc-watchdog-Fix-missed-watchdog-reset-due-to-me.patch
  - patches.suse/powerpc-watchdog-Fix-wd_smp_last_reset_tb-reporting.patch
  - patches.suse/powerpc-watchdog-read-TB-close-to-where-it-is-used.patch
  - patches.suse/powerpc-watchdog-tighten-non-atomic-read-modify-writ.patch
- commit 72b7db7</changelog>
  <changelog author="osalvador@suse.de" date="1642939200">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit 84178b8</changelog>
</package>
<package pkgid="bdb243dce7a49061c6c94e546f321d0cf62df622caa638c9f1febf981eaf4162" name="kernel-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.43.1"/>
  <changelog author="tiwai@suse.de" date="1642593600">- Add cherry-picked IDs for qemu fw_cfg patches
- commit 8f947ad</changelog>
  <changelog author="msuchanek@suse.de" date="1642593601">- powerpc/pseries/cpuhp: delete add/remove_by_count code
  (bsc#1065729).
- powerpc/pseries/cpuhp: cache node corrections (bsc#1065729).
- commit 9c04898</changelog>
  <changelog author="tiwai@suse.de" date="1642593602">- dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
  (git-fixes).
- dmaengine: at_xdmac: Fix lld view setting (git-fixes).
- dmaengine: at_xdmac: Fix concurrency over xfers_list
  (git-fixes).
- dmaengine: at_xdmac: Print debug message after realeasing the
  lock (git-fixes).
- dmaengine: at_xdmac: Don't start transactions at tx_submit level
  (git-fixes).
- Documentation: dmaengine: Correctly describe dmatest with
  channel unset (git-fixes).
- rpmsg: core: Clean up resources on announce_create failure
  (git-fixes).
- ACPI: APD: Check for NULL pointer after calling devm_ioremap()
  (git-fixes).
- Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2 (git-fixes).
- Input: ti_am335x_tsc - set ADCREFM for X configuration
  (git-fixes).
- i3c: master: dw: check return of dw_i3c_master_get_free_pos()
  (git-fixes).
- i3c: fix incorrect address slot lookup on 64-bit (git-fixes).
- commit 3d8614c</changelog>
  <changelog author="msuchanek@suse.de" date="1642593603">- powerpc/prom_init: Fix improper check of prom_getprop()
  (bsc#1065729).
- commit 954fa51</changelog>
  <changelog author="msuchanek@suse.de" date="1642593604">- powerpc/perf: Fix PMU callbacks to clear pending PMI before
  resetting an overflown PMC (bsc#1156395).
- commit 8bdce1e</changelog>
  <changelog author="mbenes@suse.cz" date="1642593605">- livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
- commit 27c7aa0</changelog>
  <changelog author="msuchanek@suse.de" date="1642593606">- blacklist.conf: Add 79ca6f74dae0 tpm: fix Atmel TPM crash caused by too frequent queries
  Breaks kABI, there is no report of this problem affecting users, likely
  broken old TPM firmware.
- commit 4ea9f96</changelog>
  <changelog author="msuchanek@suse.de" date="1642593607">- Update patches.suse/tpm-fix-potential-NULL-pointer-access-in-tpm_del_cha.patch
  (git-fixes bsc#1193660 ltc#195634).
- commit 11ac3f6</changelog>
  <changelog author="lhenriques@suse.de" date="1642680000">- fuse: Pass correct lend value to filemap_write_and_wait_range()
  (bsc#1194953).
- commit d2355ea</changelog>
  <changelog author="msuchanek@suse.de" date="1642680001">- blacklist.conf: Add a2308836880b powerpc: Fix arch_stack_walk() to have
  running function as first entry
  The stacktrace interface in this kernel version does not provide the
  parameters used to implement the fix.
- commit ee041a3</changelog>
  <changelog author="msuchanek@suse.de" date="1642680002">- powerpc/64s: fix program check interrupt emergency stack path
  (bsc#1156395).
- commit a3c26ed</changelog>
  <changelog author="msuchanek@suse.de" date="1642680003">- powerpc/traps: do not enable irqs in _exception (bsc#1065729).
- powerpc: add interrupt_cond_local_irq_enable helper
  (bsc#1065729).
- commit 65f660c</changelog>
  <changelog author="msuchanek@suse.de" date="1642680004">- powerpc/pseries/mobility: ignore ibm, platform-facilities
  updates (bsc#1065729).
- commit b253330</changelog>
  <changelog author="rgoldwyn@suse.com" date="1642680005">- vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).
- commit 4717473</changelog>
  <changelog author="vkarasulli@suse.de" date="1642680006">- moxart: fix potential use-after-free on remove path
  (bsc#1194516).
- commit 3fae095</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1642766400">- sctp: account stream padding length for reconf chunk
  (bsc#1194985 CVE-2022-0322).
- commit a6cab40</changelog>
  <changelog author="ddiss@suse.de" date="1642766401">- vfs: fs_context: fix up param length parsing in
  legacy_parse_param (CVE-2022-0185 bsc#1194517).
- Rename and retag following upstream merge from:
  patches.suse/vfs-Out-of-bounds-write-of-heap-buffer-in-fs_context-c.patch
  to patches.suse/vfs-fs_context-fix-up-param-length-parsing-in-legacy.patch
- commit 33860f2</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766402">- series.conf: cleanup
- move to "mainline soon" section:
  - patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch
- commit 07d55c3</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766403">- series.conf: refresh
- update upstream references and resort:
  - patches.suse/powerpc-fadump-Fix-inaccurate-CPU-state-info-in-vmco.patch
  - patches.suse/powerpc-handle-kdump-appropriately-with-crash_kexec_.patch
  - patches.suse/powerpc-watchdog-Avoid-holding-wd_smp_lock-over-prin.patch
  - patches.suse/powerpc-watchdog-Fix-missed-watchdog-reset-due-to-me.patch
  - patches.suse/powerpc-watchdog-Fix-wd_smp_last_reset_tb-reporting.patch
  - patches.suse/powerpc-watchdog-read-TB-close-to-where-it-is-used.patch
  - patches.suse/powerpc-watchdog-tighten-non-atomic-read-modify-writ.patch
- commit 72b7db7</changelog>
  <changelog author="osalvador@suse.de" date="1642939200">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit 84178b8</changelog>
</package>
<package pkgid="b4ff2840e4b220f80329acdaff8732e08c17dd1d1c47411a3293114864916f1c" name="kernel-preempt-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.43.1"/>
  <changelog author="tiwai@suse.de" date="1642593600">- Add cherry-picked IDs for qemu fw_cfg patches
- commit 8f947ad</changelog>
  <changelog author="msuchanek@suse.de" date="1642593601">- powerpc/pseries/cpuhp: delete add/remove_by_count code
  (bsc#1065729).
- powerpc/pseries/cpuhp: cache node corrections (bsc#1065729).
- commit 9c04898</changelog>
  <changelog author="tiwai@suse.de" date="1642593602">- dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
  (git-fixes).
- dmaengine: at_xdmac: Fix lld view setting (git-fixes).
- dmaengine: at_xdmac: Fix concurrency over xfers_list
  (git-fixes).
- dmaengine: at_xdmac: Print debug message after realeasing the
  lock (git-fixes).
- dmaengine: at_xdmac: Don't start transactions at tx_submit level
  (git-fixes).
- Documentation: dmaengine: Correctly describe dmatest with
  channel unset (git-fixes).
- rpmsg: core: Clean up resources on announce_create failure
  (git-fixes).
- ACPI: APD: Check for NULL pointer after calling devm_ioremap()
  (git-fixes).
- Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2 (git-fixes).
- Input: ti_am335x_tsc - set ADCREFM for X configuration
  (git-fixes).
- i3c: master: dw: check return of dw_i3c_master_get_free_pos()
  (git-fixes).
- i3c: fix incorrect address slot lookup on 64-bit (git-fixes).
- commit 3d8614c</changelog>
  <changelog author="msuchanek@suse.de" date="1642593603">- powerpc/prom_init: Fix improper check of prom_getprop()
  (bsc#1065729).
- commit 954fa51</changelog>
  <changelog author="msuchanek@suse.de" date="1642593604">- powerpc/perf: Fix PMU callbacks to clear pending PMI before
  resetting an overflown PMC (bsc#1156395).
- commit 8bdce1e</changelog>
  <changelog author="mbenes@suse.cz" date="1642593605">- livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
- commit 27c7aa0</changelog>
  <changelog author="msuchanek@suse.de" date="1642593606">- blacklist.conf: Add 79ca6f74dae0 tpm: fix Atmel TPM crash caused by too frequent queries
  Breaks kABI, there is no report of this problem affecting users, likely
  broken old TPM firmware.
- commit 4ea9f96</changelog>
  <changelog author="msuchanek@suse.de" date="1642593607">- Update patches.suse/tpm-fix-potential-NULL-pointer-access-in-tpm_del_cha.patch
  (git-fixes bsc#1193660 ltc#195634).
- commit 11ac3f6</changelog>
  <changelog author="lhenriques@suse.de" date="1642680000">- fuse: Pass correct lend value to filemap_write_and_wait_range()
  (bsc#1194953).
- commit d2355ea</changelog>
  <changelog author="msuchanek@suse.de" date="1642680001">- blacklist.conf: Add a2308836880b powerpc: Fix arch_stack_walk() to have
  running function as first entry
  The stacktrace interface in this kernel version does not provide the
  parameters used to implement the fix.
- commit ee041a3</changelog>
  <changelog author="msuchanek@suse.de" date="1642680002">- powerpc/64s: fix program check interrupt emergency stack path
  (bsc#1156395).
- commit a3c26ed</changelog>
  <changelog author="msuchanek@suse.de" date="1642680003">- powerpc/traps: do not enable irqs in _exception (bsc#1065729).
- powerpc: add interrupt_cond_local_irq_enable helper
  (bsc#1065729).
- commit 65f660c</changelog>
  <changelog author="msuchanek@suse.de" date="1642680004">- powerpc/pseries/mobility: ignore ibm, platform-facilities
  updates (bsc#1065729).
- commit b253330</changelog>
  <changelog author="rgoldwyn@suse.com" date="1642680005">- vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).
- commit 4717473</changelog>
  <changelog author="vkarasulli@suse.de" date="1642680006">- moxart: fix potential use-after-free on remove path
  (bsc#1194516).
- commit 3fae095</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1642766400">- sctp: account stream padding length for reconf chunk
  (bsc#1194985 CVE-2022-0322).
- commit a6cab40</changelog>
  <changelog author="ddiss@suse.de" date="1642766401">- vfs: fs_context: fix up param length parsing in
  legacy_parse_param (CVE-2022-0185 bsc#1194517).
- Rename and retag following upstream merge from:
  patches.suse/vfs-Out-of-bounds-write-of-heap-buffer-in-fs_context-c.patch
  to patches.suse/vfs-fs_context-fix-up-param-length-parsing-in-legacy.patch
- commit 33860f2</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766402">- series.conf: cleanup
- move to "mainline soon" section:
  - patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch
- commit 07d55c3</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766403">- series.conf: refresh
- update upstream references and resort:
  - patches.suse/powerpc-fadump-Fix-inaccurate-CPU-state-info-in-vmco.patch
  - patches.suse/powerpc-handle-kdump-appropriately-with-crash_kexec_.patch
  - patches.suse/powerpc-watchdog-Avoid-holding-wd_smp_lock-over-prin.patch
  - patches.suse/powerpc-watchdog-Fix-missed-watchdog-reset-due-to-me.patch
  - patches.suse/powerpc-watchdog-Fix-wd_smp_last_reset_tb-reporting.patch
  - patches.suse/powerpc-watchdog-read-TB-close-to-where-it-is-used.patch
  - patches.suse/powerpc-watchdog-tighten-non-atomic-read-modify-writ.patch
- commit 72b7db7</changelog>
  <changelog author="osalvador@suse.de" date="1642939200">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit 84178b8</changelog>
</package>
<package pkgid="a62bf33f1235c3b0a2f553769800088bb430a2577bb649e3694707d427b53ff7" name="kernel-preempt-extra" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.43.1"/>
  <changelog author="tiwai@suse.de" date="1642593600">- Add cherry-picked IDs for qemu fw_cfg patches
- commit 8f947ad</changelog>
  <changelog author="msuchanek@suse.de" date="1642593601">- powerpc/pseries/cpuhp: delete add/remove_by_count code
  (bsc#1065729).
- powerpc/pseries/cpuhp: cache node corrections (bsc#1065729).
- commit 9c04898</changelog>
  <changelog author="tiwai@suse.de" date="1642593602">- dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
  (git-fixes).
- dmaengine: at_xdmac: Fix lld view setting (git-fixes).
- dmaengine: at_xdmac: Fix concurrency over xfers_list
  (git-fixes).
- dmaengine: at_xdmac: Print debug message after realeasing the
  lock (git-fixes).
- dmaengine: at_xdmac: Don't start transactions at tx_submit level
  (git-fixes).
- Documentation: dmaengine: Correctly describe dmatest with
  channel unset (git-fixes).
- rpmsg: core: Clean up resources on announce_create failure
  (git-fixes).
- ACPI: APD: Check for NULL pointer after calling devm_ioremap()
  (git-fixes).
- Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2 (git-fixes).
- Input: ti_am335x_tsc - set ADCREFM for X configuration
  (git-fixes).
- i3c: master: dw: check return of dw_i3c_master_get_free_pos()
  (git-fixes).
- i3c: fix incorrect address slot lookup on 64-bit (git-fixes).
- commit 3d8614c</changelog>
  <changelog author="msuchanek@suse.de" date="1642593603">- powerpc/prom_init: Fix improper check of prom_getprop()
  (bsc#1065729).
- commit 954fa51</changelog>
  <changelog author="msuchanek@suse.de" date="1642593604">- powerpc/perf: Fix PMU callbacks to clear pending PMI before
  resetting an overflown PMC (bsc#1156395).
- commit 8bdce1e</changelog>
  <changelog author="mbenes@suse.cz" date="1642593605">- livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
- commit 27c7aa0</changelog>
  <changelog author="msuchanek@suse.de" date="1642593606">- blacklist.conf: Add 79ca6f74dae0 tpm: fix Atmel TPM crash caused by too frequent queries
  Breaks kABI, there is no report of this problem affecting users, likely
  broken old TPM firmware.
- commit 4ea9f96</changelog>
  <changelog author="msuchanek@suse.de" date="1642593607">- Update patches.suse/tpm-fix-potential-NULL-pointer-access-in-tpm_del_cha.patch
  (git-fixes bsc#1193660 ltc#195634).
- commit 11ac3f6</changelog>
  <changelog author="lhenriques@suse.de" date="1642680000">- fuse: Pass correct lend value to filemap_write_and_wait_range()
  (bsc#1194953).
- commit d2355ea</changelog>
  <changelog author="msuchanek@suse.de" date="1642680001">- blacklist.conf: Add a2308836880b powerpc: Fix arch_stack_walk() to have
  running function as first entry
  The stacktrace interface in this kernel version does not provide the
  parameters used to implement the fix.
- commit ee041a3</changelog>
  <changelog author="msuchanek@suse.de" date="1642680002">- powerpc/64s: fix program check interrupt emergency stack path
  (bsc#1156395).
- commit a3c26ed</changelog>
  <changelog author="msuchanek@suse.de" date="1642680003">- powerpc/traps: do not enable irqs in _exception (bsc#1065729).
- powerpc: add interrupt_cond_local_irq_enable helper
  (bsc#1065729).
- commit 65f660c</changelog>
  <changelog author="msuchanek@suse.de" date="1642680004">- powerpc/pseries/mobility: ignore ibm, platform-facilities
  updates (bsc#1065729).
- commit b253330</changelog>
  <changelog author="rgoldwyn@suse.com" date="1642680005">- vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).
- commit 4717473</changelog>
  <changelog author="vkarasulli@suse.de" date="1642680006">- moxart: fix potential use-after-free on remove path
  (bsc#1194516).
- commit 3fae095</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1642766400">- sctp: account stream padding length for reconf chunk
  (bsc#1194985 CVE-2022-0322).
- commit a6cab40</changelog>
  <changelog author="ddiss@suse.de" date="1642766401">- vfs: fs_context: fix up param length parsing in
  legacy_parse_param (CVE-2022-0185 bsc#1194517).
- Rename and retag following upstream merge from:
  patches.suse/vfs-Out-of-bounds-write-of-heap-buffer-in-fs_context-c.patch
  to patches.suse/vfs-fs_context-fix-up-param-length-parsing-in-legacy.patch
- commit 33860f2</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766402">- series.conf: cleanup
- move to "mainline soon" section:
  - patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch
- commit 07d55c3</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766403">- series.conf: refresh
- update upstream references and resort:
  - patches.suse/powerpc-fadump-Fix-inaccurate-CPU-state-info-in-vmco.patch
  - patches.suse/powerpc-handle-kdump-appropriately-with-crash_kexec_.patch
  - patches.suse/powerpc-watchdog-Avoid-holding-wd_smp_lock-over-prin.patch
  - patches.suse/powerpc-watchdog-Fix-missed-watchdog-reset-due-to-me.patch
  - patches.suse/powerpc-watchdog-Fix-wd_smp_last_reset_tb-reporting.patch
  - patches.suse/powerpc-watchdog-read-TB-close-to-where-it-is-used.patch
  - patches.suse/powerpc-watchdog-tighten-non-atomic-read-modify-writ.patch
- commit 72b7db7</changelog>
  <changelog author="osalvador@suse.de" date="1642939200">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit 84178b8</changelog>
</package>
<package pkgid="fb4cf260afbe9d88f8e9cb0d9f78c48f7c8ec83ca9be816f86f9dc751ca4beb0" name="kernel-preempt-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.43.1"/>
  <changelog author="tiwai@suse.de" date="1642593600">- Add cherry-picked IDs for qemu fw_cfg patches
- commit 8f947ad</changelog>
  <changelog author="msuchanek@suse.de" date="1642593601">- powerpc/pseries/cpuhp: delete add/remove_by_count code
  (bsc#1065729).
- powerpc/pseries/cpuhp: cache node corrections (bsc#1065729).
- commit 9c04898</changelog>
  <changelog author="tiwai@suse.de" date="1642593602">- dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
  (git-fixes).
- dmaengine: at_xdmac: Fix lld view setting (git-fixes).
- dmaengine: at_xdmac: Fix concurrency over xfers_list
  (git-fixes).
- dmaengine: at_xdmac: Print debug message after realeasing the
  lock (git-fixes).
- dmaengine: at_xdmac: Don't start transactions at tx_submit level
  (git-fixes).
- Documentation: dmaengine: Correctly describe dmatest with
  channel unset (git-fixes).
- rpmsg: core: Clean up resources on announce_create failure
  (git-fixes).
- ACPI: APD: Check for NULL pointer after calling devm_ioremap()
  (git-fixes).
- Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2 (git-fixes).
- Input: ti_am335x_tsc - set ADCREFM for X configuration
  (git-fixes).
- i3c: master: dw: check return of dw_i3c_master_get_free_pos()
  (git-fixes).
- i3c: fix incorrect address slot lookup on 64-bit (git-fixes).
- commit 3d8614c</changelog>
  <changelog author="msuchanek@suse.de" date="1642593603">- powerpc/prom_init: Fix improper check of prom_getprop()
  (bsc#1065729).
- commit 954fa51</changelog>
  <changelog author="msuchanek@suse.de" date="1642593604">- powerpc/perf: Fix PMU callbacks to clear pending PMI before
  resetting an overflown PMC (bsc#1156395).
- commit 8bdce1e</changelog>
  <changelog author="mbenes@suse.cz" date="1642593605">- livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
- commit 27c7aa0</changelog>
  <changelog author="msuchanek@suse.de" date="1642593606">- blacklist.conf: Add 79ca6f74dae0 tpm: fix Atmel TPM crash caused by too frequent queries
  Breaks kABI, there is no report of this problem affecting users, likely
  broken old TPM firmware.
- commit 4ea9f96</changelog>
  <changelog author="msuchanek@suse.de" date="1642593607">- Update patches.suse/tpm-fix-potential-NULL-pointer-access-in-tpm_del_cha.patch
  (git-fixes bsc#1193660 ltc#195634).
- commit 11ac3f6</changelog>
  <changelog author="lhenriques@suse.de" date="1642680000">- fuse: Pass correct lend value to filemap_write_and_wait_range()
  (bsc#1194953).
- commit d2355ea</changelog>
  <changelog author="msuchanek@suse.de" date="1642680001">- blacklist.conf: Add a2308836880b powerpc: Fix arch_stack_walk() to have
  running function as first entry
  The stacktrace interface in this kernel version does not provide the
  parameters used to implement the fix.
- commit ee041a3</changelog>
  <changelog author="msuchanek@suse.de" date="1642680002">- powerpc/64s: fix program check interrupt emergency stack path
  (bsc#1156395).
- commit a3c26ed</changelog>
  <changelog author="msuchanek@suse.de" date="1642680003">- powerpc/traps: do not enable irqs in _exception (bsc#1065729).
- powerpc: add interrupt_cond_local_irq_enable helper
  (bsc#1065729).
- commit 65f660c</changelog>
  <changelog author="msuchanek@suse.de" date="1642680004">- powerpc/pseries/mobility: ignore ibm, platform-facilities
  updates (bsc#1065729).
- commit b253330</changelog>
  <changelog author="rgoldwyn@suse.com" date="1642680005">- vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).
- commit 4717473</changelog>
  <changelog author="vkarasulli@suse.de" date="1642680006">- moxart: fix potential use-after-free on remove path
  (bsc#1194516).
- commit 3fae095</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1642766400">- sctp: account stream padding length for reconf chunk
  (bsc#1194985 CVE-2022-0322).
- commit a6cab40</changelog>
  <changelog author="ddiss@suse.de" date="1642766401">- vfs: fs_context: fix up param length parsing in
  legacy_parse_param (CVE-2022-0185 bsc#1194517).
- Rename and retag following upstream merge from:
  patches.suse/vfs-Out-of-bounds-write-of-heap-buffer-in-fs_context-c.patch
  to patches.suse/vfs-fs_context-fix-up-param-length-parsing-in-legacy.patch
- commit 33860f2</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766402">- series.conf: cleanup
- move to "mainline soon" section:
  - patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch
- commit 07d55c3</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766403">- series.conf: refresh
- update upstream references and resort:
  - patches.suse/powerpc-fadump-Fix-inaccurate-CPU-state-info-in-vmco.patch
  - patches.suse/powerpc-handle-kdump-appropriately-with-crash_kexec_.patch
  - patches.suse/powerpc-watchdog-Avoid-holding-wd_smp_lock-over-prin.patch
  - patches.suse/powerpc-watchdog-Fix-missed-watchdog-reset-due-to-me.patch
  - patches.suse/powerpc-watchdog-Fix-wd_smp_last_reset_tb-reporting.patch
  - patches.suse/powerpc-watchdog-read-TB-close-to-where-it-is-used.patch
  - patches.suse/powerpc-watchdog-tighten-non-atomic-read-modify-writ.patch
- commit 72b7db7</changelog>
  <changelog author="osalvador@suse.de" date="1642939200">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit 84178b8</changelog>
</package>
<package pkgid="17c274dcfd023bc0d1a06b0af7c8a8aaf29d14c5bed168ffba92d0563967f8b9" name="kernel-preempt-optional" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.43.1"/>
  <changelog author="tiwai@suse.de" date="1642593600">- Add cherry-picked IDs for qemu fw_cfg patches
- commit 8f947ad</changelog>
  <changelog author="msuchanek@suse.de" date="1642593601">- powerpc/pseries/cpuhp: delete add/remove_by_count code
  (bsc#1065729).
- powerpc/pseries/cpuhp: cache node corrections (bsc#1065729).
- commit 9c04898</changelog>
  <changelog author="tiwai@suse.de" date="1642593602">- dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
  (git-fixes).
- dmaengine: at_xdmac: Fix lld view setting (git-fixes).
- dmaengine: at_xdmac: Fix concurrency over xfers_list
  (git-fixes).
- dmaengine: at_xdmac: Print debug message after realeasing the
  lock (git-fixes).
- dmaengine: at_xdmac: Don't start transactions at tx_submit level
  (git-fixes).
- Documentation: dmaengine: Correctly describe dmatest with
  channel unset (git-fixes).
- rpmsg: core: Clean up resources on announce_create failure
  (git-fixes).
- ACPI: APD: Check for NULL pointer after calling devm_ioremap()
  (git-fixes).
- Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2 (git-fixes).
- Input: ti_am335x_tsc - set ADCREFM for X configuration
  (git-fixes).
- i3c: master: dw: check return of dw_i3c_master_get_free_pos()
  (git-fixes).
- i3c: fix incorrect address slot lookup on 64-bit (git-fixes).
- commit 3d8614c</changelog>
  <changelog author="msuchanek@suse.de" date="1642593603">- powerpc/prom_init: Fix improper check of prom_getprop()
  (bsc#1065729).
- commit 954fa51</changelog>
  <changelog author="msuchanek@suse.de" date="1642593604">- powerpc/perf: Fix PMU callbacks to clear pending PMI before
  resetting an overflown PMC (bsc#1156395).
- commit 8bdce1e</changelog>
  <changelog author="mbenes@suse.cz" date="1642593605">- livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
- commit 27c7aa0</changelog>
  <changelog author="msuchanek@suse.de" date="1642593606">- blacklist.conf: Add 79ca6f74dae0 tpm: fix Atmel TPM crash caused by too frequent queries
  Breaks kABI, there is no report of this problem affecting users, likely
  broken old TPM firmware.
- commit 4ea9f96</changelog>
  <changelog author="msuchanek@suse.de" date="1642593607">- Update patches.suse/tpm-fix-potential-NULL-pointer-access-in-tpm_del_cha.patch
  (git-fixes bsc#1193660 ltc#195634).
- commit 11ac3f6</changelog>
  <changelog author="lhenriques@suse.de" date="1642680000">- fuse: Pass correct lend value to filemap_write_and_wait_range()
  (bsc#1194953).
- commit d2355ea</changelog>
  <changelog author="msuchanek@suse.de" date="1642680001">- blacklist.conf: Add a2308836880b powerpc: Fix arch_stack_walk() to have
  running function as first entry
  The stacktrace interface in this kernel version does not provide the
  parameters used to implement the fix.
- commit ee041a3</changelog>
  <changelog author="msuchanek@suse.de" date="1642680002">- powerpc/64s: fix program check interrupt emergency stack path
  (bsc#1156395).
- commit a3c26ed</changelog>
  <changelog author="msuchanek@suse.de" date="1642680003">- powerpc/traps: do not enable irqs in _exception (bsc#1065729).
- powerpc: add interrupt_cond_local_irq_enable helper
  (bsc#1065729).
- commit 65f660c</changelog>
  <changelog author="msuchanek@suse.de" date="1642680004">- powerpc/pseries/mobility: ignore ibm, platform-facilities
  updates (bsc#1065729).
- commit b253330</changelog>
  <changelog author="rgoldwyn@suse.com" date="1642680005">- vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).
- commit 4717473</changelog>
  <changelog author="vkarasulli@suse.de" date="1642680006">- moxart: fix potential use-after-free on remove path
  (bsc#1194516).
- commit 3fae095</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1642766400">- sctp: account stream padding length for reconf chunk
  (bsc#1194985 CVE-2022-0322).
- commit a6cab40</changelog>
  <changelog author="ddiss@suse.de" date="1642766401">- vfs: fs_context: fix up param length parsing in
  legacy_parse_param (CVE-2022-0185 bsc#1194517).
- Rename and retag following upstream merge from:
  patches.suse/vfs-Out-of-bounds-write-of-heap-buffer-in-fs_context-c.patch
  to patches.suse/vfs-fs_context-fix-up-param-length-parsing-in-legacy.patch
- commit 33860f2</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766402">- series.conf: cleanup
- move to "mainline soon" section:
  - patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch
- commit 07d55c3</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766403">- series.conf: refresh
- update upstream references and resort:
  - patches.suse/powerpc-fadump-Fix-inaccurate-CPU-state-info-in-vmco.patch
  - patches.suse/powerpc-handle-kdump-appropriately-with-crash_kexec_.patch
  - patches.suse/powerpc-watchdog-Avoid-holding-wd_smp_lock-over-prin.patch
  - patches.suse/powerpc-watchdog-Fix-missed-watchdog-reset-due-to-me.patch
  - patches.suse/powerpc-watchdog-Fix-wd_smp_last_reset_tb-reporting.patch
  - patches.suse/powerpc-watchdog-read-TB-close-to-where-it-is-used.patch
  - patches.suse/powerpc-watchdog-tighten-non-atomic-read-modify-writ.patch
- commit 72b7db7</changelog>
  <changelog author="osalvador@suse.de" date="1642939200">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit 84178b8</changelog>
</package>
<package pkgid="5e7be68825d0ed9934f6d14b6647d4e0f1f473a6a43795318837c28382d93625" name="kselftests-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.43.1"/>
  <changelog author="tiwai@suse.de" date="1642593600">- Add cherry-picked IDs for qemu fw_cfg patches
- commit 8f947ad</changelog>
  <changelog author="msuchanek@suse.de" date="1642593601">- powerpc/pseries/cpuhp: delete add/remove_by_count code
  (bsc#1065729).
- powerpc/pseries/cpuhp: cache node corrections (bsc#1065729).
- commit 9c04898</changelog>
  <changelog author="tiwai@suse.de" date="1642593602">- dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
  (git-fixes).
- dmaengine: at_xdmac: Fix lld view setting (git-fixes).
- dmaengine: at_xdmac: Fix concurrency over xfers_list
  (git-fixes).
- dmaengine: at_xdmac: Print debug message after realeasing the
  lock (git-fixes).
- dmaengine: at_xdmac: Don't start transactions at tx_submit level
  (git-fixes).
- Documentation: dmaengine: Correctly describe dmatest with
  channel unset (git-fixes).
- rpmsg: core: Clean up resources on announce_create failure
  (git-fixes).
- ACPI: APD: Check for NULL pointer after calling devm_ioremap()
  (git-fixes).
- Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2 (git-fixes).
- Input: ti_am335x_tsc - set ADCREFM for X configuration
  (git-fixes).
- i3c: master: dw: check return of dw_i3c_master_get_free_pos()
  (git-fixes).
- i3c: fix incorrect address slot lookup on 64-bit (git-fixes).
- commit 3d8614c</changelog>
  <changelog author="msuchanek@suse.de" date="1642593603">- powerpc/prom_init: Fix improper check of prom_getprop()
  (bsc#1065729).
- commit 954fa51</changelog>
  <changelog author="msuchanek@suse.de" date="1642593604">- powerpc/perf: Fix PMU callbacks to clear pending PMI before
  resetting an overflown PMC (bsc#1156395).
- commit 8bdce1e</changelog>
  <changelog author="mbenes@suse.cz" date="1642593605">- livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
- commit 27c7aa0</changelog>
  <changelog author="msuchanek@suse.de" date="1642593606">- blacklist.conf: Add 79ca6f74dae0 tpm: fix Atmel TPM crash caused by too frequent queries
  Breaks kABI, there is no report of this problem affecting users, likely
  broken old TPM firmware.
- commit 4ea9f96</changelog>
  <changelog author="msuchanek@suse.de" date="1642593607">- Update patches.suse/tpm-fix-potential-NULL-pointer-access-in-tpm_del_cha.patch
  (git-fixes bsc#1193660 ltc#195634).
- commit 11ac3f6</changelog>
  <changelog author="lhenriques@suse.de" date="1642680000">- fuse: Pass correct lend value to filemap_write_and_wait_range()
  (bsc#1194953).
- commit d2355ea</changelog>
  <changelog author="msuchanek@suse.de" date="1642680001">- blacklist.conf: Add a2308836880b powerpc: Fix arch_stack_walk() to have
  running function as first entry
  The stacktrace interface in this kernel version does not provide the
  parameters used to implement the fix.
- commit ee041a3</changelog>
  <changelog author="msuchanek@suse.de" date="1642680002">- powerpc/64s: fix program check interrupt emergency stack path
  (bsc#1156395).
- commit a3c26ed</changelog>
  <changelog author="msuchanek@suse.de" date="1642680003">- powerpc/traps: do not enable irqs in _exception (bsc#1065729).
- powerpc: add interrupt_cond_local_irq_enable helper
  (bsc#1065729).
- commit 65f660c</changelog>
  <changelog author="msuchanek@suse.de" date="1642680004">- powerpc/pseries/mobility: ignore ibm, platform-facilities
  updates (bsc#1065729).
- commit b253330</changelog>
  <changelog author="rgoldwyn@suse.com" date="1642680005">- vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).
- commit 4717473</changelog>
  <changelog author="vkarasulli@suse.de" date="1642680006">- moxart: fix potential use-after-free on remove path
  (bsc#1194516).
- commit 3fae095</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1642766400">- sctp: account stream padding length for reconf chunk
  (bsc#1194985 CVE-2022-0322).
- commit a6cab40</changelog>
  <changelog author="ddiss@suse.de" date="1642766401">- vfs: fs_context: fix up param length parsing in
  legacy_parse_param (CVE-2022-0185 bsc#1194517).
- Rename and retag following upstream merge from:
  patches.suse/vfs-Out-of-bounds-write-of-heap-buffer-in-fs_context-c.patch
  to patches.suse/vfs-fs_context-fix-up-param-length-parsing-in-legacy.patch
- commit 33860f2</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766402">- series.conf: cleanup
- move to "mainline soon" section:
  - patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch
- commit 07d55c3</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766403">- series.conf: refresh
- update upstream references and resort:
  - patches.suse/powerpc-fadump-Fix-inaccurate-CPU-state-info-in-vmco.patch
  - patches.suse/powerpc-handle-kdump-appropriately-with-crash_kexec_.patch
  - patches.suse/powerpc-watchdog-Avoid-holding-wd_smp_lock-over-prin.patch
  - patches.suse/powerpc-watchdog-Fix-missed-watchdog-reset-due-to-me.patch
  - patches.suse/powerpc-watchdog-Fix-wd_smp_last_reset_tb-reporting.patch
  - patches.suse/powerpc-watchdog-read-TB-close-to-where-it-is-used.patch
  - patches.suse/powerpc-watchdog-tighten-non-atomic-read-modify-writ.patch
- commit 72b7db7</changelog>
  <changelog author="osalvador@suse.de" date="1642939200">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit 84178b8</changelog>
</package>
<package pkgid="04f2769995416b4c7607695be218398b574f28ce81dae61cbf4c91f536d816cd" name="libZXing1" arch="aarch64">
  <version epoch="0" ver="1.2.0" rel="9.7.1"/>
  <changelog author="lbeltrame@kde.org" date="1558094400">- Initial package for openSUSE
- Add upstream patch to add proper installability and library
  versioning:
  * fix-library-installation-and-versioning.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1558526400">- Fixup URL and Source</changelog>
  <changelog author="jengelh@inai.de" date="1558612800">- Trim metadata redundancies from description.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add add-missing-includes-of-stdexcept-header.patch
  in order to fix boo#1158377.</changelog>
  <changelog author="christophe@krop.fr" date="1597579200">- Update to 1.1.0
  * Add Python binding
  * Bug fixes from upstream XZing project
  * Many performance improvements for 1D readers
  * More meta-data exported when reading specific format
  * Minor bug fixes and improvements for corner cases
  * Improve DataMatrix encoder
  * Add interface to simplify basic usage
  * WASM API to support pixels array as input
  * Few minor bug fixes
  * A new and (hopefully) 'future proof' single ReadBarcode entry point
    into the decoding functionality.
  * The LuminanceSource based API is now deprecated but still compiles.
  * A new BarcodeFormats flag type to specify the set of barcodes to look for.
  * Deprecated unrelyable Result::resultPoints in favor of well defined
    Result::position.
  * Deprecated Result::metadata() -&gt; ORIENTATION in favor
    of Result::orientation.
  * New Binarizer enum in DecodeHints to specify the binarizer for
    the ReadBarcode API.
  * New DecodeHints::isPure property to speed up detection for
    'pure' input use-cases.
  * New 'unified' CMake structure to build (most) of the project from
    the top-level project.
  * New ZXingReader and ZXingWriter example code also meant for distributing.
  * New simplified and consistent Python API (breaking change)
  * ReedSolomon error detection code 2x speedup.
  * Enable basic MaxiCode support.
  * Fix coutry-code metatdata decoding for UPC/EAN codes.
  * Slightly improved QRCode detection for rotated symbols.
  * Faster PDF417 decoder.
  * Lots of minor code readability and general cleanup improvements.
- Drop patches:
  * add-missing-includes-of-stdexcept-header.patch
  * fix-library-installation-and-versioning.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add fix for pkg-config file so the version and library are set properly
  in the resulting .pc file:
  * fix-pkg-config-file.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603454400">- Add baselibs.conf</changelog>
  <changelog author="sflees@suse.de" date="1610712000">- Use %cmake_build instead of %make_jobs
- Shouldn't need -DBUILD_SHARED_LIBRARY=ON</changelog>
  <changelog author="christophe@krop.fr" date="1612872000">- Update to 1.1.1. No changelog available.
- Drop fix-pkg-config-file.patch. Merged upstream
- Add 0001-Fix-build-with-GCC-11.patch to fix GCC 11 build
  issues (boo#1181915)</changelog>
  <changelog author="rpm@fthiessen.de" date="1622289600">- Update to 1.2.0
  * new BarcodeFormat names, old ones are deprecated
  * new ZXingQtCamReader demo app based on QtMultimedia and QtQuick
  * new QRCode reader, faster and better support for rotated symbols
  * added Structured Append support for DataMatrix, Aztec and MaxiCode
  * added DMRE support for DataMatrix
  * switch to the reimplemented 1D detectors, about 5x faster
  * a lot faster and more capable isPure detection for all 2D codes
  * 20% faster ReedSolomon error correcting
  * PDF417 is faster and supports flipped symbols
  * reduced false positive rate for UPC/EAN barcodes and improved
    Add-On symbol handling
  * proper ECI handling in all 2D barcodes
  * much improved python wrapper
  * deprecate the use of ResultMetadata
- Add cmake-check-system-first.patch
- Drop upstream merged 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635940800">- Use the updated cmake3-full package instead of cmake on SLE12
- Do not build examples on SLE12
- Only build blackbox tests on TW</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636113600">- Do not build examples to avoid a cycle with QT5Multimedia</changelog>
  <changelog author="danilo.spinella@suse.com" date="1642593600">- Update stb_image/stb_image_write to include the fixes for
  the following CVEs:
  CVE-2021-28021, bsc#1191743
  CVE-2021-42715, bsc#1191942
  CVE-2021-42716, bsc#1191944
  * 269.patch</changelog>
</package>
<package pkgid="f814db231ecb80a9d408b1301900ce1bc7dd765a1e3f4cb361ac0cad3b11f001" name="libZXing1" arch="ppc64le">
  <version epoch="0" ver="1.2.0" rel="9.7.1"/>
  <changelog author="lbeltrame@kde.org" date="1558094400">- Initial package for openSUSE
- Add upstream patch to add proper installability and library
  versioning:
  * fix-library-installation-and-versioning.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1558526400">- Fixup URL and Source</changelog>
  <changelog author="jengelh@inai.de" date="1558612800">- Trim metadata redundancies from description.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add add-missing-includes-of-stdexcept-header.patch
  in order to fix boo#1158377.</changelog>
  <changelog author="christophe@krop.fr" date="1597579200">- Update to 1.1.0
  * Add Python binding
  * Bug fixes from upstream XZing project
  * Many performance improvements for 1D readers
  * More meta-data exported when reading specific format
  * Minor bug fixes and improvements for corner cases
  * Improve DataMatrix encoder
  * Add interface to simplify basic usage
  * WASM API to support pixels array as input
  * Few minor bug fixes
  * A new and (hopefully) 'future proof' single ReadBarcode entry point
    into the decoding functionality.
  * The LuminanceSource based API is now deprecated but still compiles.
  * A new BarcodeFormats flag type to specify the set of barcodes to look for.
  * Deprecated unrelyable Result::resultPoints in favor of well defined
    Result::position.
  * Deprecated Result::metadata() -&gt; ORIENTATION in favor
    of Result::orientation.
  * New Binarizer enum in DecodeHints to specify the binarizer for
    the ReadBarcode API.
  * New DecodeHints::isPure property to speed up detection for
    'pure' input use-cases.
  * New 'unified' CMake structure to build (most) of the project from
    the top-level project.
  * New ZXingReader and ZXingWriter example code also meant for distributing.
  * New simplified and consistent Python API (breaking change)
  * ReedSolomon error detection code 2x speedup.
  * Enable basic MaxiCode support.
  * Fix coutry-code metatdata decoding for UPC/EAN codes.
  * Slightly improved QRCode detection for rotated symbols.
  * Faster PDF417 decoder.
  * Lots of minor code readability and general cleanup improvements.
- Drop patches:
  * add-missing-includes-of-stdexcept-header.patch
  * fix-library-installation-and-versioning.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add fix for pkg-config file so the version and library are set properly
  in the resulting .pc file:
  * fix-pkg-config-file.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603454400">- Add baselibs.conf</changelog>
  <changelog author="sflees@suse.de" date="1610712000">- Use %cmake_build instead of %make_jobs
- Shouldn't need -DBUILD_SHARED_LIBRARY=ON</changelog>
  <changelog author="christophe@krop.fr" date="1612872000">- Update to 1.1.1. No changelog available.
- Drop fix-pkg-config-file.patch. Merged upstream
- Add 0001-Fix-build-with-GCC-11.patch to fix GCC 11 build
  issues (boo#1181915)</changelog>
  <changelog author="rpm@fthiessen.de" date="1622289600">- Update to 1.2.0
  * new BarcodeFormat names, old ones are deprecated
  * new ZXingQtCamReader demo app based on QtMultimedia and QtQuick
  * new QRCode reader, faster and better support for rotated symbols
  * added Structured Append support for DataMatrix, Aztec and MaxiCode
  * added DMRE support for DataMatrix
  * switch to the reimplemented 1D detectors, about 5x faster
  * a lot faster and more capable isPure detection for all 2D codes
  * 20% faster ReedSolomon error correcting
  * PDF417 is faster and supports flipped symbols
  * reduced false positive rate for UPC/EAN barcodes and improved
    Add-On symbol handling
  * proper ECI handling in all 2D barcodes
  * much improved python wrapper
  * deprecate the use of ResultMetadata
- Add cmake-check-system-first.patch
- Drop upstream merged 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635940800">- Use the updated cmake3-full package instead of cmake on SLE12
- Do not build examples on SLE12
- Only build blackbox tests on TW</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636113600">- Do not build examples to avoid a cycle with QT5Multimedia</changelog>
  <changelog author="danilo.spinella@suse.com" date="1642593600">- Update stb_image/stb_image_write to include the fixes for
  the following CVEs:
  CVE-2021-28021, bsc#1191743
  CVE-2021-42715, bsc#1191942
  CVE-2021-42716, bsc#1191944
  * 269.patch</changelog>
</package>
<package pkgid="8f5700709fac590db3cab9668708aaac6ecf0e98f191e6ef80f91253b9fcf34c" name="libZXing1" arch="s390x">
  <version epoch="0" ver="1.2.0" rel="9.7.1"/>
  <changelog author="lbeltrame@kde.org" date="1558094400">- Initial package for openSUSE
- Add upstream patch to add proper installability and library
  versioning:
  * fix-library-installation-and-versioning.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1558526400">- Fixup URL and Source</changelog>
  <changelog author="jengelh@inai.de" date="1558612800">- Trim metadata redundancies from description.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add add-missing-includes-of-stdexcept-header.patch
  in order to fix boo#1158377.</changelog>
  <changelog author="christophe@krop.fr" date="1597579200">- Update to 1.1.0
  * Add Python binding
  * Bug fixes from upstream XZing project
  * Many performance improvements for 1D readers
  * More meta-data exported when reading specific format
  * Minor bug fixes and improvements for corner cases
  * Improve DataMatrix encoder
  * Add interface to simplify basic usage
  * WASM API to support pixels array as input
  * Few minor bug fixes
  * A new and (hopefully) 'future proof' single ReadBarcode entry point
    into the decoding functionality.
  * The LuminanceSource based API is now deprecated but still compiles.
  * A new BarcodeFormats flag type to specify the set of barcodes to look for.
  * Deprecated unrelyable Result::resultPoints in favor of well defined
    Result::position.
  * Deprecated Result::metadata() -&gt; ORIENTATION in favor
    of Result::orientation.
  * New Binarizer enum in DecodeHints to specify the binarizer for
    the ReadBarcode API.
  * New DecodeHints::isPure property to speed up detection for
    'pure' input use-cases.
  * New 'unified' CMake structure to build (most) of the project from
    the top-level project.
  * New ZXingReader and ZXingWriter example code also meant for distributing.
  * New simplified and consistent Python API (breaking change)
  * ReedSolomon error detection code 2x speedup.
  * Enable basic MaxiCode support.
  * Fix coutry-code metatdata decoding for UPC/EAN codes.
  * Slightly improved QRCode detection for rotated symbols.
  * Faster PDF417 decoder.
  * Lots of minor code readability and general cleanup improvements.
- Drop patches:
  * add-missing-includes-of-stdexcept-header.patch
  * fix-library-installation-and-versioning.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add fix for pkg-config file so the version and library are set properly
  in the resulting .pc file:
  * fix-pkg-config-file.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603454400">- Add baselibs.conf</changelog>
  <changelog author="sflees@suse.de" date="1610712000">- Use %cmake_build instead of %make_jobs
- Shouldn't need -DBUILD_SHARED_LIBRARY=ON</changelog>
  <changelog author="christophe@krop.fr" date="1612872000">- Update to 1.1.1. No changelog available.
- Drop fix-pkg-config-file.patch. Merged upstream
- Add 0001-Fix-build-with-GCC-11.patch to fix GCC 11 build
  issues (boo#1181915)</changelog>
  <changelog author="rpm@fthiessen.de" date="1622289600">- Update to 1.2.0
  * new BarcodeFormat names, old ones are deprecated
  * new ZXingQtCamReader demo app based on QtMultimedia and QtQuick
  * new QRCode reader, faster and better support for rotated symbols
  * added Structured Append support for DataMatrix, Aztec and MaxiCode
  * added DMRE support for DataMatrix
  * switch to the reimplemented 1D detectors, about 5x faster
  * a lot faster and more capable isPure detection for all 2D codes
  * 20% faster ReedSolomon error correcting
  * PDF417 is faster and supports flipped symbols
  * reduced false positive rate for UPC/EAN barcodes and improved
    Add-On symbol handling
  * proper ECI handling in all 2D barcodes
  * much improved python wrapper
  * deprecate the use of ResultMetadata
- Add cmake-check-system-first.patch
- Drop upstream merged 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635940800">- Use the updated cmake3-full package instead of cmake on SLE12
- Do not build examples on SLE12
- Only build blackbox tests on TW</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636113600">- Do not build examples to avoid a cycle with QT5Multimedia</changelog>
  <changelog author="danilo.spinella@suse.com" date="1642593600">- Update stb_image/stb_image_write to include the fixes for
  the following CVEs:
  CVE-2021-28021, bsc#1191743
  CVE-2021-42715, bsc#1191942
  CVE-2021-42716, bsc#1191944
  * 269.patch</changelog>
</package>
<package pkgid="4fd12e28a4b0efeb53a9634dda912fbcef4ba98ba4ad548e28131ddcc73fd7ce" name="libZXing1" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="9.7.1"/>
  <changelog author="lbeltrame@kde.org" date="1558094400">- Initial package for openSUSE
- Add upstream patch to add proper installability and library
  versioning:
  * fix-library-installation-and-versioning.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1558526400">- Fixup URL and Source</changelog>
  <changelog author="jengelh@inai.de" date="1558612800">- Trim metadata redundancies from description.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add add-missing-includes-of-stdexcept-header.patch
  in order to fix boo#1158377.</changelog>
  <changelog author="christophe@krop.fr" date="1597579200">- Update to 1.1.0
  * Add Python binding
  * Bug fixes from upstream XZing project
  * Many performance improvements for 1D readers
  * More meta-data exported when reading specific format
  * Minor bug fixes and improvements for corner cases
  * Improve DataMatrix encoder
  * Add interface to simplify basic usage
  * WASM API to support pixels array as input
  * Few minor bug fixes
  * A new and (hopefully) 'future proof' single ReadBarcode entry point
    into the decoding functionality.
  * The LuminanceSource based API is now deprecated but still compiles.
  * A new BarcodeFormats flag type to specify the set of barcodes to look for.
  * Deprecated unrelyable Result::resultPoints in favor of well defined
    Result::position.
  * Deprecated Result::metadata() -&gt; ORIENTATION in favor
    of Result::orientation.
  * New Binarizer enum in DecodeHints to specify the binarizer for
    the ReadBarcode API.
  * New DecodeHints::isPure property to speed up detection for
    'pure' input use-cases.
  * New 'unified' CMake structure to build (most) of the project from
    the top-level project.
  * New ZXingReader and ZXingWriter example code also meant for distributing.
  * New simplified and consistent Python API (breaking change)
  * ReedSolomon error detection code 2x speedup.
  * Enable basic MaxiCode support.
  * Fix coutry-code metatdata decoding for UPC/EAN codes.
  * Slightly improved QRCode detection for rotated symbols.
  * Faster PDF417 decoder.
  * Lots of minor code readability and general cleanup improvements.
- Drop patches:
  * add-missing-includes-of-stdexcept-header.patch
  * fix-library-installation-and-versioning.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add fix for pkg-config file so the version and library are set properly
  in the resulting .pc file:
  * fix-pkg-config-file.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603454400">- Add baselibs.conf</changelog>
  <changelog author="sflees@suse.de" date="1610712000">- Use %cmake_build instead of %make_jobs
- Shouldn't need -DBUILD_SHARED_LIBRARY=ON</changelog>
  <changelog author="christophe@krop.fr" date="1612872000">- Update to 1.1.1. No changelog available.
- Drop fix-pkg-config-file.patch. Merged upstream
- Add 0001-Fix-build-with-GCC-11.patch to fix GCC 11 build
  issues (boo#1181915)</changelog>
  <changelog author="rpm@fthiessen.de" date="1622289600">- Update to 1.2.0
  * new BarcodeFormat names, old ones are deprecated
  * new ZXingQtCamReader demo app based on QtMultimedia and QtQuick
  * new QRCode reader, faster and better support for rotated symbols
  * added Structured Append support for DataMatrix, Aztec and MaxiCode
  * added DMRE support for DataMatrix
  * switch to the reimplemented 1D detectors, about 5x faster
  * a lot faster and more capable isPure detection for all 2D codes
  * 20% faster ReedSolomon error correcting
  * PDF417 is faster and supports flipped symbols
  * reduced false positive rate for UPC/EAN barcodes and improved
    Add-On symbol handling
  * proper ECI handling in all 2D barcodes
  * much improved python wrapper
  * deprecate the use of ResultMetadata
- Add cmake-check-system-first.patch
- Drop upstream merged 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635940800">- Use the updated cmake3-full package instead of cmake on SLE12
- Do not build examples on SLE12
- Only build blackbox tests on TW</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636113600">- Do not build examples to avoid a cycle with QT5Multimedia</changelog>
  <changelog author="danilo.spinella@suse.com" date="1642593600">- Update stb_image/stb_image_write to include the fixes for
  the following CVEs:
  CVE-2021-28021, bsc#1191743
  CVE-2021-42715, bsc#1191942
  CVE-2021-42716, bsc#1191944
  * 269.patch</changelog>
</package>
<package pkgid="15a9deafd2be366630fb1c7e45927f881ec7678c7350c0c7788748cefb585598" name="libZXing1-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="9.7.1"/>
  <changelog author="lbeltrame@kde.org" date="1558094400">- Initial package for openSUSE
- Add upstream patch to add proper installability and library
  versioning:
  * fix-library-installation-and-versioning.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1558526400">- Fixup URL and Source</changelog>
  <changelog author="jengelh@inai.de" date="1558612800">- Trim metadata redundancies from description.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add add-missing-includes-of-stdexcept-header.patch
  in order to fix boo#1158377.</changelog>
  <changelog author="christophe@krop.fr" date="1597579200">- Update to 1.1.0
  * Add Python binding
  * Bug fixes from upstream XZing project
  * Many performance improvements for 1D readers
  * More meta-data exported when reading specific format
  * Minor bug fixes and improvements for corner cases
  * Improve DataMatrix encoder
  * Add interface to simplify basic usage
  * WASM API to support pixels array as input
  * Few minor bug fixes
  * A new and (hopefully) 'future proof' single ReadBarcode entry point
    into the decoding functionality.
  * The LuminanceSource based API is now deprecated but still compiles.
  * A new BarcodeFormats flag type to specify the set of barcodes to look for.
  * Deprecated unrelyable Result::resultPoints in favor of well defined
    Result::position.
  * Deprecated Result::metadata() -&gt; ORIENTATION in favor
    of Result::orientation.
  * New Binarizer enum in DecodeHints to specify the binarizer for
    the ReadBarcode API.
  * New DecodeHints::isPure property to speed up detection for
    'pure' input use-cases.
  * New 'unified' CMake structure to build (most) of the project from
    the top-level project.
  * New ZXingReader and ZXingWriter example code also meant for distributing.
  * New simplified and consistent Python API (breaking change)
  * ReedSolomon error detection code 2x speedup.
  * Enable basic MaxiCode support.
  * Fix coutry-code metatdata decoding for UPC/EAN codes.
  * Slightly improved QRCode detection for rotated symbols.
  * Faster PDF417 decoder.
  * Lots of minor code readability and general cleanup improvements.
- Drop patches:
  * add-missing-includes-of-stdexcept-header.patch
  * fix-library-installation-and-versioning.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add fix for pkg-config file so the version and library are set properly
  in the resulting .pc file:
  * fix-pkg-config-file.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603454400">- Add baselibs.conf</changelog>
  <changelog author="sflees@suse.de" date="1610712000">- Use %cmake_build instead of %make_jobs
- Shouldn't need -DBUILD_SHARED_LIBRARY=ON</changelog>
  <changelog author="christophe@krop.fr" date="1612872000">- Update to 1.1.1. No changelog available.
- Drop fix-pkg-config-file.patch. Merged upstream
- Add 0001-Fix-build-with-GCC-11.patch to fix GCC 11 build
  issues (boo#1181915)</changelog>
  <changelog author="rpm@fthiessen.de" date="1622289600">- Update to 1.2.0
  * new BarcodeFormat names, old ones are deprecated
  * new ZXingQtCamReader demo app based on QtMultimedia and QtQuick
  * new QRCode reader, faster and better support for rotated symbols
  * added Structured Append support for DataMatrix, Aztec and MaxiCode
  * added DMRE support for DataMatrix
  * switch to the reimplemented 1D detectors, about 5x faster
  * a lot faster and more capable isPure detection for all 2D codes
  * 20% faster ReedSolomon error correcting
  * PDF417 is faster and supports flipped symbols
  * reduced false positive rate for UPC/EAN barcodes and improved
    Add-On symbol handling
  * proper ECI handling in all 2D barcodes
  * much improved python wrapper
  * deprecate the use of ResultMetadata
- Add cmake-check-system-first.patch
- Drop upstream merged 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635940800">- Use the updated cmake3-full package instead of cmake on SLE12
- Do not build examples on SLE12
- Only build blackbox tests on TW</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636113600">- Do not build examples to avoid a cycle with QT5Multimedia</changelog>
  <changelog author="danilo.spinella@suse.com" date="1642593600">- Update stb_image/stb_image_write to include the fixes for
  the following CVEs:
  CVE-2021-28021, bsc#1191743
  CVE-2021-42715, bsc#1191942
  CVE-2021-42716, bsc#1191944
  * 269.patch</changelog>
</package>
<package pkgid="5481f74aca14626fd3e90475f2f3eb6fc33fe047d4e3d9f6c2bf0d1338c5b500" name="libunbound2" arch="aarch64">
  <version epoch="0" ver="1.6.8" rel="10.6.1"/>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
</package>
<package pkgid="e6f6c9f0bb57ac05fee881fe10debd77eed811a2903b4f0c63c389d04ea95931" name="libunbound2" arch="ppc64le">
  <version epoch="0" ver="1.6.8" rel="10.6.1"/>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
</package>
<package pkgid="1d924a14344a771654e9e157c5de4a82378c54deda67ff86cd1600581a846011" name="libunbound2" arch="s390x">
  <version epoch="0" ver="1.6.8" rel="10.6.1"/>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
</package>
<package pkgid="b1206d75f8afdb2520d60085c3b670800d4c3e21035940bb9d5a8ceaab49e9a6" name="libunbound2" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="10.6.1"/>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
</package>
<package pkgid="6eb80da7b7bc3779e967ac373f5a9d751743fd5295c27bce580618b461fc5508" name="log4j" arch="src">
  <version epoch="0" ver="1.2.17" rel="5.9.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="stbinner@suse.de" date="1140004800">- add GenericName to .desktop files</changelog>
  <changelog author="dbornkessel@suse.de" date="1178625600">- use mx4j instead of jmx</changelog>
  <changelog author="dbornkessel@suse.de" date="1179489600">- removed mx4j BuildReq to avoid build cycle ... apparently it was not used at compile time</changelog>
  <changelog author="sbrabec@suse.cz" date="1181217600">- Removed invalid desktop Category "Application" (#254654).</changelog>
  <changelog author="mvyskocil@suse.cz" date="1207656000">- updated to 1.2.5 [bnc#355798]
- merged a spec with jpackage 1.7
  - the ant arguments was splitted to several lines
  - new BuildRequires:
  - classpathx-javamail
  - geronimo-jaf
  - geronimo-jms
  - a new patches to break of a dependendy on Sun's HtmlAdaptorServer
    (replaced by HttpAdaptor from mx4j package)
  - added a gjc build branch
- created an autogenerated -mini specfile used for bootstrap (hint from sbrabec@suse.cz)
  - added an explicit provides of log4j symbol for log4j-mini (automatically by script)
- replaced a name `macro' by `real', because the -mini package has a different name
- disable the javadoc and manual subpackages for -mini build</changelog>
  <changelog author="mvyskocil@suse.cz" date="1210075200">- removed a dots in a names of geronimo-* packages</changelog>
  <changelog author="coolo@suse.de" date="1214568000">- avoid build cycle between axis and log4j</changelog>
  <changelog author="coolo@suse.de" date="1216209600">- even more packages to build ignore</changelog>
  <changelog author="mvyskocil@suse.cz" date="1260446400">- refreshed patches
  * log4j-javadoc-xlink.patch
  * log4j-jmx-Agent.patch
  * log4j-logfactor5-userdir.patch
  * log4j-mx4j-tools.patch</changelog>
  <changelog author="mls@suse.de" date="1373976000">- get rid of wrong dir modifier in filelist</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1378987200">- log4j and log4j-mini are in conflict</changelog>
  <changelog author="tchvatal@suse.com" date="1425297600">- Cleanup with a spec-cleaner so I can understand what
  is going around here.</changelog>
  <changelog author="tchvatal@suse.com" date="1425297601">- Version bump to 1.2.17 latest 1.2 series:
  * No short changelog provided - many small changes
- Try to avoid cycle between log4j and apache-common-loggings
- Remove obsoleted patch:
  * log4j-jmx-Agent.patch
- Refresh patch to apply to new source:
  * log4j-mx4j-tools.patch</changelog>
  <changelog author="fstrba@suse.com" date="1505217600">- Specify java source and target level 1.6 to allow building with
  jdk9</changelog>
  <changelog author="bwiedemann@suse.com" date="1515585600">- Add log4j-reproducible.patch to drop javadoc timestamps to make
  package builds more reproducible (boo#1047218)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1577966400">- Security fix: [bsc#1159646, CVE-2019-17571]
  * Remote code execution: Deserialization of untrusted data in SocketServer
  * Backported from CVE-2017-5645 for Log4j 2.8.2
- Add log4j-CVE-2019-17571.patch
- Use fdupes macro to avoid duplicated files</changelog>
  <changelog author="psimons@suse.com" date="1639656000">- Remove src/main/java/org/apache/log4j/net/JMSAppender.java from
  the build to mitigate CVE-2021-4104. [bsc#1193662]</changelog>
  <changelog author="fstrba@suse.com" date="1642593600">- Remove the chainsaw sub-package (bsc#1194844, CVE-2022-23307)
- Remove src/main/java/org/apache/log4j/jdbc/JDBCAppender.java from
  the build to mitigate bsc#1194843, CVE-2022-23305
- Remove src/main/java/org/apache/log4j/net/JMSSink.java from the
  build to mitigate bsc#1194842, CVE-2022-23302
- Obsolete chainsaw &lt; 2.1 by the log4j package
- Added patch:
  * log4j-missingmodules.patch
    + do not package org.apache.log4j.chainsaw classes
    + package org.apache.log4j.pattern classes that will be needed
    by apache-log4j-extras which is a dependency of chainsaw 2.x</changelog>
</package>
<package pkgid="fa7463c276542d0af08579603fcb770b018c14d99fc0a11009d38d3ea36cbaf2" name="log4j-manual" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="5.9.1"/>
  <changelog author="mls@suse.de" date="1373976000">- get rid of wrong dir modifier in filelist</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1378987200">- log4j and log4j-mini are in conflict</changelog>
  <changelog author="tchvatal@suse.com" date="1425297600">- Cleanup with a spec-cleaner so I can understand what
  is going around here.</changelog>
  <changelog author="tchvatal@suse.com" date="1425297601">- Version bump to 1.2.17 latest 1.2 series:
  * No short changelog provided - many small changes
- Try to avoid cycle between log4j and apache-common-loggings
- Remove obsoleted patch:
  * log4j-jmx-Agent.patch
- Refresh patch to apply to new source:
  * log4j-mx4j-tools.patch</changelog>
  <changelog author="fstrba@suse.com" date="1505217600">- Specify java source and target level 1.6 to allow building with
  jdk9</changelog>
  <changelog author="bwiedemann@suse.com" date="1515585600">- Add log4j-reproducible.patch to drop javadoc timestamps to make
  package builds more reproducible (boo#1047218)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1577966400">- Security fix: [bsc#1159646, CVE-2019-17571]
  * Remote code execution: Deserialization of untrusted data in SocketServer
  * Backported from CVE-2017-5645 for Log4j 2.8.2
- Add log4j-CVE-2019-17571.patch
- Use fdupes macro to avoid duplicated files</changelog>
  <changelog author="psimons@suse.com" date="1639656000">- Remove src/main/java/org/apache/log4j/net/JMSAppender.java from
  the build to mitigate CVE-2021-4104. [bsc#1193662]</changelog>
  <changelog author="fstrba@suse.com" date="1642593600">- Remove the chainsaw sub-package (bsc#1194844, CVE-2022-23307)
- Remove src/main/java/org/apache/log4j/jdbc/JDBCAppender.java from
  the build to mitigate bsc#1194843, CVE-2022-23305
- Remove src/main/java/org/apache/log4j/net/JMSSink.java from the
  build to mitigate bsc#1194842, CVE-2022-23302
- Obsolete chainsaw &lt; 2.1 by the log4j package
- Added patch:
  * log4j-missingmodules.patch
    + do not package org.apache.log4j.chainsaw classes
    + package org.apache.log4j.pattern classes that will be needed
    by apache-log4j-extras which is a dependency of chainsaw 2.x</changelog>
</package>
<package pkgid="7e24f17d98055f923282a7511b1b057e2f28af0dc63e19ed882abc203addedff" name="log4j12" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="4.9.1"/>
  <changelog author="tchvatal@suse.com" date="1425297600">- Cleanup with a spec-cleaner so I can understand what
  is going around here.</changelog>
  <changelog author="tchvatal@suse.com" date="1425297601">- Version bump to 1.2.17 latest 1.2 series:
  * No short changelog provided - many small changes
- Try to avoid cycle between log4j and apache-common-loggings
- Remove obsoleted patch:
  * log4j-jmx-Agent.patch
- Refresh patch to apply to new source:
  * log4j-mx4j-tools.patch</changelog>
  <changelog author="fstrba@suse.com" date="1505217600">- Specify java source and target level 1.6 to allow building with
  jdk9</changelog>
  <changelog author="bwiedemann@suse.com" date="1515585600">- Add log4j-reproducible.patch to drop javadoc timestamps to make
  package builds more reproducible (boo#1047218)</changelog>
  <changelog author="fstrba@suse.com" date="1532520000">- Require at least java 8 for build</changelog>
  <changelog author="fstrba@suse.com" date="1539864000">- Install and package the maven pom and metadata files for the
  non-bootstrap log4j</changelog>
  <changelog author="fstrba@suse.com" date="1544702400">- Depend on the generic xml-apis</changelog>
  <changelog author="fstrba@suse.com" date="1547553600">- Let log4j provide the log4j-mini and obsolete it too.
- Remove conflicts on each other</changelog>
  <changelog author="fstrba@suse.com" date="1548158400">- Build against a generic javamail provider instead of against
  classpathx-mail</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Rename to log4j12/log4j12-mini as a compatibility packages
- Convert to multibuild
- Clean up with the spec-cleaner
- Install maven pom files even with the mini package</changelog>
  <changelog author="fstrba@suse.com" date="1578312000">- Let both the log4j12 and log4j12-mini packages obsolete the log4j
  and log4j-mini &lt; 1.3 in order to simplify upgrades</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578398400">- Remove script jpackage-mini-prepare.sh</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578398401">- Security fix: [bsc#1159646, CVE-2019-17571]
  * Remote code execution: Deserialization of untrusted data in SocketServer
  * Backported from CVE-2017-5645 for Log4j 2.8.2
- Add log4j-CVE-2019-17571.patch</changelog>
  <changelog author="fstrba@suse.com" date="1584705600">- Added patch:
  * log4j12-bundle_manifest.patch
    + Add a bundle manifest to the log4j12 package so that it can
    be used by eclipse</changelog>
  <changelog author="mailaender@opensuse.org" date="1638187200">- Put GUI tools into separate packages</changelog>
  <changelog author="psimons@suse.com" date="1639656000">- Remove src/main/java/org/apache/log4j/net/JMSAppender.java from
  the build to mitigate CVE-2021-4104. [bsc#1193662]</changelog>
  <changelog author="david.anes@suse.com" date="1641297600">- Fix 'chainsaw' package: [bsc#1193184 - Chainsaw does not start]
  * log4j-chainsaw.sh:
    + Add proper BASE_JARS, using log4j12 instead of log4j.
  * Add missing dependency to log4j12 for 'chainsaw' package.</changelog>
  <changelog author="fstrba@suse.com" date="1642593600">- Remove the chainsaw sub-package (bsc#1194844, CVE-2022-23307)
- Remove src/main/java/org/apache/log4j/jdbc/JDBCAppender.java from
  the build to mitigate bsc#1194843, CVE-2022-23305
- Remove src/main/java/org/apache/log4j/net/JMSSink.java from the
  build to mitigate bsc#1194842, CVE-2022-23302
- Obsolete chainsaw &lt; 2.1 by the log4j12 package
- Added patch:
  * log4j12-missingmodules.patch
    + do not package org.apache.log4j.chainsaw classes
    + package org.apache.log4j.pattern classes that will be needed
    by apache-log4j-extras which is a dependency of chainsaw 2.x</changelog>
</package>
<package pkgid="c185f8ec5f30a641571c4a1a6b4e3bf78f0774e075b4bfa6b54e385017f7ff88" name="log4j12" arch="src">
  <version epoch="0" ver="1.2.17" rel="4.9.1"/>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1378987200">- log4j and log4j-mini are in conflict</changelog>
  <changelog author="tchvatal@suse.com" date="1425297600">- Cleanup with a spec-cleaner so I can understand what
  is going around here.</changelog>
  <changelog author="tchvatal@suse.com" date="1425297601">- Version bump to 1.2.17 latest 1.2 series:
  * No short changelog provided - many small changes
- Try to avoid cycle between log4j and apache-common-loggings
- Remove obsoleted patch:
  * log4j-jmx-Agent.patch
- Refresh patch to apply to new source:
  * log4j-mx4j-tools.patch</changelog>
  <changelog author="fstrba@suse.com" date="1505217600">- Specify java source and target level 1.6 to allow building with
  jdk9</changelog>
  <changelog author="bwiedemann@suse.com" date="1515585600">- Add log4j-reproducible.patch to drop javadoc timestamps to make
  package builds more reproducible (boo#1047218)</changelog>
  <changelog author="fstrba@suse.com" date="1532520000">- Require at least java 8 for build</changelog>
  <changelog author="fstrba@suse.com" date="1539864000">- Install and package the maven pom and metadata files for the
  non-bootstrap log4j</changelog>
  <changelog author="fstrba@suse.com" date="1544702400">- Depend on the generic xml-apis</changelog>
  <changelog author="fstrba@suse.com" date="1547553600">- Let log4j provide the log4j-mini and obsolete it too.
- Remove conflicts on each other</changelog>
  <changelog author="fstrba@suse.com" date="1548158400">- Build against a generic javamail provider instead of against
  classpathx-mail</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Rename to log4j12/log4j12-mini as a compatibility packages
- Convert to multibuild
- Clean up with the spec-cleaner
- Install maven pom files even with the mini package</changelog>
  <changelog author="fstrba@suse.com" date="1578312000">- Let both the log4j12 and log4j12-mini packages obsolete the log4j
  and log4j-mini &lt; 1.3 in order to simplify upgrades</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578398400">- Remove script jpackage-mini-prepare.sh</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578398401">- Security fix: [bsc#1159646, CVE-2019-17571]
  * Remote code execution: Deserialization of untrusted data in SocketServer
  * Backported from CVE-2017-5645 for Log4j 2.8.2
- Add log4j-CVE-2019-17571.patch</changelog>
  <changelog author="fstrba@suse.com" date="1584705600">- Added patch:
  * log4j12-bundle_manifest.patch
    + Add a bundle manifest to the log4j12 package so that it can
    be used by eclipse</changelog>
  <changelog author="mailaender@opensuse.org" date="1638187200">- Put GUI tools into separate packages</changelog>
  <changelog author="psimons@suse.com" date="1639656000">- Remove src/main/java/org/apache/log4j/net/JMSAppender.java from
  the build to mitigate CVE-2021-4104. [bsc#1193662]</changelog>
  <changelog author="david.anes@suse.com" date="1641297600">- Fix 'chainsaw' package: [bsc#1193184 - Chainsaw does not start]
  * log4j-chainsaw.sh:
    + Add proper BASE_JARS, using log4j12 instead of log4j.
  * Add missing dependency to log4j12 for 'chainsaw' package.</changelog>
  <changelog author="fstrba@suse.com" date="1642593600">- Remove the chainsaw sub-package (bsc#1194844, CVE-2022-23307)
- Remove src/main/java/org/apache/log4j/jdbc/JDBCAppender.java from
  the build to mitigate bsc#1194843, CVE-2022-23305
- Remove src/main/java/org/apache/log4j/net/JMSSink.java from the
  build to mitigate bsc#1194842, CVE-2022-23302
- Obsolete chainsaw &lt; 2.1 by the log4j12 package
- Added patch:
  * log4j12-missingmodules.patch
    + do not package org.apache.log4j.chainsaw classes
    + package org.apache.log4j.pattern classes that will be needed
    by apache-log4j-extras which is a dependency of chainsaw 2.x</changelog>
</package>
<package pkgid="b138e51bbf98d0289d18fe94d0d41fa32430903f4421154eaf22c4a228a42a6b" name="log4j12-javadoc" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="4.9.1"/>
  <changelog author="tchvatal@suse.com" date="1425297600">- Cleanup with a spec-cleaner so I can understand what
  is going around here.</changelog>
  <changelog author="tchvatal@suse.com" date="1425297601">- Version bump to 1.2.17 latest 1.2 series:
  * No short changelog provided - many small changes
- Try to avoid cycle between log4j and apache-common-loggings
- Remove obsoleted patch:
  * log4j-jmx-Agent.patch
- Refresh patch to apply to new source:
  * log4j-mx4j-tools.patch</changelog>
  <changelog author="fstrba@suse.com" date="1505217600">- Specify java source and target level 1.6 to allow building with
  jdk9</changelog>
  <changelog author="bwiedemann@suse.com" date="1515585600">- Add log4j-reproducible.patch to drop javadoc timestamps to make
  package builds more reproducible (boo#1047218)</changelog>
  <changelog author="fstrba@suse.com" date="1532520000">- Require at least java 8 for build</changelog>
  <changelog author="fstrba@suse.com" date="1539864000">- Install and package the maven pom and metadata files for the
  non-bootstrap log4j</changelog>
  <changelog author="fstrba@suse.com" date="1544702400">- Depend on the generic xml-apis</changelog>
  <changelog author="fstrba@suse.com" date="1547553600">- Let log4j provide the log4j-mini and obsolete it too.
- Remove conflicts on each other</changelog>
  <changelog author="fstrba@suse.com" date="1548158400">- Build against a generic javamail provider instead of against
  classpathx-mail</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Rename to log4j12/log4j12-mini as a compatibility packages
- Convert to multibuild
- Clean up with the spec-cleaner
- Install maven pom files even with the mini package</changelog>
  <changelog author="fstrba@suse.com" date="1578312000">- Let both the log4j12 and log4j12-mini packages obsolete the log4j
  and log4j-mini &lt; 1.3 in order to simplify upgrades</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578398400">- Remove script jpackage-mini-prepare.sh</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578398401">- Security fix: [bsc#1159646, CVE-2019-17571]
  * Remote code execution: Deserialization of untrusted data in SocketServer
  * Backported from CVE-2017-5645 for Log4j 2.8.2
- Add log4j-CVE-2019-17571.patch</changelog>
  <changelog author="fstrba@suse.com" date="1584705600">- Added patch:
  * log4j12-bundle_manifest.patch
    + Add a bundle manifest to the log4j12 package so that it can
    be used by eclipse</changelog>
  <changelog author="mailaender@opensuse.org" date="1638187200">- Put GUI tools into separate packages</changelog>
  <changelog author="psimons@suse.com" date="1639656000">- Remove src/main/java/org/apache/log4j/net/JMSAppender.java from
  the build to mitigate CVE-2021-4104. [bsc#1193662]</changelog>
  <changelog author="david.anes@suse.com" date="1641297600">- Fix 'chainsaw' package: [bsc#1193184 - Chainsaw does not start]
  * log4j-chainsaw.sh:
    + Add proper BASE_JARS, using log4j12 instead of log4j.
  * Add missing dependency to log4j12 for 'chainsaw' package.</changelog>
  <changelog author="fstrba@suse.com" date="1642593600">- Remove the chainsaw sub-package (bsc#1194844, CVE-2022-23307)
- Remove src/main/java/org/apache/log4j/jdbc/JDBCAppender.java from
  the build to mitigate bsc#1194843, CVE-2022-23305
- Remove src/main/java/org/apache/log4j/net/JMSSink.java from the
  build to mitigate bsc#1194842, CVE-2022-23302
- Obsolete chainsaw &lt; 2.1 by the log4j12 package
- Added patch:
  * log4j12-missingmodules.patch
    + do not package org.apache.log4j.chainsaw classes
    + package org.apache.log4j.pattern classes that will be needed
    by apache-log4j-extras which is a dependency of chainsaw 2.x</changelog>
</package>
<package pkgid="3c938352820d9fb35582518c72b71541848589134b9b8a9bd226f7868a327d56" name="log4j12-manual" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="4.9.1"/>
  <changelog author="tchvatal@suse.com" date="1425297600">- Cleanup with a spec-cleaner so I can understand what
  is going around here.</changelog>
  <changelog author="tchvatal@suse.com" date="1425297601">- Version bump to 1.2.17 latest 1.2 series:
  * No short changelog provided - many small changes
- Try to avoid cycle between log4j and apache-common-loggings
- Remove obsoleted patch:
  * log4j-jmx-Agent.patch
- Refresh patch to apply to new source:
  * log4j-mx4j-tools.patch</changelog>
  <changelog author="fstrba@suse.com" date="1505217600">- Specify java source and target level 1.6 to allow building with
  jdk9</changelog>
  <changelog author="bwiedemann@suse.com" date="1515585600">- Add log4j-reproducible.patch to drop javadoc timestamps to make
  package builds more reproducible (boo#1047218)</changelog>
  <changelog author="fstrba@suse.com" date="1532520000">- Require at least java 8 for build</changelog>
  <changelog author="fstrba@suse.com" date="1539864000">- Install and package the maven pom and metadata files for the
  non-bootstrap log4j</changelog>
  <changelog author="fstrba@suse.com" date="1544702400">- Depend on the generic xml-apis</changelog>
  <changelog author="fstrba@suse.com" date="1547553600">- Let log4j provide the log4j-mini and obsolete it too.
- Remove conflicts on each other</changelog>
  <changelog author="fstrba@suse.com" date="1548158400">- Build against a generic javamail provider instead of against
  classpathx-mail</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Rename to log4j12/log4j12-mini as a compatibility packages
- Convert to multibuild
- Clean up with the spec-cleaner
- Install maven pom files even with the mini package</changelog>
  <changelog author="fstrba@suse.com" date="1578312000">- Let both the log4j12 and log4j12-mini packages obsolete the log4j
  and log4j-mini &lt; 1.3 in order to simplify upgrades</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578398400">- Remove script jpackage-mini-prepare.sh</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578398401">- Security fix: [bsc#1159646, CVE-2019-17571]
  * Remote code execution: Deserialization of untrusted data in SocketServer
  * Backported from CVE-2017-5645 for Log4j 2.8.2
- Add log4j-CVE-2019-17571.patch</changelog>
  <changelog author="fstrba@suse.com" date="1584705600">- Added patch:
  * log4j12-bundle_manifest.patch
    + Add a bundle manifest to the log4j12 package so that it can
    be used by eclipse</changelog>
  <changelog author="mailaender@opensuse.org" date="1638187200">- Put GUI tools into separate packages</changelog>
  <changelog author="psimons@suse.com" date="1639656000">- Remove src/main/java/org/apache/log4j/net/JMSAppender.java from
  the build to mitigate CVE-2021-4104. [bsc#1193662]</changelog>
  <changelog author="david.anes@suse.com" date="1641297600">- Fix 'chainsaw' package: [bsc#1193184 - Chainsaw does not start]
  * log4j-chainsaw.sh:
    + Add proper BASE_JARS, using log4j12 instead of log4j.
  * Add missing dependency to log4j12 for 'chainsaw' package.</changelog>
  <changelog author="fstrba@suse.com" date="1642593600">- Remove the chainsaw sub-package (bsc#1194844, CVE-2022-23307)
- Remove src/main/java/org/apache/log4j/jdbc/JDBCAppender.java from
  the build to mitigate bsc#1194843, CVE-2022-23305
- Remove src/main/java/org/apache/log4j/net/JMSSink.java from the
  build to mitigate bsc#1194842, CVE-2022-23302
- Obsolete chainsaw &lt; 2.1 by the log4j12 package
- Added patch:
  * log4j12-missingmodules.patch
    + do not package org.apache.log4j.chainsaw classes
    + package org.apache.log4j.pattern classes that will be needed
    by apache-log4j-extras which is a dependency of chainsaw 2.x</changelog>
</package>
<package pkgid="f5c8114c1daca377c8e2865d08d677d954b37d4334df0bf20db1db90504062f2" name="ocfs2-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.43.1"/>
  <changelog author="tiwai@suse.de" date="1642593600">- Add cherry-picked IDs for qemu fw_cfg patches
- commit 8f947ad</changelog>
  <changelog author="msuchanek@suse.de" date="1642593601">- powerpc/pseries/cpuhp: delete add/remove_by_count code
  (bsc#1065729).
- powerpc/pseries/cpuhp: cache node corrections (bsc#1065729).
- commit 9c04898</changelog>
  <changelog author="tiwai@suse.de" date="1642593602">- dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
  (git-fixes).
- dmaengine: at_xdmac: Fix lld view setting (git-fixes).
- dmaengine: at_xdmac: Fix concurrency over xfers_list
  (git-fixes).
- dmaengine: at_xdmac: Print debug message after realeasing the
  lock (git-fixes).
- dmaengine: at_xdmac: Don't start transactions at tx_submit level
  (git-fixes).
- Documentation: dmaengine: Correctly describe dmatest with
  channel unset (git-fixes).
- rpmsg: core: Clean up resources on announce_create failure
  (git-fixes).
- ACPI: APD: Check for NULL pointer after calling devm_ioremap()
  (git-fixes).
- Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2 (git-fixes).
- Input: ti_am335x_tsc - set ADCREFM for X configuration
  (git-fixes).
- i3c: master: dw: check return of dw_i3c_master_get_free_pos()
  (git-fixes).
- i3c: fix incorrect address slot lookup on 64-bit (git-fixes).
- commit 3d8614c</changelog>
  <changelog author="msuchanek@suse.de" date="1642593603">- powerpc/prom_init: Fix improper check of prom_getprop()
  (bsc#1065729).
- commit 954fa51</changelog>
  <changelog author="msuchanek@suse.de" date="1642593604">- powerpc/perf: Fix PMU callbacks to clear pending PMI before
  resetting an overflown PMC (bsc#1156395).
- commit 8bdce1e</changelog>
  <changelog author="mbenes@suse.cz" date="1642593605">- livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
- commit 27c7aa0</changelog>
  <changelog author="msuchanek@suse.de" date="1642593606">- blacklist.conf: Add 79ca6f74dae0 tpm: fix Atmel TPM crash caused by too frequent queries
  Breaks kABI, there is no report of this problem affecting users, likely
  broken old TPM firmware.
- commit 4ea9f96</changelog>
  <changelog author="msuchanek@suse.de" date="1642593607">- Update patches.suse/tpm-fix-potential-NULL-pointer-access-in-tpm_del_cha.patch
  (git-fixes bsc#1193660 ltc#195634).
- commit 11ac3f6</changelog>
  <changelog author="lhenriques@suse.de" date="1642680000">- fuse: Pass correct lend value to filemap_write_and_wait_range()
  (bsc#1194953).
- commit d2355ea</changelog>
  <changelog author="msuchanek@suse.de" date="1642680001">- blacklist.conf: Add a2308836880b powerpc: Fix arch_stack_walk() to have
  running function as first entry
  The stacktrace interface in this kernel version does not provide the
  parameters used to implement the fix.
- commit ee041a3</changelog>
  <changelog author="msuchanek@suse.de" date="1642680002">- powerpc/64s: fix program check interrupt emergency stack path
  (bsc#1156395).
- commit a3c26ed</changelog>
  <changelog author="msuchanek@suse.de" date="1642680003">- powerpc/traps: do not enable irqs in _exception (bsc#1065729).
- powerpc: add interrupt_cond_local_irq_enable helper
  (bsc#1065729).
- commit 65f660c</changelog>
  <changelog author="msuchanek@suse.de" date="1642680004">- powerpc/pseries/mobility: ignore ibm, platform-facilities
  updates (bsc#1065729).
- commit b253330</changelog>
  <changelog author="rgoldwyn@suse.com" date="1642680005">- vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).
- commit 4717473</changelog>
  <changelog author="vkarasulli@suse.de" date="1642680006">- moxart: fix potential use-after-free on remove path
  (bsc#1194516).
- commit 3fae095</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1642766400">- sctp: account stream padding length for reconf chunk
  (bsc#1194985 CVE-2022-0322).
- commit a6cab40</changelog>
  <changelog author="ddiss@suse.de" date="1642766401">- vfs: fs_context: fix up param length parsing in
  legacy_parse_param (CVE-2022-0185 bsc#1194517).
- Rename and retag following upstream merge from:
  patches.suse/vfs-Out-of-bounds-write-of-heap-buffer-in-fs_context-c.patch
  to patches.suse/vfs-fs_context-fix-up-param-length-parsing-in-legacy.patch
- commit 33860f2</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766402">- series.conf: cleanup
- move to "mainline soon" section:
  - patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch
- commit 07d55c3</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766403">- series.conf: refresh
- update upstream references and resort:
  - patches.suse/powerpc-fadump-Fix-inaccurate-CPU-state-info-in-vmco.patch
  - patches.suse/powerpc-handle-kdump-appropriately-with-crash_kexec_.patch
  - patches.suse/powerpc-watchdog-Avoid-holding-wd_smp_lock-over-prin.patch
  - patches.suse/powerpc-watchdog-Fix-missed-watchdog-reset-due-to-me.patch
  - patches.suse/powerpc-watchdog-Fix-wd_smp_last_reset_tb-reporting.patch
  - patches.suse/powerpc-watchdog-read-TB-close-to-where-it-is-used.patch
  - patches.suse/powerpc-watchdog-tighten-non-atomic-read-modify-writ.patch
- commit 72b7db7</changelog>
  <changelog author="osalvador@suse.de" date="1642939200">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit 84178b8</changelog>
</package>
<package pkgid="6a30ebdcd1b76039e541c944ae85acd026736aa34acafce9c4493260a40ba625" name="reiserfs-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.43.1"/>
  <changelog author="tiwai@suse.de" date="1642593600">- Add cherry-picked IDs for qemu fw_cfg patches
- commit 8f947ad</changelog>
  <changelog author="msuchanek@suse.de" date="1642593601">- powerpc/pseries/cpuhp: delete add/remove_by_count code
  (bsc#1065729).
- powerpc/pseries/cpuhp: cache node corrections (bsc#1065729).
- commit 9c04898</changelog>
  <changelog author="tiwai@suse.de" date="1642593602">- dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
  (git-fixes).
- dmaengine: at_xdmac: Fix lld view setting (git-fixes).
- dmaengine: at_xdmac: Fix concurrency over xfers_list
  (git-fixes).
- dmaengine: at_xdmac: Print debug message after realeasing the
  lock (git-fixes).
- dmaengine: at_xdmac: Don't start transactions at tx_submit level
  (git-fixes).
- Documentation: dmaengine: Correctly describe dmatest with
  channel unset (git-fixes).
- rpmsg: core: Clean up resources on announce_create failure
  (git-fixes).
- ACPI: APD: Check for NULL pointer after calling devm_ioremap()
  (git-fixes).
- Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2 (git-fixes).
- Input: ti_am335x_tsc - set ADCREFM for X configuration
  (git-fixes).
- i3c: master: dw: check return of dw_i3c_master_get_free_pos()
  (git-fixes).
- i3c: fix incorrect address slot lookup on 64-bit (git-fixes).
- commit 3d8614c</changelog>
  <changelog author="msuchanek@suse.de" date="1642593603">- powerpc/prom_init: Fix improper check of prom_getprop()
  (bsc#1065729).
- commit 954fa51</changelog>
  <changelog author="msuchanek@suse.de" date="1642593604">- powerpc/perf: Fix PMU callbacks to clear pending PMI before
  resetting an overflown PMC (bsc#1156395).
- commit 8bdce1e</changelog>
  <changelog author="mbenes@suse.cz" date="1642593605">- livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
- commit 27c7aa0</changelog>
  <changelog author="msuchanek@suse.de" date="1642593606">- blacklist.conf: Add 79ca6f74dae0 tpm: fix Atmel TPM crash caused by too frequent queries
  Breaks kABI, there is no report of this problem affecting users, likely
  broken old TPM firmware.
- commit 4ea9f96</changelog>
  <changelog author="msuchanek@suse.de" date="1642593607">- Update patches.suse/tpm-fix-potential-NULL-pointer-access-in-tpm_del_cha.patch
  (git-fixes bsc#1193660 ltc#195634).
- commit 11ac3f6</changelog>
  <changelog author="lhenriques@suse.de" date="1642680000">- fuse: Pass correct lend value to filemap_write_and_wait_range()
  (bsc#1194953).
- commit d2355ea</changelog>
  <changelog author="msuchanek@suse.de" date="1642680001">- blacklist.conf: Add a2308836880b powerpc: Fix arch_stack_walk() to have
  running function as first entry
  The stacktrace interface in this kernel version does not provide the
  parameters used to implement the fix.
- commit ee041a3</changelog>
  <changelog author="msuchanek@suse.de" date="1642680002">- powerpc/64s: fix program check interrupt emergency stack path
  (bsc#1156395).
- commit a3c26ed</changelog>
  <changelog author="msuchanek@suse.de" date="1642680003">- powerpc/traps: do not enable irqs in _exception (bsc#1065729).
- powerpc: add interrupt_cond_local_irq_enable helper
  (bsc#1065729).
- commit 65f660c</changelog>
  <changelog author="msuchanek@suse.de" date="1642680004">- powerpc/pseries/mobility: ignore ibm, platform-facilities
  updates (bsc#1065729).
- commit b253330</changelog>
  <changelog author="rgoldwyn@suse.com" date="1642680005">- vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).
- commit 4717473</changelog>
  <changelog author="vkarasulli@suse.de" date="1642680006">- moxart: fix potential use-after-free on remove path
  (bsc#1194516).
- commit 3fae095</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1642766400">- sctp: account stream padding length for reconf chunk
  (bsc#1194985 CVE-2022-0322).
- commit a6cab40</changelog>
  <changelog author="ddiss@suse.de" date="1642766401">- vfs: fs_context: fix up param length parsing in
  legacy_parse_param (CVE-2022-0185 bsc#1194517).
- Rename and retag following upstream merge from:
  patches.suse/vfs-Out-of-bounds-write-of-heap-buffer-in-fs_context-c.patch
  to patches.suse/vfs-fs_context-fix-up-param-length-parsing-in-legacy.patch
- commit 33860f2</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766402">- series.conf: cleanup
- move to "mainline soon" section:
  - patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch
- commit 07d55c3</changelog>
  <changelog author="mkubecek@suse.cz" date="1642766403">- series.conf: refresh
- update upstream references and resort:
  - patches.suse/powerpc-fadump-Fix-inaccurate-CPU-state-info-in-vmco.patch
  - patches.suse/powerpc-handle-kdump-appropriately-with-crash_kexec_.patch
  - patches.suse/powerpc-watchdog-Avoid-holding-wd_smp_lock-over-prin.patch
  - patches.suse/powerpc-watchdog-Fix-missed-watchdog-reset-due-to-me.patch
  - patches.suse/powerpc-watchdog-Fix-wd_smp_last_reset_tb-reporting.patch
  - patches.suse/powerpc-watchdog-read-TB-close-to-where-it-is-used.patch
  - patches.suse/powerpc-watchdog-tighten-non-atomic-read-modify-writ.patch
- commit 72b7db7</changelog>
  <changelog author="osalvador@suse.de" date="1642939200">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit 84178b8</changelog>
</package>
<package pkgid="6a40c9e8a6fe9fb9cf415400657941a7e2bd873a629f1ffd1d8d051fa2490edd" name="unbound" arch="aarch64">
  <version epoch="0" ver="1.6.8" rel="10.6.1"/>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
</package>
<package pkgid="03eb75607ffd7aea01b38fa72dbb3e1f58f17f9c376dcee8daa7221e5d58ef08" name="unbound" arch="ppc64le">
  <version epoch="0" ver="1.6.8" rel="10.6.1"/>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
</package>
<package pkgid="7cf8b616bbf750375c8c45c2dd0c58b2814856a805d1cc266e72b57ecbfa6b1f" name="unbound" arch="s390x">
  <version epoch="0" ver="1.6.8" rel="10.6.1"/>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
</package>
<package pkgid="eba6b40c9c226043a612ce9bd2ba4c832a243847df59efb59cd0608c8992063f" name="unbound" arch="src">
  <version epoch="0" ver="1.6.8" rel="10.6.1"/>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
</package>
<package pkgid="31eac4f41fc3336349df4f8572e3c52e440379ddea0c246d5d09dd7939366f83" name="unbound" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="10.6.1"/>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
</package>
<package pkgid="cd396e1f76dbf5fc171a5d49ef6befa32be59d67abb20e320164194775eb0fe5" name="unbound-anchor" arch="aarch64">
  <version epoch="0" ver="1.6.8" rel="10.6.1"/>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
</package>
<package pkgid="f0880940da92e22469090c977c1264e3c33fb90d2e19f38e0909a1e0f951cd23" name="unbound-anchor" arch="ppc64le">
  <version epoch="0" ver="1.6.8" rel="10.6.1"/>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
</package>
<package pkgid="6d9d9b2baf1f14cb60f691b17bcc6ee767a756486aab5dd49aca5d2ba74f38e8" name="unbound-anchor" arch="s390x">
  <version epoch="0" ver="1.6.8" rel="10.6.1"/>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
</package>
<package pkgid="5f3a1366107b9a34dccbb26ae59e53a2eed6aa222cf693471ec7f74318e80e28" name="unbound-anchor" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="10.6.1"/>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
</package>
<package pkgid="eaa84cf23d8190b90ee8c33dd310c528cace9925db03319ad2ff805026a893d4" name="unbound-devel" arch="aarch64">
  <version epoch="0" ver="1.6.8" rel="10.6.1"/>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
</package>
<package pkgid="73f82d0f0ae4653216cafefeb8d69ac1e5fc0df8cd7324bb00f0fdc0ea1bc5c5" name="unbound-devel" arch="ppc64le">
  <version epoch="0" ver="1.6.8" rel="10.6.1"/>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
</package>
<package pkgid="75f9961aacecfa8ea2e1e8883a4bffac890291b4b20f511771d28977b3cdc9d4" name="unbound-devel" arch="s390x">
  <version epoch="0" ver="1.6.8" rel="10.6.1"/>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
</package>
<package pkgid="fea6cb829bea3cbe4380fdf176187170f714d21838f0b835adb6498600e9a443" name="unbound-devel" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="10.6.1"/>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
</package>
<package pkgid="d9454a5e6eb09ff454474a873247873a355043a569c29c12f390164d7a5d8be7" name="unbound-munin" arch="noarch">
  <version epoch="0" ver="1.6.8" rel="10.6.1"/>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
</package>
<package pkgid="4423e83bb0f9cf9fba52b2315ea79c5db7bc3c45e09b530dd7063ce88b576bbe" name="unbound-python" arch="aarch64">
  <version epoch="0" ver="1.6.8" rel="10.6.1"/>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
</package>
<package pkgid="087327dd6c9d6167c66d4994ad962816f8530339bebd13ce11720d3911379bbf" name="unbound-python" arch="ppc64le">
  <version epoch="0" ver="1.6.8" rel="10.6.1"/>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
</package>
<package pkgid="117c88ea0e899bda671c7122b95220838d7a58854c463c398e4c7a9ffbb97e94" name="unbound-python" arch="s390x">
  <version epoch="0" ver="1.6.8" rel="10.6.1"/>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
</package>
<package pkgid="9d198f1853f58c09b05b7f5a3d6fc0ad504adc5a1283d83c4c4b90c5b85be42c" name="unbound-python" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="10.6.1"/>
  <changelog author="michael@stroeder.com" date="1497441600">- update to 1.6.3
  Bug Fixes
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname. When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.</changelog>
  <changelog author="michael@stroeder.com" date="1498564800">- update to 1.6.4
  Features:
- Implemented trust anchor signaling using key tag query.
- unbound-checkconf -o allows query of dnstap config variables.
  Also unbound-control get_option.  Also for dnscrypt.
- unbound.h exports the shm stats structures.  They use
  type long long and no ifdefs, and ub_ before the typenames.
- Implemented opportunistic IPsec support module (ipsecmod).
- Added redirect-bogus.patch to contrib directory.
- Support for the ED25519 algorithm with openssl (from openssl 1.1.1).
- renumbering B-Root's IPv6 address to 2001:500:200::b.
- Fix #1276: [dnscrypt] add XChaCha20-Poly1305 cipher.
- Fix #1277: disable domain ratelimit by setting value to 0.
- Added fastrpz patch to contrib
  Bug Fixes:
- Added ECS unit test (from Manu Bretelle).
- ECS documentation fix (from Manu Bretelle).
- Fix #1252: more indentation inconsistencies.
- Fix #1253: unused variable in edns-subnet/addrtree.c:getbit().
- Fix #1254: clarify ratelimit-{for,below}-domain (from Manu Bretelle).
- iana portlist update
- Based on #1257: check parse limit before t increment in sldns RR
  string parse routine.
- Fix #1258: Windows 10 X64 unbound 1.6.2 service will not start.
  and fix that 64bit getting installed in C:\Program Files (x86).
- Fix #1259: "--disable-ecdsa" argument overwritten
  by "#ifdef SHA256_DIGEST_LENGTH@daemon/remote.c".
- iana portlist update
- Added test for leak of stub information.
- Fix sldns wire2str printout of RR type CAA tags.
- Fix sldns int16_data parse.
- Fix sldns parse and printout of TSIG RRs.
- sldns SMIMEA and AVC definitions, same as getdns definitions.
- Fix tcp-mss failure printout text.
- Set SO_REUSEADDR on outgoing tcp connections to fix the bind before
  connect limited tcp connections.  With the option tcp connections
  can share the same source port (for different destinations).
- Add 'c' to getopt() in testbound.
- Adjust servfail by iterator to not store in cache when serve-expired
  is enabled, to avoid overwriting useful information there.
- Fix queries for nameservers under a stub leaking to the internet.
- document trust-anchor-signaling in example config file.
- updated configure, dependencies and flex output.
- better module memory lookup, fix of unbound-control shm names for
  module memory printout of statistics.
- Fix type AVC sldns rrdef.
- Some whitespace fixup.
- Fix #1265: contrib/unbound.service contains hardcoded path.
- Fix #1265 to use /bin/kill.
- Fix #1267: Libunbound validator/val_secalgo.c uses obsolete APIs,
  and compatibility with BoringSSL.
- Fix #1268: SIGSEGV after log_reopen.
- exec_prefix is by default equal to prefix.
- printout localzone for duplicate local-zone warnings.
- Fix assertion for low buffer size and big edns payload when worker
  overrides udpsize.
- Support for openssl EVP_DigestVerify.
- Fix #1269: inconsistent use of built-in local zones with views.
- Add defaults for new local-zone trees added to views using
  unbound-control.
- Fix #1273: cachedb.c doesn't compile with -Wextra.
- If MSG_FASTOPEN gives EPIPE fallthrough to try normal tcp write.
- Also use global local-zones when there is a matching view that does
  not have any local-zone specified.
- Fix fastopen EPIPE fallthrough to perform connect.
- Fix #1274: automatically trim chroot path from dnscrypt key/cert paths
  (from Manu Bretelle).
- Fix #1275: cached data in cachedb is never used.
- Fix that unbound-control can set val_clean_additional and
  val_permissive_mode.
- Add dnscrypt XChaCha20 tests.
- Detect chacha for dnscrypt at configure time.
- dnscrypt unit tests with chacha.
- Added domain name based ECS whitelist.
- Fix #1278: Incomplete wildcard proof.
- Fix #1279: Memory leak on reload when python module is enabled.
- Fix #1280: Unbound fails assert when response from authoritative
  contains malformed qname.  When 0x20 caps-for-id is enabled, when
  assertions are not enabled the malformed qname is handled correctly.
- More fixes in depth for buffer checks in 0x20 qname checks.
- Fix stub zone queries leaking to the internet for
  harden-referral-path ns checks.
- Fix query for refetch_glue of stub leaking to internet.
- Fix #1301: memory leak in respip and tests.
- Free callback in edns-subnetmod on exit and restart.
- Fix memory leak in sldns_buffer_new_frm_data.
- Fix memory leak in dnscrypt config read.
- Fix dnscrypt chacha cert support ifdefs.
- Fix dnscrypt chacha cert unit test escapes in grep.
- Fix to unlock view in view test.
- Fix warning in pythonmod under clang compiler.
- Fix lintian typo.
- Fix #1316: heap read buffer overflow in parse_edns_options.</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- RPM group fix. Do not suppress user/group creation problems.
  Replace %__ type macro indirections.</changelog>
  <changelog author="michael@stroeder.com" date="1503316800">- update to 1.6.5
  * Fix install of trust anchor when two anchors are present, makes both
    valid.  Checks hash of DS but not signature of new key.  This fixes
    installs between sep11 and oct11 2017.</changelog>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
</package>
<package pkgid="3a210268070d3eac3133f5f04fe7244b800bd652497a89cc8bae201d0d4c0220" name="zxing-cpp" arch="src">
  <version epoch="0" ver="1.2.0" rel="9.7.1"/>
  <changelog author="lbeltrame@kde.org" date="1558094400">- Initial package for openSUSE
- Add upstream patch to add proper installability and library
  versioning:
  * fix-library-installation-and-versioning.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1558526400">- Fixup URL and Source</changelog>
  <changelog author="jengelh@inai.de" date="1558612800">- Trim metadata redundancies from description.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add add-missing-includes-of-stdexcept-header.patch
  in order to fix boo#1158377.</changelog>
  <changelog author="christophe@krop.fr" date="1597579200">- Update to 1.1.0
  * Add Python binding
  * Bug fixes from upstream XZing project
  * Many performance improvements for 1D readers
  * More meta-data exported when reading specific format
  * Minor bug fixes and improvements for corner cases
  * Improve DataMatrix encoder
  * Add interface to simplify basic usage
  * WASM API to support pixels array as input
  * Few minor bug fixes
  * A new and (hopefully) 'future proof' single ReadBarcode entry point
    into the decoding functionality.
  * The LuminanceSource based API is now deprecated but still compiles.
  * A new BarcodeFormats flag type to specify the set of barcodes to look for.
  * Deprecated unrelyable Result::resultPoints in favor of well defined
    Result::position.
  * Deprecated Result::metadata() -&gt; ORIENTATION in favor
    of Result::orientation.
  * New Binarizer enum in DecodeHints to specify the binarizer for
    the ReadBarcode API.
  * New DecodeHints::isPure property to speed up detection for
    'pure' input use-cases.
  * New 'unified' CMake structure to build (most) of the project from
    the top-level project.
  * New ZXingReader and ZXingWriter example code also meant for distributing.
  * New simplified and consistent Python API (breaking change)
  * ReedSolomon error detection code 2x speedup.
  * Enable basic MaxiCode support.
  * Fix coutry-code metatdata decoding for UPC/EAN codes.
  * Slightly improved QRCode detection for rotated symbols.
  * Faster PDF417 decoder.
  * Lots of minor code readability and general cleanup improvements.
- Drop patches:
  * add-missing-includes-of-stdexcept-header.patch
  * fix-library-installation-and-versioning.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add fix for pkg-config file so the version and library are set properly
  in the resulting .pc file:
  * fix-pkg-config-file.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603454400">- Add baselibs.conf</changelog>
  <changelog author="sflees@suse.de" date="1610712000">- Use %cmake_build instead of %make_jobs
- Shouldn't need -DBUILD_SHARED_LIBRARY=ON</changelog>
  <changelog author="christophe@krop.fr" date="1612872000">- Update to 1.1.1. No changelog available.
- Drop fix-pkg-config-file.patch. Merged upstream
- Add 0001-Fix-build-with-GCC-11.patch to fix GCC 11 build
  issues (boo#1181915)</changelog>
  <changelog author="rpm@fthiessen.de" date="1622289600">- Update to 1.2.0
  * new BarcodeFormat names, old ones are deprecated
  * new ZXingQtCamReader demo app based on QtMultimedia and QtQuick
  * new QRCode reader, faster and better support for rotated symbols
  * added Structured Append support for DataMatrix, Aztec and MaxiCode
  * added DMRE support for DataMatrix
  * switch to the reimplemented 1D detectors, about 5x faster
  * a lot faster and more capable isPure detection for all 2D codes
  * 20% faster ReedSolomon error correcting
  * PDF417 is faster and supports flipped symbols
  * reduced false positive rate for UPC/EAN barcodes and improved
    Add-On symbol handling
  * proper ECI handling in all 2D barcodes
  * much improved python wrapper
  * deprecate the use of ResultMetadata
- Add cmake-check-system-first.patch
- Drop upstream merged 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635940800">- Use the updated cmake3-full package instead of cmake on SLE12
- Do not build examples on SLE12
- Only build blackbox tests on TW</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636113600">- Do not build examples to avoid a cycle with QT5Multimedia</changelog>
  <changelog author="danilo.spinella@suse.com" date="1642593600">- Update stb_image/stb_image_write to include the fixes for
  the following CVEs:
  CVE-2021-28021, bsc#1191743
  CVE-2021-42715, bsc#1191942
  CVE-2021-42716, bsc#1191944
  * 269.patch</changelog>
</package>
<package pkgid="2988e84cd57c6ca3878789b70aeb351deebd6ee865d85130060c685705e0db8a" name="zxing-cpp-devel" arch="aarch64">
  <version epoch="0" ver="1.2.0" rel="9.7.1"/>
  <changelog author="lbeltrame@kde.org" date="1558094400">- Initial package for openSUSE
- Add upstream patch to add proper installability and library
  versioning:
  * fix-library-installation-and-versioning.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1558526400">- Fixup URL and Source</changelog>
  <changelog author="jengelh@inai.de" date="1558612800">- Trim metadata redundancies from description.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add add-missing-includes-of-stdexcept-header.patch
  in order to fix boo#1158377.</changelog>
  <changelog author="christophe@krop.fr" date="1597579200">- Update to 1.1.0
  * Add Python binding
  * Bug fixes from upstream XZing project
  * Many performance improvements for 1D readers
  * More meta-data exported when reading specific format
  * Minor bug fixes and improvements for corner cases
  * Improve DataMatrix encoder
  * Add interface to simplify basic usage
  * WASM API to support pixels array as input
  * Few minor bug fixes
  * A new and (hopefully) 'future proof' single ReadBarcode entry point
    into the decoding functionality.
  * The LuminanceSource based API is now deprecated but still compiles.
  * A new BarcodeFormats flag type to specify the set of barcodes to look for.
  * Deprecated unrelyable Result::resultPoints in favor of well defined
    Result::position.
  * Deprecated Result::metadata() -&gt; ORIENTATION in favor
    of Result::orientation.
  * New Binarizer enum in DecodeHints to specify the binarizer for
    the ReadBarcode API.
  * New DecodeHints::isPure property to speed up detection for
    'pure' input use-cases.
  * New 'unified' CMake structure to build (most) of the project from
    the top-level project.
  * New ZXingReader and ZXingWriter example code also meant for distributing.
  * New simplified and consistent Python API (breaking change)
  * ReedSolomon error detection code 2x speedup.
  * Enable basic MaxiCode support.
  * Fix coutry-code metatdata decoding for UPC/EAN codes.
  * Slightly improved QRCode detection for rotated symbols.
  * Faster PDF417 decoder.
  * Lots of minor code readability and general cleanup improvements.
- Drop patches:
  * add-missing-includes-of-stdexcept-header.patch
  * fix-library-installation-and-versioning.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add fix for pkg-config file so the version and library are set properly
  in the resulting .pc file:
  * fix-pkg-config-file.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603454400">- Add baselibs.conf</changelog>
  <changelog author="sflees@suse.de" date="1610712000">- Use %cmake_build instead of %make_jobs
- Shouldn't need -DBUILD_SHARED_LIBRARY=ON</changelog>
  <changelog author="christophe@krop.fr" date="1612872000">- Update to 1.1.1. No changelog available.
- Drop fix-pkg-config-file.patch. Merged upstream
- Add 0001-Fix-build-with-GCC-11.patch to fix GCC 11 build
  issues (boo#1181915)</changelog>
  <changelog author="rpm@fthiessen.de" date="1622289600">- Update to 1.2.0
  * new BarcodeFormat names, old ones are deprecated
  * new ZXingQtCamReader demo app based on QtMultimedia and QtQuick
  * new QRCode reader, faster and better support for rotated symbols
  * added Structured Append support for DataMatrix, Aztec and MaxiCode
  * added DMRE support for DataMatrix
  * switch to the reimplemented 1D detectors, about 5x faster
  * a lot faster and more capable isPure detection for all 2D codes
  * 20% faster ReedSolomon error correcting
  * PDF417 is faster and supports flipped symbols
  * reduced false positive rate for UPC/EAN barcodes and improved
    Add-On symbol handling
  * proper ECI handling in all 2D barcodes
  * much improved python wrapper
  * deprecate the use of ResultMetadata
- Add cmake-check-system-first.patch
- Drop upstream merged 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635940800">- Use the updated cmake3-full package instead of cmake on SLE12
- Do not build examples on SLE12
- Only build blackbox tests on TW</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636113600">- Do not build examples to avoid a cycle with QT5Multimedia</changelog>
  <changelog author="danilo.spinella@suse.com" date="1642593600">- Update stb_image/stb_image_write to include the fixes for
  the following CVEs:
  CVE-2021-28021, bsc#1191743
  CVE-2021-42715, bsc#1191942
  CVE-2021-42716, bsc#1191944
  * 269.patch</changelog>
</package>
<package pkgid="3d91a1053b1d3ca6d8d44a6dd814cc72896aad1ebe696d4f95dbcdce406809fc" name="zxing-cpp-devel" arch="ppc64le">
  <version epoch="0" ver="1.2.0" rel="9.7.1"/>
  <changelog author="lbeltrame@kde.org" date="1558094400">- Initial package for openSUSE
- Add upstream patch to add proper installability and library
  versioning:
  * fix-library-installation-and-versioning.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1558526400">- Fixup URL and Source</changelog>
  <changelog author="jengelh@inai.de" date="1558612800">- Trim metadata redundancies from description.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add add-missing-includes-of-stdexcept-header.patch
  in order to fix boo#1158377.</changelog>
  <changelog author="christophe@krop.fr" date="1597579200">- Update to 1.1.0
  * Add Python binding
  * Bug fixes from upstream XZing project
  * Many performance improvements for 1D readers
  * More meta-data exported when reading specific format
  * Minor bug fixes and improvements for corner cases
  * Improve DataMatrix encoder
  * Add interface to simplify basic usage
  * WASM API to support pixels array as input
  * Few minor bug fixes
  * A new and (hopefully) 'future proof' single ReadBarcode entry point
    into the decoding functionality.
  * The LuminanceSource based API is now deprecated but still compiles.
  * A new BarcodeFormats flag type to specify the set of barcodes to look for.
  * Deprecated unrelyable Result::resultPoints in favor of well defined
    Result::position.
  * Deprecated Result::metadata() -&gt; ORIENTATION in favor
    of Result::orientation.
  * New Binarizer enum in DecodeHints to specify the binarizer for
    the ReadBarcode API.
  * New DecodeHints::isPure property to speed up detection for
    'pure' input use-cases.
  * New 'unified' CMake structure to build (most) of the project from
    the top-level project.
  * New ZXingReader and ZXingWriter example code also meant for distributing.
  * New simplified and consistent Python API (breaking change)
  * ReedSolomon error detection code 2x speedup.
  * Enable basic MaxiCode support.
  * Fix coutry-code metatdata decoding for UPC/EAN codes.
  * Slightly improved QRCode detection for rotated symbols.
  * Faster PDF417 decoder.
  * Lots of minor code readability and general cleanup improvements.
- Drop patches:
  * add-missing-includes-of-stdexcept-header.patch
  * fix-library-installation-and-versioning.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add fix for pkg-config file so the version and library are set properly
  in the resulting .pc file:
  * fix-pkg-config-file.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603454400">- Add baselibs.conf</changelog>
  <changelog author="sflees@suse.de" date="1610712000">- Use %cmake_build instead of %make_jobs
- Shouldn't need -DBUILD_SHARED_LIBRARY=ON</changelog>
  <changelog author="christophe@krop.fr" date="1612872000">- Update to 1.1.1. No changelog available.
- Drop fix-pkg-config-file.patch. Merged upstream
- Add 0001-Fix-build-with-GCC-11.patch to fix GCC 11 build
  issues (boo#1181915)</changelog>
  <changelog author="rpm@fthiessen.de" date="1622289600">- Update to 1.2.0
  * new BarcodeFormat names, old ones are deprecated
  * new ZXingQtCamReader demo app based on QtMultimedia and QtQuick
  * new QRCode reader, faster and better support for rotated symbols
  * added Structured Append support for DataMatrix, Aztec and MaxiCode
  * added DMRE support for DataMatrix
  * switch to the reimplemented 1D detectors, about 5x faster
  * a lot faster and more capable isPure detection for all 2D codes
  * 20% faster ReedSolomon error correcting
  * PDF417 is faster and supports flipped symbols
  * reduced false positive rate for UPC/EAN barcodes and improved
    Add-On symbol handling
  * proper ECI handling in all 2D barcodes
  * much improved python wrapper
  * deprecate the use of ResultMetadata
- Add cmake-check-system-first.patch
- Drop upstream merged 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635940800">- Use the updated cmake3-full package instead of cmake on SLE12
- Do not build examples on SLE12
- Only build blackbox tests on TW</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636113600">- Do not build examples to avoid a cycle with QT5Multimedia</changelog>
  <changelog author="danilo.spinella@suse.com" date="1642593600">- Update stb_image/stb_image_write to include the fixes for
  the following CVEs:
  CVE-2021-28021, bsc#1191743
  CVE-2021-42715, bsc#1191942
  CVE-2021-42716, bsc#1191944
  * 269.patch</changelog>
</package>
<package pkgid="fe8564d8723c45f03b8efe032ab3408bef71881a199dc625a36a16dd91b5f4d9" name="zxing-cpp-devel" arch="s390x">
  <version epoch="0" ver="1.2.0" rel="9.7.1"/>
  <changelog author="lbeltrame@kde.org" date="1558094400">- Initial package for openSUSE
- Add upstream patch to add proper installability and library
  versioning:
  * fix-library-installation-and-versioning.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1558526400">- Fixup URL and Source</changelog>
  <changelog author="jengelh@inai.de" date="1558612800">- Trim metadata redundancies from description.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add add-missing-includes-of-stdexcept-header.patch
  in order to fix boo#1158377.</changelog>
  <changelog author="christophe@krop.fr" date="1597579200">- Update to 1.1.0
  * Add Python binding
  * Bug fixes from upstream XZing project
  * Many performance improvements for 1D readers
  * More meta-data exported when reading specific format
  * Minor bug fixes and improvements for corner cases
  * Improve DataMatrix encoder
  * Add interface to simplify basic usage
  * WASM API to support pixels array as input
  * Few minor bug fixes
  * A new and (hopefully) 'future proof' single ReadBarcode entry point
    into the decoding functionality.
  * The LuminanceSource based API is now deprecated but still compiles.
  * A new BarcodeFormats flag type to specify the set of barcodes to look for.
  * Deprecated unrelyable Result::resultPoints in favor of well defined
    Result::position.
  * Deprecated Result::metadata() -&gt; ORIENTATION in favor
    of Result::orientation.
  * New Binarizer enum in DecodeHints to specify the binarizer for
    the ReadBarcode API.
  * New DecodeHints::isPure property to speed up detection for
    'pure' input use-cases.
  * New 'unified' CMake structure to build (most) of the project from
    the top-level project.
  * New ZXingReader and ZXingWriter example code also meant for distributing.
  * New simplified and consistent Python API (breaking change)
  * ReedSolomon error detection code 2x speedup.
  * Enable basic MaxiCode support.
  * Fix coutry-code metatdata decoding for UPC/EAN codes.
  * Slightly improved QRCode detection for rotated symbols.
  * Faster PDF417 decoder.
  * Lots of minor code readability and general cleanup improvements.
- Drop patches:
  * add-missing-includes-of-stdexcept-header.patch
  * fix-library-installation-and-versioning.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add fix for pkg-config file so the version and library are set properly
  in the resulting .pc file:
  * fix-pkg-config-file.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603454400">- Add baselibs.conf</changelog>
  <changelog author="sflees@suse.de" date="1610712000">- Use %cmake_build instead of %make_jobs
- Shouldn't need -DBUILD_SHARED_LIBRARY=ON</changelog>
  <changelog author="christophe@krop.fr" date="1612872000">- Update to 1.1.1. No changelog available.
- Drop fix-pkg-config-file.patch. Merged upstream
- Add 0001-Fix-build-with-GCC-11.patch to fix GCC 11 build
  issues (boo#1181915)</changelog>
  <changelog author="rpm@fthiessen.de" date="1622289600">- Update to 1.2.0
  * new BarcodeFormat names, old ones are deprecated
  * new ZXingQtCamReader demo app based on QtMultimedia and QtQuick
  * new QRCode reader, faster and better support for rotated symbols
  * added Structured Append support for DataMatrix, Aztec and MaxiCode
  * added DMRE support for DataMatrix
  * switch to the reimplemented 1D detectors, about 5x faster
  * a lot faster and more capable isPure detection for all 2D codes
  * 20% faster ReedSolomon error correcting
  * PDF417 is faster and supports flipped symbols
  * reduced false positive rate for UPC/EAN barcodes and improved
    Add-On symbol handling
  * proper ECI handling in all 2D barcodes
  * much improved python wrapper
  * deprecate the use of ResultMetadata
- Add cmake-check-system-first.patch
- Drop upstream merged 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635940800">- Use the updated cmake3-full package instead of cmake on SLE12
- Do not build examples on SLE12
- Only build blackbox tests on TW</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636113600">- Do not build examples to avoid a cycle with QT5Multimedia</changelog>
  <changelog author="danilo.spinella@suse.com" date="1642593600">- Update stb_image/stb_image_write to include the fixes for
  the following CVEs:
  CVE-2021-28021, bsc#1191743
  CVE-2021-42715, bsc#1191942
  CVE-2021-42716, bsc#1191944
  * 269.patch</changelog>
</package>
<package pkgid="bd7047a77112cb43104862c92d20e3630abd2ca9eb0bef9596459af6753cd210" name="zxing-cpp-devel" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="9.7.1"/>
  <changelog author="lbeltrame@kde.org" date="1558094400">- Initial package for openSUSE
- Add upstream patch to add proper installability and library
  versioning:
  * fix-library-installation-and-versioning.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1558526400">- Fixup URL and Source</changelog>
  <changelog author="jengelh@inai.de" date="1558612800">- Trim metadata redundancies from description.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add add-missing-includes-of-stdexcept-header.patch
  in order to fix boo#1158377.</changelog>
  <changelog author="christophe@krop.fr" date="1597579200">- Update to 1.1.0
  * Add Python binding
  * Bug fixes from upstream XZing project
  * Many performance improvements for 1D readers
  * More meta-data exported when reading specific format
  * Minor bug fixes and improvements for corner cases
  * Improve DataMatrix encoder
  * Add interface to simplify basic usage
  * WASM API to support pixels array as input
  * Few minor bug fixes
  * A new and (hopefully) 'future proof' single ReadBarcode entry point
    into the decoding functionality.
  * The LuminanceSource based API is now deprecated but still compiles.
  * A new BarcodeFormats flag type to specify the set of barcodes to look for.
  * Deprecated unrelyable Result::resultPoints in favor of well defined
    Result::position.
  * Deprecated Result::metadata() -&gt; ORIENTATION in favor
    of Result::orientation.
  * New Binarizer enum in DecodeHints to specify the binarizer for
    the ReadBarcode API.
  * New DecodeHints::isPure property to speed up detection for
    'pure' input use-cases.
  * New 'unified' CMake structure to build (most) of the project from
    the top-level project.
  * New ZXingReader and ZXingWriter example code also meant for distributing.
  * New simplified and consistent Python API (breaking change)
  * ReedSolomon error detection code 2x speedup.
  * Enable basic MaxiCode support.
  * Fix coutry-code metatdata decoding for UPC/EAN codes.
  * Slightly improved QRCode detection for rotated symbols.
  * Faster PDF417 decoder.
  * Lots of minor code readability and general cleanup improvements.
- Drop patches:
  * add-missing-includes-of-stdexcept-header.patch
  * fix-library-installation-and-versioning.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add fix for pkg-config file so the version and library are set properly
  in the resulting .pc file:
  * fix-pkg-config-file.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603454400">- Add baselibs.conf</changelog>
  <changelog author="sflees@suse.de" date="1610712000">- Use %cmake_build instead of %make_jobs
- Shouldn't need -DBUILD_SHARED_LIBRARY=ON</changelog>
  <changelog author="christophe@krop.fr" date="1612872000">- Update to 1.1.1. No changelog available.
- Drop fix-pkg-config-file.patch. Merged upstream
- Add 0001-Fix-build-with-GCC-11.patch to fix GCC 11 build
  issues (boo#1181915)</changelog>
  <changelog author="rpm@fthiessen.de" date="1622289600">- Update to 1.2.0
  * new BarcodeFormat names, old ones are deprecated
  * new ZXingQtCamReader demo app based on QtMultimedia and QtQuick
  * new QRCode reader, faster and better support for rotated symbols
  * added Structured Append support for DataMatrix, Aztec and MaxiCode
  * added DMRE support for DataMatrix
  * switch to the reimplemented 1D detectors, about 5x faster
  * a lot faster and more capable isPure detection for all 2D codes
  * 20% faster ReedSolomon error correcting
  * PDF417 is faster and supports flipped symbols
  * reduced false positive rate for UPC/EAN barcodes and improved
    Add-On symbol handling
  * proper ECI handling in all 2D barcodes
  * much improved python wrapper
  * deprecate the use of ResultMetadata
- Add cmake-check-system-first.patch
- Drop upstream merged 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635940800">- Use the updated cmake3-full package instead of cmake on SLE12
- Do not build examples on SLE12
- Only build blackbox tests on TW</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636113600">- Do not build examples to avoid a cycle with QT5Multimedia</changelog>
  <changelog author="danilo.spinella@suse.com" date="1642593600">- Update stb_image/stb_image_write to include the fixes for
  the following CVEs:
  CVE-2021-28021, bsc#1191743
  CVE-2021-42715, bsc#1191942
  CVE-2021-42716, bsc#1191944
  * 269.patch</changelog>
</package>
</otherdata>