{"id":"CVE-2020-14798","aliases":["ALPINE-CVE-2020-14798","BIT-java-2020-14798","BIT-java-min-2020-14798","BIT-jre-2020-14798","CLSA-2022-1661173656","CLSA-2022-1661176564","DEBIAN-CVE-2020-14798","DLA-2412-1","DSA-4779-1","EUVD-2020-6934","GHSA-xc9p-gjc5-8c5x","SUSE-SU-2020:14587-1","SUSE-SU-2020:14588-1","SUSE-SU-2020:3159-1","SUSE-SU-2020:3191-1","SUSE-SU-2020:3310-1","SUSE-SU-2020:3359-1","SUSE-SU-2020:3460-1","SUSE-SU-2020:3932-1","SUSE-SU-2021:0019-1","SUSE-SU-2021:0032-1","UBUNTU-CVE-2020-14798","USN-4607-1","USN-4607-2","openSUSE-SU-2020:1893-1","openSUSE-SU-2020:1984-1","openSUSE-SU-2020:1994-1","openSUSE-SU-2020:2048-1","openSUSE-SU-2020:2083-1","openSUSE-SU-2024:10871-1","openSUSE-SU-2024:10872-1","openSUSE-SU-2024:10873-1","openSUSE-SU-2024:10876-1"],"status":"published","title":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).","severity":{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.02717,"percentile":0.86138,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2020-10-21T14:04:25Z","modified":"2026-11-03T06:32:36Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"openjdk11","fixed_in":["11.0.9_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"openjdk11","fixed_in":["11.0.9_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"openjdk11","fixed_in":["11.0.9_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openjdk11","fixed_in":["11.0.9_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openjdk11","fixed_in":["11.0.9_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openjdk11","fixed_in":["11.0.9_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openjdk11","fixed_in":["11.0.9_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openjdk11","fixed_in":["11.0.9_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openjdk11","fixed_in":["11.0.9_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openjdk11","fixed_in":["11.0.9_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openjdk11","fixed_in":["11.0.9_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openjdk11","fixed_in":["11.0.9_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjdk11","fixed_in":["11.0.9_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.10","package":"openjdk7","fixed_in":["7.281.2.6.24-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"openjdk7","fixed_in":["7.281.2.6.24-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"openjdk7","fixed_in":["7.281.2.6.24-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"openjdk7","fixed_in":["7.271.2.6.23-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"openjdk7","fixed_in":["7.271.2.6.23-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openjdk7","fixed_in":["7.271.2.6.23-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openjdk7","fixed_in":["7.271.2.6.23-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openjdk7","fixed_in":["7.271.2.6.23-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openjdk7","fixed_in":["7.271.2.6.23-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.10","package":"openjdk8","fixed_in":["8.272.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"openjdk8","fixed_in":["8.272.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"openjdk8","fixed_in":["8.272.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"openjdk8","fixed_in":["8.272.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"openjdk8","fixed_in":["8.272.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openjdk8","fixed_in":["8.272.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openjdk8","fixed_in":["8.272.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openjdk8","fixed_in":["8.272.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openjdk8","fixed_in":["8.272.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openjdk8","fixed_in":["8.272.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openjdk8","fixed_in":["8.272.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openjdk8","fixed_in":["8.272.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openjdk8","fixed_in":["8.272.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openjdk8","fixed_in":["8.272.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjdk8","fixed_in":["8.272.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"openjdk8","fixed_in":["8.272.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"openjdk8","fixed_in":["8.272.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"openjdk8","fixed_in":["8.272.10-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"java","fixed_in":["1.7.0","1.8.0","7.0.281","8.0.271","11.0.9","15.0.1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"java-min","fixed_in":["1.7.0","1.8.0","7.0.281","8.0.271","11.0.9","15.0.1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"jre","fixed_in":["1.7.0","1.8.0","7.0.281","8.0.271","11.0.9","15.0.1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"openjdk-11","fixed_in":["11.0.9+11-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-8","fixed_in":["8u272-b10-0ubuntu1~16.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openjdk-8","fixed_in":["8u272-b10-0ubuntu1~18.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openjdk-lts","fixed_in":["11.0.9+11-0ubuntu1~18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-8","fixed_in":["8u272-b10-0ubuntu1~20.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-lts","fixed_in":["11.0.9+11-0ubuntu1~20.04"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.10","package":"openjdk7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.281.2.6.24-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"openjdk7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.281.2.6.24-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"openjdk7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.281.2.6.24-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"openjdk7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.271.2.6.23-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"openjdk7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.271.2.6.23-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openjdk7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.271.2.6.23-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openjdk7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.271.2.6.23-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openjdk7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.271.2.6.23-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openjdk7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.271.2.6.23-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.10","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.272.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.272.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.272.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.272.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.272.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.272.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.272.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.272.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.272.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.272.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.272.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.272.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.272.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.272.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.272.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.272.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.272.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.272.10-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"java","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.7.0"},{"introduced":"1.8.0"},{"fixed":"1.8.0"},{"introduced":"7.0.0"},{"fixed":"7.0.281"},{"introduced":"8.0.0"},{"fixed":"8.0.271"},{"introduced":"9.0.0"},{"fixed":"11.0.9"},{"introduced":"12.0.0"},{"fixed":"15.0.1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"java-min","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.7.0"},{"introduced":"1.8.0"},{"fixed":"1.8.0"},{"introduced":"7.0.0"},{"fixed":"7.0.281"},{"introduced":"8.0.0"},{"fixed":"8.0.271"},{"introduced":"9.0.0"},{"fixed":"11.0.9"},{"introduced":"12.0.0"},{"fixed":"15.0.1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"jre","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.7.0"},{"introduced":"1.8.0"},{"fixed":"1.8.0"},{"introduced":"7.0.0"},{"fixed":"7.0.281"},{"introduced":"8.0.0"},{"fixed":"8.0.271"},{"introduced":"9.0.0"},{"fixed":"11.0.9"},{"introduced":"12.0.0"},{"fixed":"15.0.1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.351-2.6.28.0.el6.tuxcare.els1"}]}],"bundled":50},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.351-2.6.28.0.el6.tuxcare.els1"}]}],"bundled":50},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.351-2.6.28.0.el6.tuxcare.els1"}]}],"bundled":50},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.351-2.6.28.0.el6.tuxcare.els1"}]}],"bundled":50},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.351-2.6.28.0.el6.tuxcare.els1"}]}],"bundled":50},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.351-2.6.28.0.el6.tuxcare.els1"}]}],"bundled":50},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.351-2.6.28.0.el6.tuxcare.els1"}]}],"bundled":50},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.351-2.6.28.0.el6.tuxcare.els1"}]}],"bundled":50},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.351-2.6.28.0.el6.tuxcare.els1"}]}],"bundled":50},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.351-2.6.28.0.el6.tuxcare.els1"}]}],"bundled":50},{"source":"osv","ecosystem":"Debian:11","package":"openjdk-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9+11-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u272-b10-0+deb9u1"}]}],"versions":["8u131-b11-2","8u141-b15-1","8u141-b15-1~deb9u1","8u141-b15-2","8u141-b15-3","8u144-b01-1","8u144-b01-2","8u151-b12-1","8u151-b12-1~deb9u1","8u162-b12-1","8u162-b12-1~bpo8+1","8u162-b12-1~deb9u1","8u171-b11-1","8u171-b11-1~bpo8+1","8u171-b11-1~deb9u1","8u171-b11-2","8u181-b13-1","8u181-b13-1~deb9u1","8u181-b13-2","8u181-b13-2~deb9u1","8u191-b12-1","8u191-b12-2","8u202-b26-1","8u202-b26-2","8u202-b26-3","8u212-b01-1","8u212-b01-1~deb9u1","8u212-b03-1","8u212-b03-2","8u212-b03-2~deb9u1","8u222-b04-1","8u222-b04-3","8u222-b05-1","8u222-b07-1","8u222-b07-2","8u222-b07-3","8u222-b10-1","8u222-b10-1~deb9u1","8u232-b04-1","8u232-b07-1","8u232-b07-2","8u232-b09-1","8u232-b09-1~deb9u1","8u242-b04-1","8u242-b08-1","8u242-b08-1~deb9u1","8u252-b07-1","8u252-b09-1","8u252-b09-1~deb9u1","8u265-b01-0+deb9u1","8u265-b01-1"],"bundled":8},{"source":"osv","ecosystem":"Debian:10","package":"openjdk-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9+11-1~deb10u1"}]}],"versions":["11.0.3+7-5","11.0.4+1-1","11.0.4+10-1","11.0.4+11-1","11.0.4+11-1~bpo9+1","11.0.4+11-1~deb10u1","11.0.4+2-1","11.0.4+4+really11.0.3+7-1","11.0.4+4+really11.0.3+7-2","11.0.4+4-1","11.0.4+6-1","11.0.4+8-1","11.0.4+9-1","11.0.5+10-1","11.0.5+10-1~bpo9+1","11.0.5+10-1~deb10u1","11.0.5+10-2","11.0.5+6-1","11.0.5+6-2","11.0.5+9-1","11.0.6+10-1","11.0.6+10-1~bpo9+1","11.0.6+10-1~deb10u1","11.0.6+10-2","11.0.6+7-1","11.0.7+10-1","11.0.7+10-2","11.0.7+10-3","11.0.7+10-3~deb10u1","11.0.7+9-1","11.0.8+10-1","11.0.8+10-1.1","11.0.8+10-1~deb10u1"],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.75-65.57.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.75-26.62.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9.0-3.15.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9.0-3.15.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-27.48.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-27.48.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-27.48.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-27.48.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-27.48.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-27.48.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-27.48.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-27.48.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-27.48.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-27.48.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-27.48.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-27.48.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-27.48.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-27.48.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-27.48.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-27.48.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-27.48.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.281-43.44.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.281-43.44.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.281-43.44.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.281-43.44.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.281-43.44.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.281-43.44.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.281-43.44.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.281-43.44.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.281-43.44.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.281-43.44.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.281-43.44.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.281-43.44.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.281-43.44.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.281-43.44.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.281-43.44.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.281-43.44.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.281-43.44.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9.0-3.48.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9.0-3.48.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP1","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9.0-3.48.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP2","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9.0-3.48.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP1","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-3.42.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-3.42.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-3.42.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-3.42.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.20-3.47.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.20-3.47.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.20-3.47.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.20-3.47.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.75-38.59.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.75-38.59.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.75-38.59.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.75-38.59.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.75-38.59.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.75-38.59.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.75-38.59.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.75-38.59.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.75-38.59.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.75-38.59.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.75-38.59.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.75-38.59.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.75-38.59.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.75-38.59.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.75-38.59.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.75-38.59.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.75-38.59.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.75-38.59.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.20-30.78.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.20-30.78.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.20-30.78.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.20-30.78.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.20-30.78.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.20-30.78.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.20-30.78.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.20-30.78.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.20-30.78.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.20-30.78.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.20-30.78.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.20-30.78.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.20-30.78.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.20-30.78.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.20-30.78.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.20-30.78.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.20-30.78.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr6.20-30.78.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u272-b10-0ubuntu1~16.04"}]}],"versions":["8u66-b01-5","8u72-b05-1ubuntu1","8u72-b05-5","8u72-b05-6","8u72-b15-1","8u72-b15-2ubuntu1","8u72-b15-2ubuntu3","8u72-b15-3ubuntu1","8u77-b03-1ubuntu2","8u77-b03-3ubuntu1","8u77-b03-3ubuntu2","8u77-b03-3ubuntu3","8u91-b14-0ubuntu4~16.04.1","8u91-b14-3ubuntu1~16.04.1","8u111-b14-2ubuntu0.16.04.2","8u121-b13-0ubuntu1.16.04.2","8u131-b11-0ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.3","8u151-b12-0ubuntu0.16.04.2","8u162-b12-0ubuntu0.16.04.2","8u171-b11-0ubuntu0.16.04.1","8u181-b13-0ubuntu0.16.04.1","8u181-b13-1ubuntu0.16.04.1","8u191-b12-0ubuntu0.16.04.1","8u191-b12-2ubuntu0.16.04.1","8u212-b03-0ubuntu1.16.04.1","8u222-b10-1ubuntu1~16.04.1","8u232-b09-0ubuntu1~16.04.1","8u242-b08-0ubuntu3~16.04","8u252-b09-1~16.04","8u265-b01-0ubuntu2~16.04"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"icedtea-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5.2-1ubuntu2","1.5.3-0ubuntu1","1.6.1-1ubuntu2","1.6.1-3ubuntu1","1.6.1-4ubuntu1","1.6.2-1ubuntu1","1.6.2-2ubuntu1","1.6.2-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9~b88-1","9~b101-2ubuntu2","9~b102-1","9~b113-0ubuntu1","9~b114-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u272-b10-0ubuntu1~18.04"}]}],"versions":["8u144-b01-2","8u151-b12-1","8u162-b12-1","8u171-b11-0ubuntu0.18.04.1","8u181-b13-0ubuntu0.18.04.1","8u181-b13-1ubuntu0.18.04.1","8u191-b12-0ubuntu0.18.04.1","8u191-b12-2ubuntu0.18.04.1","8u212-b03-0ubuntu1.18.04.1","8u222-b10-1ubuntu1~18.04.1","8u232-b09-0ubuntu1~18.04.1","8u242-b08-0ubuntu3~18.04","8u252-b09-1~18.04","8u265-b01-0ubuntu2~18.04"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9+11-0ubuntu1~18.04.1"}]}],"versions":["9.0.4+12-2ubuntu4","9.0.4+12-4ubuntu1","10~46-4ubuntu1","10~46-5ubuntu1","10.0.1+10-1ubuntu2","10.0.1+10-3ubuntu1","10.0.2+13-1ubuntu0.18.04.1","10.0.2+13-1ubuntu0.18.04.2","10.0.2+13-1ubuntu0.18.04.3","10.0.2+13-1ubuntu0.18.04.4","11.0.2+9-3ubuntu1~18.04.3","11.0.3+7-1ubuntu2~18.04.1","11.0.4+11-1ubuntu2~18.04.3","11.0.5+10-0ubuntu1.1~18.04","11.0.6+10-1ubuntu1~18.04.1","11.0.7+10-2ubuntu2~18.04","11.0.8+10-0ubuntu1~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"icedtea-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6.2-3.1ubuntu3","1.8-0ubuntu8~18.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u272-b10-0ubuntu1~20.04"}]}],"versions":["8u232-b09-0ubuntu1","8u232-b09-1","8u242-b04-1","8u242-b08-0ubuntu3","8u252-b07-1","8u252-b09-1ubuntu1","8u265-b01-0ubuntu2~20.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9+11-0ubuntu1~20.04"}]}],"versions":["11.0.5+10-0ubuntu1","11.0.5+10-2ubuntu1","11.0.6+10-1ubuntu1","11.0.6+10-2ubuntu2","11.0.7+9-1ubuntu1","11.0.7+10-2ubuntu1","11.0.7+10-3ubuntu1","11.0.8+10-0ubuntu1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"icedtea-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8-0ubuntu8"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["13+33-1","13.0.1+9-2","13.0.2+8-1","13.0.2+8-2","13.0.3+3-1ubuntu2","13.0.4+8-1~20.04","13.0.7+5-0ubuntu1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"icedtea-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.4-1build1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"icedtea-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.8-2","1.8.8-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"icedtea-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.8-3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"icedtea-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.8-4"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"icedtea-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.8-3","1.8.8-3build1","1.8.8-3ubuntu1","1.8.8-4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u272-b10-0ubuntu1~16.04"}]}],"versions":["8u66-b01-5","8u72-b05-1ubuntu1","8u72-b05-5","8u72-b05-6","8u72-b15-1","8u72-b15-2ubuntu1","8u72-b15-2ubuntu3","8u72-b15-3ubuntu1","8u77-b03-1ubuntu2","8u77-b03-3ubuntu1","8u77-b03-3ubuntu2","8u77-b03-3ubuntu3","8u91-b14-0ubuntu4~16.04.1","8u91-b14-3ubuntu1~16.04.1","8u111-b14-2ubuntu0.16.04.2","8u121-b13-0ubuntu1.16.04.2","8u131-b11-0ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.3","8u151-b12-0ubuntu0.16.04.2","8u162-b12-0ubuntu0.16.04.2","8u171-b11-0ubuntu0.16.04.1","8u181-b13-0ubuntu0.16.04.1","8u181-b13-1ubuntu0.16.04.1","8u191-b12-0ubuntu0.16.04.1","8u191-b12-2ubuntu0.16.04.1","8u212-b03-0ubuntu1.16.04.1","8u222-b10-1ubuntu1~16.04.1","8u232-b09-0ubuntu1~16.04.1","8u242-b08-0ubuntu3~16.04","8u252-b09-1~16.04","8u265-b01-0ubuntu2~16.04"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u272-b10-0ubuntu1~18.04"}]}],"versions":["8u144-b01-2","8u151-b12-1","8u162-b12-1","8u171-b11-0ubuntu0.18.04.1","8u181-b13-0ubuntu0.18.04.1","8u181-b13-1ubuntu0.18.04.1","8u191-b12-0ubuntu0.18.04.1","8u191-b12-2ubuntu0.18.04.1","8u212-b03-0ubuntu1.18.04.1","8u222-b10-1ubuntu1~18.04.1","8u232-b09-0ubuntu1~18.04.1","8u242-b08-0ubuntu3~18.04","8u252-b09-1~18.04","8u265-b01-0ubuntu2~18.04"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9+11-0ubuntu1~18.04.1"}]}],"versions":["9.0.4+12-2ubuntu4","9.0.4+12-4ubuntu1","10~46-4ubuntu1","10~46-5ubuntu1","10.0.1+10-1ubuntu2","10.0.1+10-3ubuntu1","10.0.2+13-1ubuntu0.18.04.1","10.0.2+13-1ubuntu0.18.04.2","10.0.2+13-1ubuntu0.18.04.3","10.0.2+13-1ubuntu0.18.04.4","11.0.2+9-3ubuntu1~18.04.3","11.0.3+7-1ubuntu2~18.04.1","11.0.4+11-1ubuntu2~18.04.3","11.0.5+10-0ubuntu1.1~18.04","11.0.6+10-1ubuntu1~18.04.1","11.0.7+10-2ubuntu2~18.04","11.0.8+10-0ubuntu1~18.04.1"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u272-b10-0ubuntu1~20.04"}]}],"versions":["8u232-b09-0ubuntu1","8u232-b09-1","8u242-b04-1","8u242-b08-0ubuntu3","8u252-b07-1","8u252-b09-1ubuntu1","8u265-b01-0ubuntu2~20.04"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9+11-0ubuntu1~20.04"}]}],"versions":["11.0.5+10-0ubuntu1","11.0.5+10-2ubuntu1","11.0.6+10-1ubuntu1","11.0.6+10-2ubuntu2","11.0.7+9-1ubuntu1","11.0.7+10-2ubuntu1","11.0.7+10-3ubuntu1","11.0.8+10-0ubuntu1~20.04"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u275-b01-0ubuntu1~16.04"}]}],"versions":["8u66-b01-5","8u72-b05-1ubuntu1","8u72-b05-5","8u72-b05-6","8u72-b15-1","8u72-b15-2ubuntu1","8u72-b15-2ubuntu3","8u72-b15-3ubuntu1","8u77-b03-1ubuntu2","8u77-b03-3ubuntu1","8u77-b03-3ubuntu2","8u77-b03-3ubuntu3","8u91-b14-0ubuntu4~16.04.1","8u91-b14-3ubuntu1~16.04.1","8u111-b14-2ubuntu0.16.04.2","8u121-b13-0ubuntu1.16.04.2","8u131-b11-0ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.3","8u151-b12-0ubuntu0.16.04.2","8u162-b12-0ubuntu0.16.04.2","8u171-b11-0ubuntu0.16.04.1","8u181-b13-0ubuntu0.16.04.1","8u181-b13-1ubuntu0.16.04.1","8u191-b12-0ubuntu0.16.04.1","8u191-b12-2ubuntu0.16.04.1","8u212-b03-0ubuntu1.16.04.1","8u222-b10-1ubuntu1~16.04.1","8u232-b09-0ubuntu1~16.04.1","8u242-b08-0ubuntu3~16.04","8u252-b09-1~16.04","8u265-b01-0ubuntu2~16.04","8u272-b10-0ubuntu1~16.04"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u275-b01-0ubuntu1~18.04"}]}],"versions":["8u144-b01-2","8u151-b12-1","8u162-b12-1","8u171-b11-0ubuntu0.18.04.1","8u181-b13-0ubuntu0.18.04.1","8u181-b13-1ubuntu0.18.04.1","8u191-b12-0ubuntu0.18.04.1","8u191-b12-2ubuntu0.18.04.1","8u212-b03-0ubuntu1.18.04.1","8u222-b10-1ubuntu1~18.04.1","8u232-b09-0ubuntu1~18.04.1","8u242-b08-0ubuntu3~18.04","8u252-b09-1~18.04","8u265-b01-0ubuntu2~18.04","8u272-b10-0ubuntu1~18.04"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9.1+1-0ubuntu1~18.04"}]}],"versions":["9.0.4+12-2ubuntu4","9.0.4+12-4ubuntu1","10~46-4ubuntu1","10~46-5ubuntu1","10.0.1+10-1ubuntu2","10.0.1+10-3ubuntu1","10.0.2+13-1ubuntu0.18.04.1","10.0.2+13-1ubuntu0.18.04.2","10.0.2+13-1ubuntu0.18.04.3","10.0.2+13-1ubuntu0.18.04.4","11.0.2+9-3ubuntu1~18.04.3","11.0.3+7-1ubuntu2~18.04.1","11.0.4+11-1ubuntu2~18.04.3","11.0.5+10-0ubuntu1.1~18.04","11.0.6+10-1ubuntu1~18.04.1","11.0.7+10-2ubuntu2~18.04","11.0.8+10-0ubuntu1~18.04.1","11.0.9+11-0ubuntu1~18.04.1"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u275-b01-0ubuntu1~20.04"}]}],"versions":["8u232-b09-0ubuntu1","8u232-b09-1","8u242-b04-1","8u242-b08-0ubuntu3","8u252-b07-1","8u252-b09-1ubuntu1","8u265-b01-0ubuntu2~20.04","8u272-b10-0ubuntu1~20.04"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9.1+1-0ubuntu1~20.04"}]}],"versions":["11.0.5+10-0ubuntu1","11.0.5+10-2ubuntu1","11.0.6+10-1ubuntu1","11.0.6+10-2ubuntu2","11.0.7+9-1ubuntu1","11.0.7+10-2ubuntu1","11.0.7+10-3ubuntu1","11.0.8+10-0ubuntu1~20.04","11.0.9+11-0ubuntu1~20.04"],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"java-1_8_0-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-lp152.3.3.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9.0-lp151.3.22.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9.0-lp152.2.6.2"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-lp151.2.15.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.272-lp152.2.3.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.12.0-3.1"}]}],"bundled":95},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-13-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.8.0-3.1"}]}],"bundled":95},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-15-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.0.4.0-2.1"}]}],"bundled":48},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.302-2.2"}]}],"bundled":175}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"netapp","product":"7-mode_transition_tool"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"e-series_santricity_os_controller"},{"vendor":"netapp","product":"e-series_santricity_storage_manager"},{"vendor":"netapp","product":"e-series_santricity_web_services_proxy"},{"vendor":"netapp","product":"hci_management_node"},{"vendor":"netapp","product":"hci_storage_node"},{"vendor":"netapp","product":"oncommand_insight"},{"vendor":"netapp","product":"oncommand_unified_manager"},{"vendor":"netapp","product":"santricity_cloud_connector"},{"vendor":"netapp","product":"santricity_unified_manager"},{"vendor":"netapp","product":"snapmanager"},{"vendor":"netapp","product":"solidfire"},{"vendor":"opensuse","product":"leap"},{"vendor":"oracle","product":"jdk"},{"vendor":"oracle","product":"jre"},{"vendor":"oracle","product":"openjdk"},{"vendor":"oracle corporation","product":"java se jdk and jre"}],"references":[{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://security.netapp.com/advisory/ntap-20201023-0004/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2020/dsa-4779","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/10/msg00031.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00041.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202101-19","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14798","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20201023-0004"},{"url":"https://github.com/advisories/GHSA-xc9p-gjc5-8c5x"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-14798","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2022-1661173656.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2022-1661176564.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-14798","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-202014587-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1177943","tags":["report"]},{"url":"https://bugzilla.suse.com/1180063","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14803","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-202014588-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203159-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203191-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1171352","tags":["report"]},{"url":"https://bugzilla.suse.com/1174157","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14621","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203310-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203359-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203460-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203932-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210019-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210032-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-14798","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4607-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4607-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14798","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14779","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14781","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14782","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14792","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14796","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14797","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14803","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HBBXJG37CKNUXLISK3DWSBAHF6A3VI34/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4JSWTDWV5MMTZOHS5HIFMSHB3IUNUEUX/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Y5I3H5OR336ZSCD3OKSPETQ54YCFESWA/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DJAO3FCIU7U6QFGCFQBWQ7AIAFG7CCLZ/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XWRVFCOMHOVFD7QH66A4H74YOLORU4TF/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-13785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2659","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-14798","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).","status":"published","published":"2020-10-21T14:04:25Z","modified":"2024-09-26T20:21:17.899Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"}],"updated_at":"2026-11-02T14:35:46.476719Z"}],"euvd":[{"id":"EUVD-2020-6934","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).","status":"published","published":"2020-10-21T14:04:25Z","modified":"2024-09-26T20:21:17Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-03T00:28:06.759686Z"}],"ghsa":[{"id":"GHSA-xc9p-gjc5-8c5x","title":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).","status":"published","published":"2022-05-24T17:31:29Z","modified":"2025-05-27T18:30:36Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:02:26.855176Z"}],"nvd":[{"id":"CVE-2020-14798","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).","status":"published","published":"2020-10-21T15:15:19.78Z","modified":"2026-06-17T02:55:33.597Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"},{"version":"2.0","score":2.6,"vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:06:20.704992Z"}],"osv":[{"id":"ALPINE-CVE-2020-14798","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).","status":"published","published":"2020-10-21T15:15:19.78Z","modified":"2026-11-03T06:32:36.241949339Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-03T07:17:20.312441Z"},{"id":"CVE-2020-14798","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).","status":"published","published":"2020-10-21T15:15:19.78Z","modified":"2026-10-24T10:30:23.240797372Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:44:14.418339Z"},{"id":"DEBIAN-CVE-2020-14798","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).","status":"published","published":"2020-10-21T15:15:19.78Z","modified":"2026-08-27T13:02:03.649066407Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:33.384087Z"},{"id":"UBUNTU-CVE-2020-14798","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).","status":"published","published":"2020-10-21T15:15:00Z","modified":"2026-10-17T12:55:44.793585072Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:54:23.344108Z"},{"id":"BIT-java-2020-14798","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).","status":"published","published":"2026-05-06T14:41:47.851Z","modified":"2026-09-08T08:48:23.192746307Z","updated_at":"2026-11-02T15:28:31.02759Z"},{"id":"BIT-java-min-2020-14798","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).","status":"published","published":"2026-05-06T14:41:49.737Z","modified":"2026-09-08T08:47:52.379200086Z","updated_at":"2026-11-02T15:28:31.42203Z"},{"id":"BIT-jre-2020-14798","description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).","status":"published","published":"2026-05-08T05:43:13.086Z","modified":"2026-09-08T08:48:03.956175891Z","updated_at":"2026-11-02T15:28:31.782692Z"},{"id":"CLSA-2022-1661173656","title":"Fixed 50 CVEs in java-1.7.0-openjdk","description":"- Bump to 2.6.28 and OpenJDK 7u351-b01.\n- Security fixes in 7u351:\n - CVE-2022-21540: Improve class compilation (JDK-8281859)\n - CVE-2022-21541: Enhance MethodHandle invocations (JDK-8281866)\n - CVE-2022-34169: Improve Xalan supports (JDK-8285407)\n- Security fixes in 7u341:\n - CVE-2022-21426: Better XPath expression handling (JDK-8270504)\n - CVE-2022-21434: Better invocation handler handling (JDK-8277672)\n - CVE-2022-21443: Improved Object Identification (JDK-8275151)\n - CVE-2022-21476: Improve Santuario processing (JDK-8278008)\n - CVE-2022-21496: Improve URL supports (JDK-8278972)\n- Security fixes in 7u331:\n - CVE-2022-21248: Enhance cross VM serialization (JDK-8264934)\n - CVE-2022-21282: Better resolution of URIs (JDK-8270492)\n - CVE-2022-21283: Better String matching (JDK-8268813)\n - CVE-2022-21293: Improve String constructions (JDK-8270392)\n - CVE-2022-21294: Enhance construction of Identity maps (JDK-8270416)\n - CVE-2022-21296: Improve SAX Parser configuration management (JDK-8270498)\n - CVE-2022-21299: Improved scanning of XML entities (JDK-8270646)\n - CVE-2022-21305: Better array indexing (JDK-8272014)\n - CVE-2022-21340: Verify Jar Verification (JDK-8272026)\n - CVE-2022-21341: Improve serial forms for transport (JDK-8272236)\n - CVE-2022-21349: Improve Solaris font rendering (JDK-8273748)\n - CVE-2022-21360: Enhance BMP image support (JDK-8273756)\n - CVE-2022-21365: Enhanced BMP processing (JDK-8273838)\n- Security fixes in 7u321:\n - CVE-2021-35550: Update the default enabled cipher suites preference\n   (JDK-8163326)\n - CVE-2021-35556: Richer Text Editors (JDK-8265167)\n - CVE-2021-35559: Enhanced style for RTF kit (JDK-8265580)\n - CVE-2021-35561: Better hashing support (JDK-8266097)\n - CVE-2021-35564: Improve Keystore integrity (JDK-8266137)\n - CVE-2021-35565: com.sun.net.HttpsServer spins on TLS session close\n   (JDK-8254967)\n - CVE-2021-35586: Better BMP support (JDK-8267735)\n - CVE-2021-35588: InnerClasses: VM permits wrong Throw ClassFormatError if\n   InnerClasses attribute's inner_class_info_index is 0 (JDK-8130183)\n - CVE-2021-35603: Better session identification (JDK-8269618)\n- Security fixes in 7u311:\n - CVE-2021-2341: Improve file transfers (JDK-8258432)\n - CVE-2021-2369: Better jar file validation (JDK-8260967)\n - CVE-2021-2432: Provide better LDAP provider support (JDK-8267412)\n- Security fixes in 7u301:\n - CVE-2021-2161: Less ambiguous processing (JDK-8250568)\n - CVE-2021-2163: Enhance opening JARs (JDK-8249906)\n- Security fixes in 7u281:\n - CVE-2020-14779: Enhance support of Proxy class (JDK-8236862)\n - CVE-2020-14781: Enhanced LDAP contexts (JDK-8237990)\n - CVE-2020-14782: Enhance certificate processing (JDK-8237995)\n - CVE-2020-14792: Better range handling (JDK-8241114)\n - CVE-2020-14796: Improved URI Support (JDK-8242680)\n - CVE-2020-14797: Better Path Validation (JDK-8242685)\n - CVE-2020-14798: Enhanced buffer support (JDK-8242695)\n - CVE-2020-14803: Improved Buffer supports (JDK-8244136)\n- Security fixes in 7u271:\n - CVE-2020-14577: Enhance certificate verification (JDK-8237592)\n - CVE-2020-14578: NegativeArraySizeException in\n   sun.security.util.DerInputStream.getUnalignedBitString() (JDK-8028591)\n - CVE-2020-14579: NullPointerException in DerValue.equals(DerValue)\n   (JDK-8028431)\n - CVE-2020-14581: Better matrix operations (JDK-8238002)\n - CVE-2020-14583: Better Buffer support (JDK-8238920)\n - CVE-2020-14593: Less Affine Transformations (JDK-8240119)\n - CVE-2020-14621: Better XML namespace handling (JDK-8242136)\n- Update tzdata requirement to 2022a to match JDK-8283350\n- Update NEWS from IcedTea\n- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after\n  bump OpenJDK version","status":"published","published":"2022-08-22T13:07:36Z","modified":"2026-10-21T10:48:01.408185448Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1661176564","title":"Fixed 50 CVEs in java-1.7.0-openjdk","description":"- Bump to 2.6.28 and OpenJDK 7u351-b01.\n- Security fixes in 7u351:\n - CVE-2022-21540: Improve class compilation (JDK-8281859)\n - CVE-2022-21541: Enhance MethodHandle invocations (JDK-8281866)\n - CVE-2022-34169: Improve Xalan supports (JDK-8285407)\n- Security fixes in 7u341:\n - CVE-2022-21426: Better XPath expression handling (JDK-8270504)\n - CVE-2022-21434: Better invocation handler handling (JDK-8277672)\n - CVE-2022-21443: Improved Object Identification (JDK-8275151)\n - CVE-2022-21476: Improve Santuario processing (JDK-8278008)\n - CVE-2022-21496: Improve URL supports (JDK-8278972)\n- Security fixes in 7u331:\n - CVE-2022-21248: Enhance cross VM serialization (JDK-8264934)\n - CVE-2022-21282: Better resolution of URIs (JDK-8270492)\n - CVE-2022-21283: Better String matching (JDK-8268813)\n - CVE-2022-21293: Improve String constructions (JDK-8270392)\n - CVE-2022-21294: Enhance construction of Identity maps (JDK-8270416)\n - CVE-2022-21296: Improve SAX Parser configuration management (JDK-8270498)\n - CVE-2022-21299: Improved scanning of XML entities (JDK-8270646)\n - CVE-2022-21305: Better array indexing (JDK-8272014)\n - CVE-2022-21340: Verify Jar Verification (JDK-8272026)\n - CVE-2022-21341: Improve serial forms for transport (JDK-8272236)\n - CVE-2022-21349: Improve Solaris font rendering (JDK-8273748)\n - CVE-2022-21360: Enhance BMP image support (JDK-8273756)\n - CVE-2022-21365: Enhanced BMP processing (JDK-8273838)\n- Security fixes in 7u321:\n - CVE-2021-35550: Update the default enabled cipher suites preference\n   (JDK-8163326)\n - CVE-2021-35556: Richer Text Editors (JDK-8265167)\n - CVE-2021-35559: Enhanced style for RTF kit (JDK-8265580)\n - CVE-2021-35561: Better hashing support (JDK-8266097)\n - CVE-2021-35564: Improve Keystore integrity (JDK-8266137)\n - CVE-2021-35565: com.sun.net.HttpsServer spins on TLS session close\n   (JDK-8254967)\n - CVE-2021-35586: Better BMP support (JDK-8267735)\n - CVE-2021-35588: InnerClasses: VM permits wrong Throw ClassFormatError if\n   InnerClasses attribute's inner_class_info_index is 0 (JDK-8130183)\n - CVE-2021-35603: Better session identification (JDK-8269618)\n- Security fixes in 7u311:\n - CVE-2021-2341: Improve file transfers (JDK-8258432)\n - CVE-2021-2369: Better jar file validation (JDK-8260967)\n - CVE-2021-2432: Provide better LDAP provider support (JDK-8267412)\n- Security fixes in 7u301:\n - CVE-2021-2161: Less ambiguous processing (JDK-8250568)\n - CVE-2021-2163: Enhance opening JARs (JDK-8249906)\n- Security fixes in 7u281:\n - CVE-2020-14779: Enhance support of Proxy class (JDK-8236862)\n - CVE-2020-14781: Enhanced LDAP contexts (JDK-8237990)\n - CVE-2020-14782: Enhance certificate processing (JDK-8237995)\n - CVE-2020-14792: Better range handling (JDK-8241114)\n - CVE-2020-14796: Improved URI Support (JDK-8242680)\n - CVE-2020-14797: Better Path Validation (JDK-8242685)\n - CVE-2020-14798: Enhanced buffer support (JDK-8242695)\n - CVE-2020-14803: Improved Buffer supports (JDK-8244136)\n- Security fixes in 7u271:\n - CVE-2020-14577: Enhance certificate verification (JDK-8237592)\n - CVE-2020-14578: NegativeArraySizeException in\n   sun.security.util.DerInputStream.getUnalignedBitString() (JDK-8028591)\n - CVE-2020-14579: NullPointerException in DerValue.equals(DerValue)\n   (JDK-8028431)\n - CVE-2020-14581: Better matrix operations (JDK-8238002)\n - CVE-2020-14583: Better Buffer support (JDK-8238920)\n - CVE-2020-14593: Less Affine Transformations (JDK-8240119)\n - CVE-2020-14621: Better XML namespace handling (JDK-8242136)\n- Update tzdata requirement to 2022a to match JDK-8283350\n- Update NEWS from IcedTea\n- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after\n  bump OpenJDK version","status":"published","published":"2022-08-22T13:56:04Z","modified":"2026-10-21T10:47:13.375639364Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"DLA-2412-1","title":"openjdk-8 - security update","status":"published","published":"2020-10-23T00:00:00Z","modified":"2026-03-09T01:18:05.932641Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-4779-1","title":"openjdk-11 - security update","status":"published","published":"2020-10-25T00:00:00Z","modified":"2026-03-09T02:08:46.791875Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"openSUSE-SU-2020:1893-1","title":"Security update for java-1_8_0-openj9","description":"This update for java-1_8_0-openj9 fixes the following issues:\n\n-OpenJDK was updated to 8u2732 build 10 with OpenJ9 0.23.0 virtual machine\n   -includes Oracle July 2020 (bsc#1174157) and October 2020 CPU (bsc#1177943)\n   - CVE-2020-14556, CVE-2020-14577, CVE-2020-14578, CVE-2020-14579, CVE-2020-14581,\n     CVE-2020-14583, CVE-2020-14593, CVE-2020-14621, CVE-2020-14779, CVE-2020-14781, \n     CVE-2020-14782, CVE-2020-14792, CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 \n     and CVE-2020-14803\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2020-11-10T08:37:50Z","modified":"2026-02-04T02:41:41.613325Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:1984-1","title":"Security update for java-11-openjdk","description":"This update for java-11-openjdk fixes the following issues:\n\n- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,\n  bsc#1177943)\n  * New features\n    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector\n  * Security fixes\n    + JDK-8233624: Enhance JNI linkage\n    + JDK-8236196: Improve string pooling\n    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class\n    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts\n    + JDK-8237995, CVE-2020-14782: Enhance certificate processing\n    + JDK-8240124: Better VM Interning\n    + JDK-8241114, CVE-2020-14792: Better range handling\n    + JDK-8242680, CVE-2020-14796: Improved URI Support\n    + JDK-8242685, CVE-2020-14797: Better Path Validation\n    + JDK-8242695, CVE-2020-14798: Enhanced buffer support\n    + JDK-8243302: Advanced class supports\n    + JDK-8244136, CVE-2020-14803: Improved Buffer supports\n    + JDK-8244479: Further constrain certificates\n    + JDK-8244955: Additional Fix for JDK-8240124\n    + JDK-8245407: Enhance zoning of times\n    + JDK-8245412: Better class definitions\n    + JDK-8245417: Improve certificate chain handling\n    + JDK-8248574: Improve jpeg processing\n    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit\n    + JDK-8253019: Enhanced JPEG decoding\n  * Other changes\n    + JDK-6532025: GIF reader throws misleading exception with\n      truncated images\n    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/\n      /PDialogTest.java needs update by removing an infinite loop\n    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/\n      /Test8017492.java fails\n    + JDK-8062947: Fix exception message to correctly represent\n      LDAP connection failure\n    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed\n    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/\n      /CloseServerSocket.java fails intermittently with Address\n      already in use\n    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed\n      due to timeout on DeadServerNoTimeoutTest is incorrect\n    + JDK-8160768: Add capability to custom resolve host/domain\n      names within the default JNDI LDAP provider\n    + JDK-8172404: Tools should warn if weak algorithms are used\n      before restricting them\n    + JDK-8193367: Annotated type variable bounds crash javac\n    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java\n      fails intermittently: Connection reset\n    + JDK-8203026: java.rmi.NoSuchObjectException: no such object\n      in table\n    + JDK-8203281: [Windows] JComboBox change in ui when\n      editor.setBorder() is called\n    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to\n      resolve_wk_klass\n    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and\n      JdbExprTest.sh fail due to timeout\n    + JDK-8203928: [Test] Convert non-JDB scaffolding\n      serviceability shell script tests to java\n    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak\n    + JDK-8204994: SA might fail to attach to process with 'Windbg\n      Error: WaitForEvent failed'\n    + JDK-8205534: Remove SymbolTable dependency from\n      serviceability agent\n    + JDK-8206309: Tier1 SA tests fail\n    + JDK-8208281: java/nio/channels/\n      /AsynchronousSocketChannel/Basic.java timed out\n    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java\n      version - step1\n    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh\n      is incorrect\n    + JDK-8209342: Problemlist SA tests on Solaris due to Error\n      attaching to process: Can't create thread_db agent!\n    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java\n      should be marked as headful\n    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with\n      timeout\n    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java\n      version - step2\n    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with\n      ZGC\n    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java\n    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/\n      /ap10t001/TestDescription.java failed with ObjectFree:\n      GetCurrentThreadCpuTimerInfo returned unexpected error code\n    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java\n      version - step3\n    + JDK-8210527: JShell: NullPointerException in\n      jdk.jshell.Eval.translateExceptionStack\n    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related\n      tests\n    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails\n      with waitForPrompt timed out after 60 seconds\n    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should\n      clarify which output is the pending reply after a timeout\n    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java\n      version - step4\n    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java\n      fails to find ThreadLocalObject\n    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh\n      test\n    + JDK-8211694: JShell: Redeclared variable should be reset\n    + JDK-8212200: assert when shared java.lang.Object is redefined\n      by JVMTI agent\n    + JDK-8212629: [TEST] wrong breakpoint in\n      test/jdk/com/sun/jdi/DeferredStepTest\n    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)\n      - unexpected. lastLine=52, minLine=52, maxLine=55\n    + JDK-8212807: tools/jar/multiRelease/Basic.java times out\n    + JDK-8213182: Minimal VM build failure after JDK-8212200\n      (assert when shared java.lang.Object is redefined by JVMTI\n      agent)\n    + JDK-8213214: Set -Djava.io.tmpdir= when running tests\n    + JDK-8213275: ReplaceCriticalClasses.java fails with\n      jdk.internal.vm.PostVMInitHook not found\n    + JDK-8213574: Deadlock in string table expansion when dumping\n      lots of CDS classes\n    + JDK-8213703: LambdaConversionException: Invalid receiver type\n      not a subtype of implementation type interface\n    + JDK-8214074: Ghash optimization using AVX instructions\n    + JDK-8214491: Upgrade to JLine 3.9.0\n    + JDK-8214797: TestJmapCoreMetaspace.java timed out\n    + JDK-8215243: JShell tests failing intermitently with\n      'Problem cleaning up the following threads:'\n    + JDK-8215244: jdk/jshell/ToolBasicTest.java\n      testHistoryReference failed\n    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash\n      optimization using AVX instructions)\n    + JDK-8215438: jshell tool: Ctrl-D causes EOF\n    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on\n      Windows\n    + JDK-8216974: HttpConnection not returned to the pool after\n      204 response\n    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not\n      reflected correctly during run time\n    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is\n      too small on new Skylake CPUs\n    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs\n      instead of aliased B\u0026W glyphs\n    + JDK-8221658: aarch64: add necessary predicate for ubfx\n      patterns\n    + JDK-8221759: Crash when completing 'java.io.File.path'\n    + JDK-8221918: runtime/SharedArchiveFile/serviceability/\n      /ReplaceCriticalClasses.java fails: Shared archive not found\n    + JDK-8222074: Enhance auto vectorization for x86\n    + JDK-8222079: Don't use memset to initialize fields decode_env\n      constructor in disassembler.cpp\n    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely\n      on hostname command\n    + JDK-8223688: JShell: crash on the instantiation of raw\n      anonymous class\n    + JDK-8223777: In posix_spawn mode, failing to exec()\n      jspawnhelper does not result in an error\n    + JDK-8223940: Private key not supported by chosen signature\n      algorithm\n    + JDK-8224184: jshell got IOException at exiting with AIX\n    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in\n      test_mulc\n    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws\n      NullPointerException\n    + JDK-8225625: AES Electronic Codebook (ECB) encryption and\n      decryption optimization using AVX512 + VAES instructions\n    + JDK-8226536: Catch OOM from deopt that fails rematerializing\n      objects\n    + JDK-8226575: OperatingSystemMXBean should be made container\n      aware\n    + JDK-8226697: Several tests which need the @key headful\n      keyword are missing it.\n    + JDK-8226809: Circular reference in printed stack trace is not\n      correctly indented \u0026 ambiguous\n    + JDK-8227059: sun/security/tools/keytool/\n      /DefaultSignatureAlgorithm.java timed out\n    + JDK-8227269: Slow class loading when running with JDWP\n    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java\n      fails due to 'exitValue = 6'\n    + JDK-8228448: Jconsole can't connect to itself\n    + JDK-8228967: Trust/Key store and SSL context utilities for\n      tests\n    + JDK-8229378: jdwp library loader in linker_md.c quietly\n      truncates on buffer overflow\n    + JDK-8229815: Upgrade Jline to 3.12.1\n    + JDK-8230000: some httpclients testng tests run zero test\n    + JDK-8230002: javax/xml/jaxp/unittest/transform/\n      /SecureProcessingTest.java runs zero test\n    + JDK-8230010: Remove jdk8037819/BasicTest1.java\n    + JDK-8230094: CCE in createXMLEventWriter(Result) over an\n      arbitrary XMLStreamWriter\n    + JDK-8230402: Allocation of compile task fails with assert:\n      'Leaking compilation tasks?'\n    + JDK-8230767: FlightRecorderListener returns null recording\n    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to\n      test/jdk/java/util/zip/EntryCount64k.java\n    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()\n      can be quicker for self thread\n    + JDK-8231586: enlarge encoding space for OopMapValue offsets\n    + JDK-8231953: Wrong assumption in assertion in\n      oop::register_oop\n    + JDK-8231968: getCurrentThreadAllocatedBytes default\n      implementation s/b getThreadAllocatedBytes\n    + JDK-8232083: Minimal VM is broken after JDK-8231586\n    + JDK-8232161: Align some one-way conversion in MS950 charset\n      with Windows\n    + JDK-8232855: jshell missing word in /help help\n    + JDK-8233027: OopMapSet::all_do does oms.next() twice during\n      iteration\n    + JDK-8233228: Disable weak named curves by default in TLS,\n      CertPath, and Signed JAR\n    + JDK-8233386: Initialize NULL fields for unused decorations\n    + JDK-8233452: java.math.BigDecimal.sqrt() with\n      RoundingMode.FLOOR results in incorrect result\n    + JDK-8233686: XML transformer uses excessive amount of memory\n    + JDK-8233741: AES Countermode (AES-CTR) optimization using\n      AVX512 + VAES instructions\n    + JDK-8233829: javac cannot find non-ASCII module name under\n      non-UTF8 environment\n    + JDK-8233958: Memory retention due to HttpsURLConnection\n      finalizer that serves no purpose\n    + JDK-8234011: (zipfs) Memory leak in\n      ZipFileSystem.releaseDeflater()\n    + JDK-8234058: runtime/CompressedOops/\n      /CompressedClassPointers.java fails with 'Narrow klass base:\n      0x0000000000000000' missing from stdout/stderr\n    + JDK-8234149: Several regression tests do not dispose Frame at\n      end\n    + JDK-8234347: 'Turkey' meta time zone does not generate\n      composed localized names\n    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/\n      /bug6980209.java fails in linux nightly\n    + JDK-8234535: Cross compilation fails due to missing CFLAGS\n      for the BUILD_CC\n    + JDK-8234541: C1 emits an empty message when it inlines\n      successfully\n    + JDK-8234687: change javap reporting on unknown attributes\n    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK\n      11\n    + JDK-8236548: Localized time zone name inconsistency between\n      English and other locales\n    + JDK-8236617: jtreg test containers/docker/\n      /TestMemoryAwareness.java fails after 8226575\n    + JDK-8237182: Update copyright header for shenandoah and\n      epsilon files\n    + JDK-8237888: security/infra/java/security/cert/\n      /CertPathValidator/certification/LuxTrustCA.java fails when\n      checking validity interval\n    + JDK-8237977: Further update\n      javax/net/ssl/compatibility/Compatibility.java\n    + JDK-8238270: java.net HTTP/2 client does not decrease stream\n      count when receives 204 response\n    + JDK-8238284: [macos] Zero VM build fails due to an obvious\n      typo\n    + JDK-8238380: java.base/unix/native/libjava/childproc.c\n      'multiple definition' link errors with GCC10\n    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c\n      'multiple definition' link errors with GCC10\n    + JDK-8238388: libj2gss/NativeFunc.o 'multiple definition' link\n      errors with GCC10\n    + JDK-8238448: RSASSA-PSS signature verification fail when\n      using certain odd key sizes\n    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits\n      with non-zero code\n    + JDK-8239083: C1 assert(known_holder == NULL ||\n      (known_holder-\u003eis_instance_klass() \u0026\u0026\n      (!known_holder-\u003eis_interface() ||\n      ((ciInstanceKlass*)known_holder)-\u003ehas_nonstatic_concrete_methods())),\n      'should be non-static concrete method');\n    + JDK-8239385: KerberosTicket client name refers wrongly to\n      sAMAccountName in AD\n    + JDK-8240169: javadoc fails to link to non-modular api docs\n    + JDK-8240295: hs_err elapsed time in seconds is not accurate\n      enough\n    + JDK-8240360: NativeLibraryEvent has wrong library name on\n      Linux\n    + JDK-8240676: Meet not symmetric failure when running lucene\n      on jdk8\n    + JDK-8241007: Shenandoah: remove\n      ShenandoahCriticalControlThreadPriority support\n    + JDK-8241065: Shenandoah: remove leftover code after\n      JDK-8231086\n    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is\n      failing on 32bit Windows\n    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:\n      java.lang.NullPointerException\n    + JDK-8241138: http.nonProxyHosts=* causes\n      StringIndexOutOfBoundsException in DefaultProxySelector\n    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark\n    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java\n      fails with OOME\n    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure\n    + JDK-8241750: x86_32 build failure after JDK-8227269\n    + JDK-8242184: CRL generation error with RSASSA-PSS\n    + JDK-8242283: Can't start JVM when java home path includes\n      non-ASCII character\n    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null\n      params from byte array\n    + JDK-8243029: Rewrite javax/net/ssl/compatibility/\n      /Compatibility.java with a flexible interop test framework\n    + JDK-8243138: Enhance BaseLdapServer to support starttls\n      extended request\n    + JDK-8243320: Add SSL root certificates to Oracle Root CA\n      program\n    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA\n      program\n    + JDK-8243389: enhance os::pd_print_cpu_info on linux\n    + JDK-8243453: java --describe-module failed with non-ASCII\n      module name under non-UTF8 environment\n    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp\n    + JDK-8243489: Thread CPU Load event may contain wrong data for\n      CPU time under certain conditions\n    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on\n      HiDPI screens (Windows)\n    + JDK-8244087: 2020-04-24 public suffix list update\n    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest\n      release 1.8.26\n    + JDK-8244164: AArch64: jaotc generates incorrect code for\n      compressed OOPs with non-zero heap base\n    + JDK-8244196: adjust output in os_linux\n    + JDK-8244225: stringop-overflow warning on strncpy call from\n      compile_the_world_in\n    + JDK-8244287: JFR: Methods samples have line number 0\n    + JDK-8244703: 'platform encoding not initialized' exceptions\n      with debugger, JNI\n    + JDK-8244719: CTW: C2 compilation fails with\n      'assert(!VerifyHashTableKeys || _hash_lock == 0) failed:\n      remove node from hash table before modifying it'\n    + JDK-8244729: Shenandoah: remove resolve paths from\n      SBSA::generate_shenandoah_lrb\n    + JDK-8244763: Update --release 8 symbol information after JSR\n      337 MR3\n    + JDK-8244818: Java2D Queue Flusher crash while moving\n      application window to external monitor\n    + JDK-8245151: jarsigner should not raise duplicate warnings on\n      verification\n    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9\n    + JDK-8245714: 'Bad graph detected in build_loop_late' when\n      loads are pinned on loop limit check uncommon branch\n    + JDK-8245801: StressRecompilation triggers assert 'redundunt\n      OSR recompilation detected. memory leak in CodeCache!'\n    + JDK-8245832: JDK build make-static-libs should build all JDK\n      libraries\n    + JDK-8245880: Shenandoah: check class unloading flag early in\n      concurrent code root scan\n    + JDK-8245981: Upgrade to jQuery 3.5.1\n    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801\n    + JDK-8246094: [macos] Sound Recording and playback is not\n      working\n    + JDK-8246153: TestEliminateArrayCopy fails with\n      -XX:+StressReflectiveCode\n    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ\n    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest\n      fails with AssertionError\n    + JDK-8246203: Segmentation fault in verification due to stack\n      overflow with -XX:+VerifyIterativeGVN\n    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves\n    + JDK-8246453: TestClone crashes with 'all collected exceptions\n      must come from the same place'\n    + JDK-8247246: Add explicit ResolvedJavaType.link and expose\n      presence of default methods\n    + JDK-8247350: [aarch64] assert(false) failed: wrong size of\n      mach node\n    + JDK-8247502: PhaseStringOpts crashes while optimising\n      effectively dead code\n    + JDK-8247615: Initialize the bytes left for the heap sampler\n    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV\n      in SBC2Support::pin_and_expand\n    + JDK-8247874: Replacement in VersionProps.java.template not\n      working when --with-vendor-bug-url contains '\u0026'\n    + JDK-8247979: aarch64: missing side effect of killing flags\n      for clearArray_reg_reg\n    + JDK-8248214: Add paddings for TaskQueueSuper to reduce\n      false-sharing cache contention\n    + JDK-8248219: aarch64: missing memory barrier in\n      fast_storefield and fast_accessfield\n    + JDK-8248348: Regression caused by the update to BCEL 6.0\n    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to\n      jtreg 5.1\n    + JDK-8248495: [macos] zerovm is broken due to libffi headers\n      location\n    + JDK-8248851: CMS: Missing memory fences between free chunk\n      check and klass read\n    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on\n      Windows\n    + JDK-8249159: Downport test rework for SSLSocketTemplate from\n      8224650\n    + JDK-8249215: JFrame::setVisible crashed with\n      -Dfile.encoding=UTF-8 on Japanese Windows.\n    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is\n      not highlighted in GTKLookAndFeel\n    + JDK-8249255: Build fails if source code in cygwin home dir\n    + JDK-8249277: TestVerifyIterativeGVN.java is failing with\n      timeout in OpenJDK 11\n    + JDK-8249278: Revert JDK-8226253 which breaks the spec of\n      AccessibleState.SHOWING for JList\n    + JDK-8249560: Shenandoah: Fix racy GC request handling\n    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle\n    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should\n      account for corner cases\n    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when\n      requesting TGS Kerberos tickets\n    + JDK-8250609: C2 crash in IfNode::fold_compares\n    + JDK-8250627: Use -XX:+/-UseContainerSupport for\n      enabling/disabling Java container metrics\n    + JDK-8250755: Better cleanup for\n      jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java\n    + JDK-8250787: Provider.put no longer registering aliases in\n      FIPS env\n    + JDK-8250826: jhsdb does not work with coredump which comes\n      from Substrate VM\n    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's\n      dead count before/after parallel walk\n    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check\n      the bounds\n    + JDK-8251117: Cannot check P11Key size in P11Cipher and\n      P11AEADCipher\n    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java\n      test failure\n    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with\n      I-U\n    + JDK-8251469: Better cleanup for\n      test/jdk/javax/imageio/SetOutput.java\n    + JDK-8251487: Shenandoah: missing detail timing tracking for\n      final mark cleaning phase\n    + JDK-8252120: compiler/oracle/TestCompileCommand.java\n      misspells 'occured'\n    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary\n      compatibility\n    + JDK-8252258: [11u] JDK-8242154 changes the default vendor\n    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after\n      downport of 8234011\n    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)\n      in JDK 11\n    + JDK-8253283: [11u] Test build/translations/\n      /VerifyTranslations.java failing after JDK-8252258\n    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several\n      crashes\n    + Fix regression '8250861: Crash in MinINode::Ideal(PhaseGVN*,\n      bool)' introduced in jdk 11.0.9\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-11-20T23:23:29Z","modified":"2026-02-04T03:52:40.401353Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:1994-1","title":"Security update for java-11-openjdk","description":"This update for java-11-openjdk fixes the following issues:\n\n- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,\n  bsc#1177943)\n  * New features\n    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector\n  * Security fixes\n    + JDK-8233624: Enhance JNI linkage\n    + JDK-8236196: Improve string pooling\n    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class\n    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts\n    + JDK-8237995, CVE-2020-14782: Enhance certificate processing\n    + JDK-8240124: Better VM Interning\n    + JDK-8241114, CVE-2020-14792: Better range handling\n    + JDK-8242680, CVE-2020-14796: Improved URI Support\n    + JDK-8242685, CVE-2020-14797: Better Path Validation\n    + JDK-8242695, CVE-2020-14798: Enhanced buffer support\n    + JDK-8243302: Advanced class supports\n    + JDK-8244136, CVE-2020-14803: Improved Buffer supports\n    + JDK-8244479: Further constrain certificates\n    + JDK-8244955: Additional Fix for JDK-8240124\n    + JDK-8245407: Enhance zoning of times\n    + JDK-8245412: Better class definitions\n    + JDK-8245417: Improve certificate chain handling\n    + JDK-8248574: Improve jpeg processing\n    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit\n    + JDK-8253019: Enhanced JPEG decoding\n  * Other changes\n    + JDK-6532025: GIF reader throws misleading exception with\n      truncated images\n    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/\n      /PDialogTest.java needs update by removing an infinite loop\n    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/\n      /Test8017492.java fails\n    + JDK-8062947: Fix exception message to correctly represent\n      LDAP connection failure\n    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed\n    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/\n      /CloseServerSocket.java fails intermittently with Address\n      already in use\n    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed\n      due to timeout on DeadServerNoTimeoutTest is incorrect\n    + JDK-8160768: Add capability to custom resolve host/domain\n      names within the default JNDI LDAP provider\n    + JDK-8172404: Tools should warn if weak algorithms are used\n      before restricting them\n    + JDK-8193367: Annotated type variable bounds crash javac\n    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java\n      fails intermittently: Connection reset\n    + JDK-8203026: java.rmi.NoSuchObjectException: no such object\n      in table\n    + JDK-8203281: [Windows] JComboBox change in ui when\n      editor.setBorder() is called\n    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to\n      resolve_wk_klass\n    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and\n      JdbExprTest.sh fail due to timeout\n    + JDK-8203928: [Test] Convert non-JDB scaffolding\n      serviceability shell script tests to java\n    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak\n    + JDK-8204994: SA might fail to attach to process with 'Windbg\n      Error: WaitForEvent failed'\n    + JDK-8205534: Remove SymbolTable dependency from\n      serviceability agent\n    + JDK-8206309: Tier1 SA tests fail\n    + JDK-8208281: java/nio/channels/\n      /AsynchronousSocketChannel/Basic.java timed out\n    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java\n      version - step1\n    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh\n      is incorrect\n    + JDK-8209342: Problemlist SA tests on Solaris due to Error\n      attaching to process: Can't create thread_db agent!\n    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java\n      should be marked as headful\n    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with\n      timeout\n    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java\n      version - step2\n    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with\n      ZGC\n    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java\n    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/\n      /ap10t001/TestDescription.java failed with ObjectFree:\n      GetCurrentThreadCpuTimerInfo returned unexpected error code\n    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java\n      version - step3\n    + JDK-8210527: JShell: NullPointerException in\n      jdk.jshell.Eval.translateExceptionStack\n    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related\n      tests\n    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails\n      with waitForPrompt timed out after 60 seconds\n    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should\n      clarify which output is the pending reply after a timeout\n    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java\n      version - step4\n    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java\n      fails to find ThreadLocalObject\n    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh\n      test\n    + JDK-8211694: JShell: Redeclared variable should be reset\n    + JDK-8212200: assert when shared java.lang.Object is redefined\n      by JVMTI agent\n    + JDK-8212629: [TEST] wrong breakpoint in\n      test/jdk/com/sun/jdi/DeferredStepTest\n    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)\n      - unexpected. lastLine=52, minLine=52, maxLine=55\n    + JDK-8212807: tools/jar/multiRelease/Basic.java times out\n    + JDK-8213182: Minimal VM build failure after JDK-8212200\n      (assert when shared java.lang.Object is redefined by JVMTI\n      agent)\n    + JDK-8213214: Set -Djava.io.tmpdir= when running tests\n    + JDK-8213275: ReplaceCriticalClasses.java fails with\n      jdk.internal.vm.PostVMInitHook not found\n    + JDK-8213574: Deadlock in string table expansion when dumping\n      lots of CDS classes\n    + JDK-8213703: LambdaConversionException: Invalid receiver type\n      not a subtype of implementation type interface\n    + JDK-8214074: Ghash optimization using AVX instructions\n    + JDK-8214491: Upgrade to JLine 3.9.0\n    + JDK-8214797: TestJmapCoreMetaspace.java timed out\n    + JDK-8215243: JShell tests failing intermitently with\n      'Problem cleaning up the following threads:'\n    + JDK-8215244: jdk/jshell/ToolBasicTest.java\n      testHistoryReference failed\n    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash\n      optimization using AVX instructions)\n    + JDK-8215438: jshell tool: Ctrl-D causes EOF\n    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on\n      Windows\n    + JDK-8216974: HttpConnection not returned to the pool after\n      204 response\n    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not\n      reflected correctly during run time\n    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is\n      too small on new Skylake CPUs\n    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs\n      instead of aliased B\u0026W glyphs\n    + JDK-8221658: aarch64: add necessary predicate for ubfx\n      patterns\n    + JDK-8221759: Crash when completing 'java.io.File.path'\n    + JDK-8221918: runtime/SharedArchiveFile/serviceability/\n      /ReplaceCriticalClasses.java fails: Shared archive not found\n    + JDK-8222074: Enhance auto vectorization for x86\n    + JDK-8222079: Don't use memset to initialize fields decode_env\n      constructor in disassembler.cpp\n    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely\n      on hostname command\n    + JDK-8223688: JShell: crash on the instantiation of raw\n      anonymous class\n    + JDK-8223777: In posix_spawn mode, failing to exec()\n      jspawnhelper does not result in an error\n    + JDK-8223940: Private key not supported by chosen signature\n      algorithm\n    + JDK-8224184: jshell got IOException at exiting with AIX\n    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in\n      test_mulc\n    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws\n      NullPointerException\n    + JDK-8225625: AES Electronic Codebook (ECB) encryption and\n      decryption optimization using AVX512 + VAES instructions\n    + JDK-8226536: Catch OOM from deopt that fails rematerializing\n      objects\n    + JDK-8226575: OperatingSystemMXBean should be made container\n      aware\n    + JDK-8226697: Several tests which need the @key headful\n      keyword are missing it.\n    + JDK-8226809: Circular reference in printed stack trace is not\n      correctly indented \u0026 ambiguous\n    + JDK-8227059: sun/security/tools/keytool/\n      /DefaultSignatureAlgorithm.java timed out\n    + JDK-8227269: Slow class loading when running with JDWP\n    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java\n      fails due to 'exitValue = 6'\n    + JDK-8228448: Jconsole can't connect to itself\n    + JDK-8228967: Trust/Key store and SSL context utilities for\n      tests\n    + JDK-8229378: jdwp library loader in linker_md.c quietly\n      truncates on buffer overflow\n    + JDK-8229815: Upgrade Jline to 3.12.1\n    + JDK-8230000: some httpclients testng tests run zero test\n    + JDK-8230002: javax/xml/jaxp/unittest/transform/\n      /SecureProcessingTest.java runs zero test\n    + JDK-8230010: Remove jdk8037819/BasicTest1.java\n    + JDK-8230094: CCE in createXMLEventWriter(Result) over an\n      arbitrary XMLStreamWriter\n    + JDK-8230402: Allocation of compile task fails with assert:\n      'Leaking compilation tasks?'\n    + JDK-8230767: FlightRecorderListener returns null recording\n    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to\n      test/jdk/java/util/zip/EntryCount64k.java\n    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()\n      can be quicker for self thread\n    + JDK-8231586: enlarge encoding space for OopMapValue offsets\n    + JDK-8231953: Wrong assumption in assertion in\n      oop::register_oop\n    + JDK-8231968: getCurrentThreadAllocatedBytes default\n      implementation s/b getThreadAllocatedBytes\n    + JDK-8232083: Minimal VM is broken after JDK-8231586\n    + JDK-8232161: Align some one-way conversion in MS950 charset\n      with Windows\n    + JDK-8232855: jshell missing word in /help help\n    + JDK-8233027: OopMapSet::all_do does oms.next() twice during\n      iteration\n    + JDK-8233228: Disable weak named curves by default in TLS,\n      CertPath, and Signed JAR\n    + JDK-8233386: Initialize NULL fields for unused decorations\n    + JDK-8233452: java.math.BigDecimal.sqrt() with\n      RoundingMode.FLOOR results in incorrect result\n    + JDK-8233686: XML transformer uses excessive amount of memory\n    + JDK-8233741: AES Countermode (AES-CTR) optimization using\n      AVX512 + VAES instructions\n    + JDK-8233829: javac cannot find non-ASCII module name under\n      non-UTF8 environment\n    + JDK-8233958: Memory retention due to HttpsURLConnection\n      finalizer that serves no purpose\n    + JDK-8234011: (zipfs) Memory leak in\n      ZipFileSystem.releaseDeflater()\n    + JDK-8234058: runtime/CompressedOops/\n      /CompressedClassPointers.java fails with 'Narrow klass base:\n      0x0000000000000000' missing from stdout/stderr\n    + JDK-8234149: Several regression tests do not dispose Frame at\n      end\n    + JDK-8234347: 'Turkey' meta time zone does not generate\n      composed localized names\n    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/\n      /bug6980209.java fails in linux nightly\n    + JDK-8234535: Cross compilation fails due to missing CFLAGS\n      for the BUILD_CC\n    + JDK-8234541: C1 emits an empty message when it inlines\n      successfully\n    + JDK-8234687: change javap reporting on unknown attributes\n    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK\n      11\n    + JDK-8236548: Localized time zone name inconsistency between\n      English and other locales\n    + JDK-8236617: jtreg test containers/docker/\n      /TestMemoryAwareness.java fails after 8226575\n    + JDK-8237182: Update copyright header for shenandoah and\n      epsilon files\n    + JDK-8237888: security/infra/java/security/cert/\n      /CertPathValidator/certification/LuxTrustCA.java fails when\n      checking validity interval\n    + JDK-8237977: Further update\n      javax/net/ssl/compatibility/Compatibility.java\n    + JDK-8238270: java.net HTTP/2 client does not decrease stream\n      count when receives 204 response\n    + JDK-8238284: [macos] Zero VM build fails due to an obvious\n      typo\n    + JDK-8238380: java.base/unix/native/libjava/childproc.c\n      'multiple definition' link errors with GCC10\n    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c\n      'multiple definition' link errors with GCC10\n    + JDK-8238388: libj2gss/NativeFunc.o 'multiple definition' link\n      errors with GCC10\n    + JDK-8238448: RSASSA-PSS signature verification fail when\n      using certain odd key sizes\n    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits\n      with non-zero code\n    + JDK-8239083: C1 assert(known_holder == NULL ||\n      (known_holder-\u003eis_instance_klass() \u0026\u0026\n      (!known_holder-\u003eis_interface() ||\n      ((ciInstanceKlass*)known_holder)-\u003ehas_nonstatic_concrete_methods())),\n      'should be non-static concrete method');\n    + JDK-8239385: KerberosTicket client name refers wrongly to\n      sAMAccountName in AD\n    + JDK-8240169: javadoc fails to link to non-modular api docs\n    + JDK-8240295: hs_err elapsed time in seconds is not accurate\n      enough\n    + JDK-8240360: NativeLibraryEvent has wrong library name on\n      Linux\n    + JDK-8240676: Meet not symmetric failure when running lucene\n      on jdk8\n    + JDK-8241007: Shenandoah: remove\n      ShenandoahCriticalControlThreadPriority support\n    + JDK-8241065: Shenandoah: remove leftover code after\n      JDK-8231086\n    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is\n      failing on 32bit Windows\n    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:\n      java.lang.NullPointerException\n    + JDK-8241138: http.nonProxyHosts=* causes\n      StringIndexOutOfBoundsException in DefaultProxySelector\n    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark\n    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java\n      fails with OOME\n    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure\n    + JDK-8241750: x86_32 build failure after JDK-8227269\n    + JDK-8242184: CRL generation error with RSASSA-PSS\n    + JDK-8242283: Can't start JVM when java home path includes\n      non-ASCII character\n    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null\n      params from byte array\n    + JDK-8243029: Rewrite javax/net/ssl/compatibility/\n      /Compatibility.java with a flexible interop test framework\n    + JDK-8243138: Enhance BaseLdapServer to support starttls\n      extended request\n    + JDK-8243320: Add SSL root certificates to Oracle Root CA\n      program\n    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA\n      program\n    + JDK-8243389: enhance os::pd_print_cpu_info on linux\n    + JDK-8243453: java --describe-module failed with non-ASCII\n      module name under non-UTF8 environment\n    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp\n    + JDK-8243489: Thread CPU Load event may contain wrong data for\n      CPU time under certain conditions\n    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on\n      HiDPI screens (Windows)\n    + JDK-8244087: 2020-04-24 public suffix list update\n    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest\n      release 1.8.26\n    + JDK-8244164: AArch64: jaotc generates incorrect code for\n      compressed OOPs with non-zero heap base\n    + JDK-8244196: adjust output in os_linux\n    + JDK-8244225: stringop-overflow warning on strncpy call from\n      compile_the_world_in\n    + JDK-8244287: JFR: Methods samples have line number 0\n    + JDK-8244703: 'platform encoding not initialized' exceptions\n      with debugger, JNI\n    + JDK-8244719: CTW: C2 compilation fails with\n      'assert(!VerifyHashTableKeys || _hash_lock == 0) failed:\n      remove node from hash table before modifying it'\n    + JDK-8244729: Shenandoah: remove resolve paths from\n      SBSA::generate_shenandoah_lrb\n    + JDK-8244763: Update --release 8 symbol information after JSR\n      337 MR3\n    + JDK-8244818: Java2D Queue Flusher crash while moving\n      application window to external monitor\n    + JDK-8245151: jarsigner should not raise duplicate warnings on\n      verification\n    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9\n    + JDK-8245714: 'Bad graph detected in build_loop_late' when\n      loads are pinned on loop limit check uncommon branch\n    + JDK-8245801: StressRecompilation triggers assert 'redundunt\n      OSR recompilation detected. memory leak in CodeCache!'\n    + JDK-8245832: JDK build make-static-libs should build all JDK\n      libraries\n    + JDK-8245880: Shenandoah: check class unloading flag early in\n      concurrent code root scan\n    + JDK-8245981: Upgrade to jQuery 3.5.1\n    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801\n    + JDK-8246094: [macos] Sound Recording and playback is not\n      working\n    + JDK-8246153: TestEliminateArrayCopy fails with\n      -XX:+StressReflectiveCode\n    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ\n    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest\n      fails with AssertionError\n    + JDK-8246203: Segmentation fault in verification due to stack\n      overflow with -XX:+VerifyIterativeGVN\n    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves\n    + JDK-8246453: TestClone crashes with 'all collected exceptions\n      must come from the same place'\n    + JDK-8247246: Add explicit ResolvedJavaType.link and expose\n      presence of default methods\n    + JDK-8247350: [aarch64] assert(false) failed: wrong size of\n      mach node\n    + JDK-8247502: PhaseStringOpts crashes while optimising\n      effectively dead code\n    + JDK-8247615: Initialize the bytes left for the heap sampler\n    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV\n      in SBC2Support::pin_and_expand\n    + JDK-8247874: Replacement in VersionProps.java.template not\n      working when --with-vendor-bug-url contains '\u0026'\n    + JDK-8247979: aarch64: missing side effect of killing flags\n      for clearArray_reg_reg\n    + JDK-8248214: Add paddings for TaskQueueSuper to reduce\n      false-sharing cache contention\n    + JDK-8248219: aarch64: missing memory barrier in\n      fast_storefield and fast_accessfield\n    + JDK-8248348: Regression caused by the update to BCEL 6.0\n    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to\n      jtreg 5.1\n    + JDK-8248495: [macos] zerovm is broken due to libffi headers\n      location\n    + JDK-8248851: CMS: Missing memory fences between free chunk\n      check and klass read\n    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on\n      Windows\n    + JDK-8249159: Downport test rework for SSLSocketTemplate from\n      8224650\n    + JDK-8249215: JFrame::setVisible crashed with\n      -Dfile.encoding=UTF-8 on Japanese Windows.\n    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is\n      not highlighted in GTKLookAndFeel\n    + JDK-8249255: Build fails if source code in cygwin home dir\n    + JDK-8249277: TestVerifyIterativeGVN.java is failing with\n      timeout in OpenJDK 11\n    + JDK-8249278: Revert JDK-8226253 which breaks the spec of\n      AccessibleState.SHOWING for JList\n    + JDK-8249560: Shenandoah: Fix racy GC request handling\n    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle\n    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should\n      account for corner cases\n    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when\n      requesting TGS Kerberos tickets\n    + JDK-8250609: C2 crash in IfNode::fold_compares\n    + JDK-8250627: Use -XX:+/-UseContainerSupport for\n      enabling/disabling Java container metrics\n    + JDK-8250755: Better cleanup for\n      jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java\n    + JDK-8250787: Provider.put no longer registering aliases in\n      FIPS env\n    + JDK-8250826: jhsdb does not work with coredump which comes\n      from Substrate VM\n    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's\n      dead count before/after parallel walk\n    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check\n      the bounds\n    + JDK-8251117: Cannot check P11Key size in P11Cipher and\n      P11AEADCipher\n    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java\n      test failure\n    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with\n      I-U\n    + JDK-8251469: Better cleanup for\n      test/jdk/javax/imageio/SetOutput.java\n    + JDK-8251487: Shenandoah: missing detail timing tracking for\n      final mark cleaning phase\n    + JDK-8252120: compiler/oracle/TestCompileCommand.java\n      misspells 'occured'\n    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary\n      compatibility\n    + JDK-8252258: [11u] JDK-8242154 changes the default vendor\n    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after\n      downport of 8234011\n    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)\n      in JDK 11\n    + JDK-8253283: [11u] Test build/translations/\n      /VerifyTranslations.java failing after JDK-8252258\n    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several\n      crashes\n    + Fix regression '8250861: Crash in MinINode::Ideal(PhaseGVN*,\n      bool)' introduced in jdk 11.0.9\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-11-21T11:23:12Z","modified":"2026-02-04T02:36:13.277364Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:2048-1","title":"Security update for java-1_8_0-openjdk","description":"This update for java-1_8_0-openjdk fixes the following issues:\n\n- Fix regression '8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)',\n  introduced in October 2020 CPU.\n\n- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,\n  bsc#1174157, and October 2020 CPU, bsc#1177943)\n  * New features\n    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7\n    + PR3796: Allow the number of curves supported to be specified\n  * Security fixes\n    + JDK-8028431, CVE-2020-14579: NullPointerException in\n      DerValue.equals(DerValue)\n    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in\n      sun.security.util.DerInputStream.getUnalignedBitString()\n    + JDK-8230613: Better ASCII conversions\n    + JDK-8231800: Better listing of arrays\n    + JDK-8232014: Expand DTD support\n    + JDK-8233255: Better Swing Buttons\n    + JDK-8233624: Enhance JNI linkage\n    + JDK-8234032: Improve basic calendar services\n    + JDK-8234042: Better factory production of certificates\n    + JDK-8234418: Better parsing with CertificateFactory\n    + JDK-8234836: Improve serialization handling\n    + JDK-8236191: Enhance OID processing\n    + JDK-8236196: Improve string pooling\n    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class\n    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior\n    + JDK-8237592, CVE-2020-14577: Enhance certificate verification\n    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts\n    + JDK-8237995, CVE-2020-14782: Enhance certificate processing\n    + JDK-8238002, CVE-2020-14581: Better matrix operations\n    + JDK-8238804: Enhance key handling process\n    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable\n    + JDK-8238843: Enhanced font handing\n    + JDK-8238920, CVE-2020-14583: Better Buffer support\n    + JDK-8238925: Enhance WAV file playback\n    + JDK-8240119, CVE-2020-14593: Less Affine Transformations\n    + JDK-8240124: Better VM Interning\n    + JDK-8240482: Improved WAV file playback\n    + JDK-8241114, CVE-2020-14792: Better range handling\n    + JDK-8241379: Update JCEKS support\n    + JDK-8241522: Manifest improved jar headers redux\n    + JDK-8242136, CVE-2020-14621: Better XML namespace handling\n    + JDK-8242680, CVE-2020-14796: Improved URI Support\n    + JDK-8242685, CVE-2020-14797: Better Path Validation\n    + JDK-8242695, CVE-2020-14798: Enhanced buffer support\n    + JDK-8243302: Advanced class supports\n    + JDK-8244136, CVE-2020-14803: Improved Buffer supports\n    + JDK-8244479: Further constrain certificates\n    + JDK-8244955: Additional Fix for JDK-8240124\n    + JDK-8245407: Enhance zoning of times\n    + JDK-8245412: Better class definitions\n    + JDK-8245417: Improve certificate chain handling\n    + JDK-8248574: Improve jpeg processing\n    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit\n    + JDK-8253019: Enhanced JPEG decoding\n  * Import of OpenJDK 8 u262 build 01\n    + JDK-4949105: Access Bridge lacks html tags parsing\n    + JDK-8003209: JFR events for network utilization\n    + JDK-8030680: 292 cleanup from default method code assessment\n    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java\n      and some tests failed on windows intermittently\n    + JDK-8041626: Shutdown tracing event\n    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp\n    + JDK-8149338: JVM Crash caused by Marlin renderer not handling\n       NaN coordinates\n    + JDK-8151582: (ch) test java/nio/channels/\n      /AsyncCloseAndInterrupt.java failing due to 'Connection\n      succeeded'\n    + JDK-8165675: Trace event for thread park has incorrect unit\n       for timeout\n    + JDK-8176182: 4 security tests are not run\n    + JDK-8178910: Problemlist sample tests\n    + JDK-8183925: Decouple crash protection from watcher thread\n    + JDK-8191393: Random crashes during cfree+0x1c\n    + JDK-8195817: JFR.stop should require name of recording\n    + JDK-8195818: JFR.start should increase autogenerated name by\n       one\n    + JDK-8195819: Remove recording=x from jcmd JFR.check output\n    + JDK-8199712: Flight Recorder\n    + JDK-8202578: Revisit location for class unload events\n    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on\n      missing events\n    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight\n      Recorder)\n    + JDK-8203346: JFR: Inconsistent signature of\n      jfr_add_string_constant\n    + JDK-8203664: JFR start failure after AppCDS archive created\n      with JFR StartFlightRecording\n    + JDK-8203921: JFR thread sampling is missing fixes from\n      JDK-8194552\n    + JDK-8203929: Limit amount of data for JFR.dump\n    + JDK-8205516: JFR tool\n    + JDK-8207392: [PPC64] Implement JFR profiling\n    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first\n      classloader which calls it\n    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR\n    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()\n    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD\n      1.0.7\n    + JDK-8211239: Build fails without JFR: empty JFR events\n      signatures mismatch\n    + JDK-8212232: Wrong metadata for the configuration of the\n      cutoff for old object sample events\n    + JDK-8213015: Inconsistent settings between JFR.configure and\n      -XX:FlightRecorderOptions\n    + JDK-8213421: Line number information for execution samples\n      always 0\n    + JDK-8213617: JFR should record the PID of the recorded process\n    + JDK-8213734: SAXParser.parse(File, ..) does not close\n      resources when Exception occurs.\n    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered\n      by tests\n    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by\n      test\n    + JDK-8213966: The ZGC JFR events should be marked as\n      experimental\n    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap\n      in debug builds\n    + JDK-8214750: Unnecessary \u003cp\u003e tags in jfr classes\n    + JDK-8214896: JFR Tool left files behind\n    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java\n      fails with UnsatisfiedLinkError\n    + JDK-8214925: JFR tool fails to execute\n    + JDK-8215175: Inconsistencies in JFR event metadata\n    + JDK-8215237: jdk.jfr.Recording javadoc does not compile\n    + JDK-8215284: Reduce noise induced by periodic task\n      getFileSize()\n    + JDK-8215355: Object monitor deadlock with no threads holding\n      the monitor (using jemalloc 5.1)\n    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails\n    + JDK-8215771: The jfr tool should pretty print reference chains\n    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work\n      properly\n    + JDK-8216486: Possibility of integer overflow in\n      JfrThreadSampler::run()\n    + JDK-8216528: test/jdk/java/rmi/transport/\n       /runtimeThreadInheritanceLeak/\n       /RuntimeThreadInheritanceLeak.java failing with Xcomp\n    + JDK-8216559: [JFR] Native libraries not correctly parsed from\n      /proc/self/maps\n    + JDK-8216578: Remove unused/obsolete method in JFR code\n    + JDK-8216995: Clean up JFR command line processing\n    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some\n      systems due to process surviving SIGINT\n    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR\n      TestShutdownEvent\n    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly\n    + JDK-8223147: JFR Backport\n    + JDK-8223689: Add JFR Thread Sampling Support\n    + JDK-8223690: Add JFR BiasedLock Event Support\n    + JDK-8223691: Add JFR G1 Region Type Change Event Support\n    + JDK-8223692: Add JFR G1 Heap Summary Event Support\n    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:\n      invariant\n    + JDK-8224475: JTextPane does not show images in HTML rendering\n    + JDK-8226253: JAWS reports wrong number of radio buttons when\n      buttons are hidden.\n    + JDK-8226779: [TESTBUG] Test JFR API from Java agent\n    + JDK-8226892: ActionListeners on JRadioButtons don't get\n      notified when selection is changed with arrow keys\n    + JDK-8227011: Starting a JFR recording in response to JVMTI\n      VMInit and / or Java agent premain corrupts memory\n    + JDK-8227605: Kitchensink fails 'assert((((klass)-\u003etrace_id()\n      \u0026 (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))\n      failed: invariant'\n    + JDK-8229366: JFR backport allows unchecked writing to memory\n    + JDK-8229401: Fix JFR code cache test failures\n    + JDK-8229708: JFR backport code does not initialize\n    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator\n    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on\n      Windows\n    + JDK-8230707: JFR related tests are failing\n    + JDK-8230782: Robot.createScreenCapture() fails if\n      'awt.robot.gtk' is set to false\n    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on\n       unix misses ReleaseStringUTFChars in early return\n    + JDK-8230947: TestLookForUntestedEvents.java is failing after\n      JDK-8230707\n    + JDK-8231995: two jtreg tests failed after 8229366 is fixed\n    + JDK-8233623: Add classpath exception to copyright in\n      EventHandlerProxyCreator.java file\n    + JDK-8236002: CSR for JFR backport suggests not leaving out\n      the package-info\n    + JDK-8236008: Some backup files were accidentally left in the\n      hotspot tree\n    + JDK-8236074: Missed package-info\n    + JDK-8236174: Should update javadoc since tags\n    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport\n    + JDK-8238452: Keytool generates wrong expiration date if\n      validity is set to 2050/01/01\n    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when\n      there are external FIPS modules in the NSSDB\n    + JDK-8238589: Necessary code cleanup in JFR for JDK8u\n    + JDK-8238590: Enable JFR by default during compilation in 8u\n    + JDK-8239055: Wrong implementation of VMState.hasListener\n    + JDK-8239476: JDK-8238589 broke windows build by moving\n      OrderedPair\n    + JDK-8239479: minimal1 and zero builds are failing\n    + JDK-8239867: correct over use of INCLUDE_JFR macro\n    + JDK-8240375: Disable JFR by default for July 2020 release\n    + JDK-8241444: Metaspace::_class_vsm not initialized if\n      compressed class pointers are disabled\n    + JDK-8241902: AIX Build broken after integration of\n      JDK-8223147 (JFR Backport)\n    + JDK-8242788: Non-PCH build is broken after JDK-8191393\n  * Import of OpenJDK 8 u262 build 02\n    + JDK-8130737: AffineTransformOp can't handle child raster with\n      non-zero x-offset\n    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation\n      in java/awt/image/Raster/TestChildRasterOp.java\n    + JDK-8230926: [macosx] Two apostrophes are entered instead of\n      one with 'U.S. International - PC' layout\n    + JDK-8240576: JVM crashes after transformation in C2\n      IdealLoopTree::merge_many_backedges\n    + JDK-8242883: Incomplete backport of JDK-8078268: backport\n      test part\n  * Import of OpenJDK 8 u262 build 03\n    + JDK-8037866: Replace the Fun class in tests with lambdas\n    + JDK-8146612: C2: Precedence edges specification violated\n    + JDK-8150986: serviceability/sa/jmap-hprof/\n       /JMapHProfLargeHeapTest.java failing because expects HPROF\n      JAVA PROFILE 1.0.1 file format\n    + JDK-8229888: (zipfs) Updating an existing zip file does not\n      preserve original permissions\n    + JDK-8230597: Update GIFlib library to the 5.2.1\n    + JDK-8230769: BufImg_SetupICM add\n      ReleasePrimitiveArrayCritical call in early return\n    + JDK-8233880, PR3798: Support compilers with multi-digit major\n      version numbers\n    + JDK-8239852: java/util/concurrent tests fail with\n      -XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:\n      verification should have failed\n    + JDK-8241638: launcher time metrics always report 1 on Linux\n      when _JAVA_LAUNCHER_DEBUG set\n    + JDK-8243059: Build fails when --with-vendor-name contains a\n      comma\n    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes\n    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32\n    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()\n      returns wrong result\n  * Import of OpenJDK 8 u262 build 04\n    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't\n      throw NPE if timeout is less than, or equal to zero when unit\n      == null\n    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering\n    + JDK-8171934:\n      ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()\n      does not recognize OpenJDK's HotSpot VM\n    + JDK-8196969: JTreg Failure:\n      serviceability/sa/ClhsdbJstack.java causes NPE\n    + JDK-8243539: Copyright info (Year) should be updated for fix\n      of 8241638\n    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value\n  * Import of OpenJDK 8 u262 build 05\n    + JDK-7147060: com/sun/org/apache/xml/internal/security/\n      /transforms/ClassLoaderTest.java doesn't run in agentvm mode\n    + JDK-8178374: Problematic ByteBuffer handling in\n      CipherSpi.bufferCrypt method\n    + JDK-8181841: A TSA server returns timestamp with precision\n      higher than milliseconds\n    + JDK-8227269: Slow class loading when running with JDWP\n    + JDK-8229899: Make java.io.File.isInvalid() less racy\n    + JDK-8236996: Incorrect Roboto font rendering on Windows with\n      subpixel antialiasing\n    + JDK-8241750: x86_32 build failure after JDK-8227269\n    + JDK-8244407: JVM crashes after transformation in C2\n      IdealLoopTree::split_fall_in\n    + JDK-8244843: JapanEraNameCompatTest fails\n  * Import of OpenJDK 8 u262 build 06\n    + JDK-8246223: Windows build fails after JDK-8227269\n  * Import of OpenJDK 8 u262 build 07\n    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and\n      Jfr:on_vm_start() start-up order for correct option parsing\n    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a\n    + JDK-8245167: Top package in method profiling shows null in JMC\n    + JDK-8246703: [TESTBUG] Add test for JDK-8233197\n  * Import of OpenJDK 8 u262 build 08\n    + JDK-8220293: Deadlock in JFR string pool\n    + JDK-8225068: Remove DocuSign root certificate that is\n      expiring in May 2020\n    + JDK-8225069: Remove Comodo root certificate that is expiring\n      in May 2020\n  * Import of OpenJDK 8 u262 build 09\n    + JDK-8248399: Build installs jfr binary when JFR is disabled\n  * Import of OpenJDK 8 u262 build 10\n    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'\n      installed in wrong package\n  * Import of OpenJDK 8 u265 build 01\n    + JDK-8249677: Regression in 8u after JDK-8237117: Better\n      ForkJoinPool behavior\n    + JDK-8250546: Expect changed behaviour reported in JDK-8249846\n  * Import of OpenJDK 8 u272 build 01\n    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY\n      test/compiler/7177917/Test7177917.java\n    + JDK-8035493: JVMTI PopFrame capability must instruct\n      compilers not to prune locals\n    + JDK-8036088: Replace strtok() with its safe equivalent\n      strtok_s() in DefaultProxySelector.c\n    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/\n      /BadSerializationTest/BadSerializationTest.java fails\n    + JDK-8075774: Small readability and performance improvements\n      for zipfs\n    + JDK-8132206: move ScanTest.java into OpenJDK\n    + JDK-8132376: Add @requires os.family to the client tests with\n      access to internal OS-specific API\n    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java\n    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/\n      /appletviewer/IOExceptionIfEncodedURLTest/\n      /IOExceptionIfEncodedURLTest.sh\n    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/\n      /MTGraphicsAccessTest.java hangs on Win. 8\n    + JDK-8151788: NullPointerException from ntlm.Client.type3\n    + JDK-8151834: Test SmallPrimeExponentP.java times out\n      intermittently\n    + JDK-8153430: jdk regression test MletParserLocaleTest,\n      ParserInfiniteLoopTest reduce default timeout\n    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary\n      public\n    + JDK-8156169: Some sound tests rarely hangs because of\n      incorrect synchronization\n    + JDK-8165936: Potential Heap buffer overflow when seaching\n      timezone info files\n    + JDK-8166148: Fix for JDK-8165936 broke solaris builds\n    + JDK-8167300: Scheduling failures during gcm should be fatal\n    + JDK-8167615: Opensource unit/regression tests for JavaSound\n    + JDK-8172012: [TEST_BUG] delays needed in\n      javax/swing/JTree/4633594/bug4633594.java\n    + JDK-8177628: Opensource unit/regression tests for ImageIO\n    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java\n    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/\n      /AppletContextTest/BadPluginConfigurationTest.sh\n    + JDK-8193137: Nashorn crashes when given an empty script file\n    + JDK-8194298: Add support for per Socket configuration of TCP\n      keepalive\n    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java\n      throws error\n    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java\n      fails\n    + JDK-8210147: adjust some WSAGetLastError usages in windows\n      network coding\n    + JDK-8211714: Need to update vm_version.cpp to recognise\n      VS2017 minor versions\n    + JDK-8214862: assert(proj != __null) at compile.cpp:3251\n    + JDK-8217606: LdapContext#reconnect always opens a new\n      connection\n    + JDK-8217647: JFR: recordings on 32-bit systems unreadable\n    + JDK-8226697: Several tests which need the @key headful\n      keyword are missing it.\n    + JDK-8229378: jdwp library loader in linker_md.c quietly\n      truncates on buffer overflow\n    + JDK-8230303: JDB hangs when running monitor command\n    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)\n      return NULL if n is not in the CG\n    + JDK-8234617: C1: Incorrect result of field load due to\n      missing narrowing conversion\n    + JDK-8235243: handle VS2017 15.9 and VS2019 in\n      abstract_vm_version\n    + JDK-8235325: build failure on Linux after 8235243\n    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink\n    + JDK-8237951: CTW: C2 compilation fails with 'malformed\n      control flow'\n    + JDK-8238225: Issues reported after replacing symlink at\n      Contents/MacOS/libjli.dylib with binary\n    + JDK-8239385: KerberosTicket client name refers wrongly to\n      sAMAccountName in AD\n    + JDK-8239819: XToolkit: Misread of screen information memory\n    + JDK-8240295: hs_err elapsed time in seconds is not accurate\n      enough\n    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system\n      property with a security one\n    + JDK-8242498: Invalid 'sun.awt.TimedWindowEvent' object leads\n      to JVM crash\n    + JDK-8243489: Thread CPU Load event may contain wrong data for\n      CPU time under certain conditions\n    + JDK-8244818: Java2D Queue Flusher crash while moving\n      application window to external monitor\n    + JDK-8246310: Clean commented-out code about ModuleEntry\n      and PackageEntry in JFR\n    + JDK-8246384: Enable JFR by default on supported architectures\n      for October 2020 release\n    + JDK-8248643: Remove extra leading space in JDK-8240295 8u\n      backport\n    + JDK-8249610: Make\n      sun.security.krb5.Config.getBooleanObject(String... keys)\n      method public\n  * Import of OpenJDK 8 u272 build 02\n    + JDK-8023697: failed class resolution reports different class\n      name in detail message for the first and subsequent times\n    + JDK-8025886: replace [[ and == bash extensions in regtest\n    + JDK-8046274: Removing dependency on jakarta-regexp\n    + JDK-8048933: -XX:+TraceExceptions output should include the\n      message\n    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/\n      /fileaccess/FontFile.java fails\n    + JDK-8148854: Class names 'SomeClass' and 'LSomeClass;'\n      treated by JVM as an equivalent\n    + JDK-8154313: Generated javadoc scattered all over the place\n    + JDK-8163251: Hard coded loop limit prevents reading of smart\n      card data greater than 8k\n    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java\n      fails with compiler.whitebox.SimpleTestCaseHelper(int) must be\n      compiled\n    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/\n      /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java\n    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt\n      FocusTransitionTest test.\n    + JDK-8201633: Problems with AES-GCM native acceleration\n    + JDK-8211049: Second parameter of 'initialize' method is not\n          used\n    + JDK-8219566: JFR did not collect call stacks when\n      MaxJavaStackTraceDepth is set to zero\n    + JDK-8220165: Encryption using GCM results in\n      RuntimeException- input length out of bound\n    + JDK-8220555: JFR tool shows potentially misleading message\n      when it cannot access a file\n    + JDK-8224217: RecordingInfo should use textual representation\n      of path\n    + JDK-8231779: crash\n      HeapWord*ParallelScavengeHeap::failed_mem_allocate\n    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c\n      'multiple definition' link errors with GCC10\n    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/\n      /SctpNet.c 'multiple definition' link errors with GCC10\n    + JDK-8238388, PR3798: libj2gss/NativeFunc.o 'multiple\n      definition' link errors with GCC10\n    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null\n      params from byte array\n    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/\n      /plugins/shared/CanWriteSequence.java\n  * Import of OpenJDK 8 u272 build 03\n    + JDK-6574989: TEST_BUG:\n      javax/sound/sampled/Clip/bug5070081.java fails sometimes\n    + JDK-8148754: C2 loop unrolling fails due to unexpected graph\n      shape\n    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests\n      fail with error : revokeall.exe: Permission denied\n    + JDK-8203357: Container Metrics\n    + JDK-8209113: Use WeakReference for lastFontStrike for created\n      Fonts\n    + JDK-8216283: Allow shorter method sampling interval than 10 ms\n    + JDK-8221569: JFR tool produces incorrect output when both\n      --categories and --events are specified\n    + JDK-8233097: Fontmetrics for large Fonts has zero width\n    + JDK-8248851: CMS: Missing memory fences between free chunk\n      check and klass read\n    + JDK-8250875: Incorrect parameter type for update_number in\n      JDK_Version::jdk_update\n  * Import of OpenJDK 8 u272 build 04\n    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws\n      IllegalArgumentException for flags of type double\n    + JDK-8177334: Update xmldsig implementation to Apache\n      Santuario 2.1.1\n    + JDK-8217878: ENVELOPING XML signature no longer works in JDK\n      11\n    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR\n      exception on OpenJDK 11, works 8/9/10\n    + JDK-8243138: Enhance BaseLdapServer to support starttls\n      extended request\n  * Import of OpenJDK 8 u272 build 05\n    + JDK-8026236: Add PrimeTest for BigInteger\n    + JDK-8057003: Large reference arrays cause extremely long\n      synchronization times\n    + JDK-8060721: Test runtime/SharedArchiveFile/\n      /LimitSharedSizes.java fails in jdk 9 fcs new\n      platforms/compiler\n    + JDK-8152077: (cal) Calendar.roll does not always roll the\n      hours during daylight savings\n    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed\n    + JDK-8211163: UNIX version of Java_java_io_Console_echo does\n      not return a clean boolean\n    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in\n      docker container only works with debug JVMs\n    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo\n    + JDK-8236645: JDK 8u231 introduces a regression with\n      incompatible handling of XML messages\n    + JDK-8240676: Meet not symmetric failure when running lucene\n      on jdk8\n    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA\n      program\n    + JDK-8249158: THREAD_START and THREAD_END event posted in\n      primordial phase\n    + JDK-8250627: Use -XX:+/-UseContainerSupport for\n      enabling/disabling Java container metrics\n    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and\n      Solaris builds\n    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:\n      AgeTableTracer::is_tenuring_distribution_event_enabled\n  * Import of OpenJDK 8 u272 build 06\n    + JDK-8064319: Need to enable -XX:+TraceExceptions in release\n      builds\n    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11\n      v2.40 support\n    + JDK-8160768: Add capability to custom resolve host/domain\n      names within the default JNDI LDAP provider\n    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()\n      not working\n    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface\n      license\n    + JDK-8184762: ZapStackSegments should use optimized memset\n    + JDK-8193234: When using -Xcheck:jni an internally allocated\n      buffer can leak\n    + JDK-8219919: RuntimeStub name lost with\n      PrintFrameConverterAssembly\n    + JDK-8220313: [TESTBUG] Update base image for Docker testing\n      to OL 7.6\n    + JDK-8222079: Don't use memset to initialize fields decode_env\n      constructor in disassembler.cpp\n    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update\n      SunPKCS11 provider with PKCS11 v2.40 support)\n    + JDK-8226575: OperatingSystemMXBean should be made container\n      aware\n    + JDK-8226809: Circular reference in printed stack trace is not\n      correctly indented \u0026 ambiguous\n    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM\n    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property\n      name\n    + JDK-8238898, PR3801: Missing hash characters for header on\n      license file\n    + JDK-8243320: Add SSL root certificates to Oracle Root CA\n      program\n    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest\n      release 1.8.26\n    + JDK-8245467: Remove 8u TLSv1.2 implementation files\n    + JDK-8245469: Remove DTLS protocol implementation\n    + JDK-8245470: Fix JDK8 compatibility issues\n    + JDK-8245471: Revert JDK-8148188\n    + JDK-8245472: Backport JDK-8038893 to JDK8\n    + JDK-8245473: OCSP stapling support\n    + JDK-8245474: Add TLS_KRB5 cipher suites support according to\n      RFC-2712\n    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello\n      message by default\n    + JDK-8245477: Adjust TLS tests location\n    + JDK-8245653: Remove 8u TLS tests\n    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7\n    + JDK-8251117: Cannot check P11Key size in P11Cipher and\n      P11AEADCipher\n    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is\n      set to either true or false\n    + JDK-8251341: Minimal Java specification change\n    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u\n  * Import of OpenJDK 8 u272 build 07\n    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ\n  * Import of OpenJDK 8 u272 build 08\n    + JDK-8062947: Fix exception message to correctly represent\n      LDAP connection failure\n    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed\n      due to timeout on DeadServerNoTimeoutTest is incorrect\n    + JDK-8252573: 8u: Windows build failed after 8222079 backport\n  * Import of OpenJDK 8 u272 build 09\n    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :\n      Compilation failed\n  * Import of OpenJDK 8 u272 build 10\n    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed\n      by the fix for JDK-8249158\n    + JDK-8254937: Revert JDK-8148854 for 8u272\n  * Backports\n    + JDK-8038723, PR3806: Openup some PrinterJob tests\n    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when\n      JTable contains certain string\n    + JDK-8058779, PR3805: Faster implementation of\n      String.replace(CharSequence, CharSequence)\n    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several\n      client tests unaffected by the automated bulk update\n    + JDK-8144015, PR3806: [PIT] failures of text layout font tests\n    + JDK-8144023, PR3806: [PIT] failure of text measurements in\n      javax/swing/text/html/parser/Parser/6836089/bug6836089.java\n    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in\n      closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java\n    + JDK-8145542, PR3806: The case failed automatically and thrown\n      java.lang.ArrayIndexOutOfBoundsException exception\n    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when\n      displaying Devanagari text in JEditorPane\n    + JDK-8152358, PR3800: code and comment cleanups found during\n      the hunt for 8077392\n    + JDK-8152545, PR3804: Use preprocessor instead of compiling a\n      program to generate native nio constants\n    + JDK-8152680, PR3806: Regression in\n      GlyphVector.getGlyphCharIndex behaviour\n    + JDK-8158924, PR3806: Incorrect i18n text document layout\n    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for\n      javax/swing/text/GlyphPainter2/6427244/bug6427244.java\n    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/\n      /GetGlyphCharIndexTest.java does not compile\n    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/\n      /GlyphPainter2/6427244/bug6427244.java - compilation failed\n    + JDK-8191512, PR3806: T2K font rasterizer code removal\n    + JDK-8191522, PR3806: Remove Bigelow\u0026Holmes Lucida fonts from\n      JDK sources\n    + JDK-8236512, PR3801: PKCS11 Connection closed after\n      Cipher.doFinal and NoPadding\n    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to\n      tzdata2020b\n  * Bug fixes\n    + PR3798: Fix format-overflow error on GCC 10, caused by\n      passing NULL to a '%s' directive\n    + PR3795: ECDSAUtils for XML digital signatures should support\n      the same curve set as the rest of the JDK\n    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add\n      TLSv1.3 implementation classes from 11.0.7\n    + PR3808: IcedTea does not install the JFR *.jfc files\n    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has\n      fixed its use with Shenandoah\n    + PR3811: Don't attempt to install JFR files when JFR is\n      disabled\n  * Shenandoah\n    + [backport] 8221435: Shenandoah should not mark through weak\n      roots\n    + [backport] 8221629: Shenandoah: Cleanup class unloading logic\n    + [backport] 8222992: Shenandoah: Pre-evacuate all roots\n    + [backport] 8223215: Shenandoah: Support verifying subset of\n      roots\n    + [backport] 8223774: Shenandoah: Refactor\n      ShenandoahRootProcessor and family\n    + [backport] 8224210: Shenandoah: Refactor\n      ShenandoahRootScanner to support scanning CSet codecache roots\n    + [backport] 8224508: Shenandoah: Need to update thread roots\n      in final mark for piggyback ref update cycle\n    + [backport] 8224579: ResourceMark not declared in\n      shenandoahRootProcessor.inline.hpp with\n      --disable-precompiled-headers\n    + [backport] 8224679: Shenandoah: Make\n      ShenandoahParallelCodeCacheIterator noncopyable\n    + [backport] 8224751: Shenandoah: Shenandoah Verifier should\n      select proper roots according to current GC cycle\n    + [backport] 8225014: Separate ShenandoahRootScanner method for\n      object_iterate\n    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't\n      work for Shenandoah\n    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to\n      ensure roots to-space invariant\n    + [backport] 8225590: Shenandoah: Refactor\n      ShenandoahClassLoaderDataRoots API\n    + [backport] 8226413: Shenandoah: Separate root scanner for\n      SH::object_iterate()\n    + [backport] 8230853: Shenandoah: replace leftover\n      assert(is_in(...)) with rich asserts\n    + [backport] 8231198: Shenandoah: heap walking should visit all\n      roots most of the time\n    + [backport] 8231244: Shenandoah: all-roots heap walking misses\n      some weak roots\n    + [backport] 8237632: Shenandoah: accept NULL fwdptr to\n      cooperate with JVMTI and JFR\n    + [backport] 8239786: Shenandoah: print per-cycle statistics\n    + [backport] 8239926: Shenandoah: Shenandoah needs to mark\n      nmethod's metadata\n    + [backport] 8240671: Shenandoah: refactor\n      ShenandoahPhaseTimings\n    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils\n    + [backport] 8240750: Shenandoah: remove leftover files and\n      mentions of ShenandoahAllocTracker\n    + [backport] 8240868: Shenandoah: remove CM-with-UR\n      piggybacking cycles\n    + [backport] 8240872: Shenandoah: Avoid updating new regions\n      from start of evacuation\n    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers\n    + [backport] 8240915: Shenandoah: Remove unused fields in init\n      mark tasks\n    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects\n      paths after JDK-8240868\n    + [backport] 8241007: Shenandoah: remove\n      ShenandoahCriticalControlThreadPriority support\n    + [backport] 8241062: Shenandoah: rich asserts trigger 'empty\n      statement' inspection\n    + [backport] 8241081: Shenandoah: Do not modify\n      update-watermark concurrently\n    + [backport] 8241093: Shenandoah: editorial changes in flag\n      descriptions\n    + [backport] 8241139: Shenandoah: distribute mark-compact work\n      exactly to minimize fragmentation\n    + [backport] 8241142: Shenandoah: should not use parallel\n      reference processing with single GC thread\n    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul\n    + [backport] 8241435: Shenandoah: avoid disabling pacing with\n      'aggressive'\n    + [backport] 8241520: Shenandoah: simplify region sequence\n      numbers handling\n    + [backport] 8241534: Shenandoah: region status should include\n      update watermark\n    + [backport] 8241574: Shenandoah: remove\n      ShenandoahAssertToSpaceClosure\n    + [backport] 8241583: Shenandoah: turn heap lock asserts into\n      macros\n    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not\n      derive from ContiguousSpace\n    + [backport] 8241673: Shenandoah: refactor anti-false-sharing\n      padding\n    + [backport] 8241675: Shenandoah: assert(n-\u003eoutcnt() \u003e 0) at\n      shenandoahSupport.cpp:2858 with\n      java/util/Collections/FindSubList.java\n    + [backport] 8241692: Shenandoah: remove\n      ShenandoahHeapRegion::_reserved\n    + [backport] 8241700: Shenandoah: Fold\n      ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier\n    + [backport] 8241740: Shenandoah: remove\n      ShenandoahHeapRegion::_heap\n    + [backport] 8241743: Shenandoah: refactor and inline\n      ShenandoahHeap::heap()\n    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS\n      methods\n    + [backport] 8241838: Shenandoah: no need to trash cset during\n      final mark\n    + [backport] 8241841: Shenandoah: ditch one of allocation type\n      counters in ShenandoahHeapRegion\n    + [backport] 8241842: Shenandoah: inline\n      ShenandoahHeapRegion::region_number\n    + [backport] 8241844: Shenandoah: rename\n      ShenandoahHeapRegion::region_number\n    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions\n      to cache lines\n    + [backport] 8241926: Shenandoah: only print heap changes for\n      operations that directly affect it\n    + [backport] 8241983: Shenandoah: simplify FreeSet logging\n    + [backport] 8241985: Shenandoah: simplify collectable garbage\n      logging\n    + [backport] 8242040: Shenandoah: print allocation failure type\n    + [backport] 8242041: Shenandoah: adaptive heuristics should\n      account evac reserve in free target\n    + [backport] 8242042: Shenandoah: tune down\n      ShenandoahGarbageThreshold\n    + [backport] 8242054: Shenandoah: New incremental-update mode\n    + [backport] 8242075: Shenandoah: rename\n      ShenandoahHeapRegionSize flag\n    + [backport] 8242082: Shenandoah: Purge Traversal mode\n    + [backport] 8242083: Shenandoah: split 'Prepare Evacuation'\n      tracking into cset/freeset counters\n    + [backport] 8242089: Shenandoah: per-worker stats should be\n      summed up, not averaged\n    + [backport] 8242101: Shenandoah: coalesce and parallelise heap\n      region walks during the pauses\n    + [backport] 8242114: Shenandoah: remove\n      ShenandoahHeapRegion::reset_alloc_metadata_to_shared\n    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier\n      dispatching\n    + [backport] 8242211: Shenandoah: remove\n      ShenandoahHeuristics::RegionData::_seqnum_last_alloc\n    + [backport] 8242212: Shenandoah: initialize\n      ShenandoahHeuristics::_region_data eagerly\n    + [backport] 8242213: Shenandoah: remove\n      ShenandoahHeuristics::_bytes_in_cset\n    + [backport] 8242217: Shenandoah: Enable GC mode to be\n      diagnostic/experimental and have a name\n    + [backport] 8242227: Shenandoah: transit regions to cset state\n      when adding to collection set\n    + [backport] 8242228: Shenandoah: remove unused\n      ShenandoahCollectionSet methods\n    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion\n      liveness-related methods\n    + [backport] 8242267: Shenandoah: regions space needs to be\n      aligned by os::vm_allocation_granularity()\n    + [backport] 8242271: Shenandoah: add test to verify GC mode\n      unlock\n    + [backport] 8242273: Shenandoah: accept either SATB or IU\n      barriers, but not both\n    + [backport] 8242301: Shenandoah: Inline LRB runtime call\n    + [backport] 8242316: Shenandoah: Turn NULL-check into assert\n      in SATB slow-path entry\n    + [backport] 8242353: Shenandoah: micro-optimize region\n      liveness handling\n    + [backport] 8242365: Shenandoah: use uint16_t instead of\n      jushort for liveness cache\n    + [backport] 8242375: Shenandoah: Remove\n      ShenandoahHeuristic::record_gc_start/end methods\n    + [backport] 8242641: Shenandoah: clear live data and update\n      TAMS optimistically\n    + [backport] 8243238: Shenandoah: explicit GC request should\n      wait for a complete GC cycle\n    + [backport] 8243301: Shenandoah: ditch\n      ShenandoahAllowMixedAllocs\n    + [backport] 8243307: Shenandoah: remove\n      ShCollectionSet::live_data\n    + [backport] 8243395: Shenandoah: demote guarantee in\n      ShenandoahPhaseTimings::record_workers_end\n    + [backport] 8243463: Shenandoah: ditch total_pause counters\n    + [backport] 8243464: Shenandoah: print statistic counters in\n      time order\n    + [backport] 8243465: Shenandoah: ditch unused pause_other,\n      conc_other counters\n    + [backport] 8243487: Shenandoah: make _num_phases illegal\n      phase type\n    + [backport] 8243494: Shenandoah: set counters once per cycle\n    + [backport] 8243573: Shenandoah: rename GCParPhases and\n      related code\n    + [backport] 8243848: Shenandoah: Windows build fails after\n      JDK-8239786\n    + [backport] 8244180: Shenandoah: carry Phase to\n      ShWorkerTimingsTracker explicitly\n    + [backport] 8244200: Shenandoah: build breakages after\n      JDK-8241743\n    + [backport] 8244226: Shenandoah: per-cycle statistics contain\n      worker data from previous cycles\n    + [backport] 8244326: Shenandoah: global statistics should not\n      accept bogus samples\n    + [backport] 8244509: Shenandoah: refactor\n      ShenandoahBarrierC2Support::test_* methods\n    + [backport] 8244551: Shenandoah: Fix racy update of\n      update_watermark\n    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state\n      takes loop for wrong control\n    + [backport] 8244730: Shenandoah: gc/shenandoah/options/\n      /TestHeuristicsUnlock.java should only verify the heuristics\n    + [backport] 8244732: Shenandoah: move heuristics code to\n      gc/shenandoah/heuristics\n    + [backport] 8244737: Shenandoah: move mode code to\n      gc/shenandoah/mode\n    + [backport] 8244739: Shenandoah: break superclass dependency\n      on ShenandoahNormalMode\n    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode\n      to ShenandoahSATBMode\n    + [backport] 8245461: Shenandoah: refine mode name()-s\n    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings\n      constructor arguments\n    + [backport] 8245464: Shenandoah: allocate collection set\n      bitmap at lower addresses\n    + [backport] 8245465: Shenandoah: test_in_cset can use more\n      efficient encoding\n    + [backport] 8245726: Shenandoah: lift/cleanup\n      ShenandoahHeuristics names and properties\n    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch\n    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not\n      disable heap resizing or uncommits\n    + [backport] 8245773: Shenandoah: Windows assertion failure\n      after JDK-8245464\n    + [backport] 8245812: Shenandoah: compute root phase parallelism\n    + [backport] 8245814: Shenandoah: reconsider format specifiers\n      for stats\n    + [backport] 8245825: Shenandoah: Remove diagnostic flag\n      ShenandoahConcurrentScanCodeRoots\n    + [backport] 8246162: Shenandoah: full GC does not mark code\n      roots when class unloading is off\n    + [backport] 8247310: Shenandoah: pacer should not affect\n      interrupt status\n    + [backport] 8247358: Shenandoah: reconsider free budget slice\n      for marking\n    + [backport] 8247367: Shenandoah: pacer should wait on lock\n      instead of exponential backoff\n    + [backport] 8247474: Shenandoah: Windows build warning after\n      JDK-8247310\n    + [backport] 8247560: Shenandoah: heap iteration holds root\n      locks all the time\n    + [backport] 8247593: Shenandoah: should not block pacing\n      reporters\n    + [backport] 8247751: Shenandoah: options tests should run with\n      smaller heaps\n    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter\n    + [backport] 8247757: Shenandoah: split heavy tests by\n      heuristics to improve parallelism\n    + [backport] 8247860: Shenandoah: add update watermark line in\n      rich assert failure message\n    + [backport] 8248041: Shenandoah: pre-Full GC root updates may\n      miss some roots\n    + [backport] 8248652: Shenandoah: SATB buffer handling may\n      assume no forwarded objects\n    + [backport] 8249560: Shenandoah: Fix racy GC request handling\n    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats\n    + [backport] 8249801: Shenandoah: Clear soft-refs on requested\n      GC cycle\n    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests\n      should account for corner cases\n    + Fix slowdebug build after JDK-8230853 backport\n    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for\n      x86_32 and JFR\n    + JDK-8252366: Shenandoah: revert/cleanup changes in\n      graphKit.cpp\n    + Shenandoah: add JFR roots to root processor after JFR\n      integration\n    + Shenandoah: add root statistics for string dedup table/queues\n    + Shenandoah: enable low-frequency STW class unloading\n    + Shenandoah: fix build failures after JDK-8244737 backport\n    + Shenandoah: Fix build failure with +JFR -PCH\n    + Shenandoah: fix forceful pacer claim\n    + Shenandoah: fix formats in\n      ShenandoahStringSymbolTableUnlinkTask\n    + Shenandoah: fix runtime linking failure due to non-compiled\n      shenandoahBarrierSetC1\n    + Shenandoah: hook statistics printing to PrintGCDetails, not\n      PrintGC\n    + Shenandoah: JNI weak roots are always cleared before Full GC\n      mark\n    + Shenandoah: missing SystemDictionary roots in\n      ShenandoahHeapIterationRootScanner\n    + Shenandoah: move barrier sets to their proper locations\n    + Shenandoah: move parallelCleaning.* to shenandoah/\n    + Shenandoah: pacer should use proper Atomics for intptr_t\n    + Shenandoah: properly deallocates class loader metadata\n    + Shenandoah: specialize String Table scans for better pause\n      performance\n    + Shenandoah: Zero build fails after recent Atomic cleanup in\n      Pacer\n  * AArch64 port\n    + JDK-8161072, PR3797: AArch64: jtreg\n      compiler/uncommontrap/TestDeoptOOM failure\n    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java\n      generates guarantee failure in C1\n    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from\n      watcher thread\n    + JDK-8199712, PR3797: [AArch64] Flight Recorder\n    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp\n      in frame:safe_for_sender\n    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall\n      fails with SIGILL on aarch64\n    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command\n    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java\n      fails on AArch64\n    + JDK-8216989, PR3797:\n      CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()\n      does not check for zero length on AARCH64\n    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking\n      optimisation not triggered\n    + JDK-8221658, PR3797: aarch64: add necessary predicate for\n      ubfx patterns\n    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a\n      BufferBlob\n    + JDK-8246482, PR3797: Build failures with +JFR -PCH\n    + JDK-8247979, PR3797: aarch64: missing side effect of killing\n      flags for clearArray_reg_reg\n    + JDK-8248219, PR3797: aarch64: missing memory barrier in\n      fast_storefield and fast_accessfield\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-11-26T17:27:14Z","modified":"2026-02-04T03:00:38.86484Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:2083-1","title":"Security update for java-1_8_0-openjdk","description":"This update for java-1_8_0-openjdk fixes the following issues:\n\n- Fix regression '8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)',\n  introduced in October 2020 CPU.\n\n- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,\n  bsc#1174157, and October 2020 CPU, bsc#1177943)\n  * New features\n    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7\n    + PR3796: Allow the number of curves supported to be specified\n  * Security fixes\n    + JDK-8028431, CVE-2020-14579: NullPointerException in\n      DerValue.equals(DerValue)\n    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in\n      sun.security.util.DerInputStream.getUnalignedBitString()\n    + JDK-8230613: Better ASCII conversions\n    + JDK-8231800: Better listing of arrays\n    + JDK-8232014: Expand DTD support\n    + JDK-8233255: Better Swing Buttons\n    + JDK-8233624: Enhance JNI linkage\n    + JDK-8234032: Improve basic calendar services\n    + JDK-8234042: Better factory production of certificates\n    + JDK-8234418: Better parsing with CertificateFactory\n    + JDK-8234836: Improve serialization handling\n    + JDK-8236191: Enhance OID processing\n    + JDK-8236196: Improve string pooling\n    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class\n    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior\n    + JDK-8237592, CVE-2020-14577: Enhance certificate verification\n    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts\n    + JDK-8237995, CVE-2020-14782: Enhance certificate processing\n    + JDK-8238002, CVE-2020-14581: Better matrix operations\n    + JDK-8238804: Enhance key handling process\n    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable\n    + JDK-8238843: Enhanced font handing\n    + JDK-8238920, CVE-2020-14583: Better Buffer support\n    + JDK-8238925: Enhance WAV file playback\n    + JDK-8240119, CVE-2020-14593: Less Affine Transformations\n    + JDK-8240124: Better VM Interning\n    + JDK-8240482: Improved WAV file playback\n    + JDK-8241114, CVE-2020-14792: Better range handling\n    + JDK-8241379: Update JCEKS support\n    + JDK-8241522: Manifest improved jar headers redux\n    + JDK-8242136, CVE-2020-14621: Better XML namespace handling\n    + JDK-8242680, CVE-2020-14796: Improved URI Support\n    + JDK-8242685, CVE-2020-14797: Better Path Validation\n    + JDK-8242695, CVE-2020-14798: Enhanced buffer support\n    + JDK-8243302: Advanced class supports\n    + JDK-8244136, CVE-2020-14803: Improved Buffer supports\n    + JDK-8244479: Further constrain certificates\n    + JDK-8244955: Additional Fix for JDK-8240124\n    + JDK-8245407: Enhance zoning of times\n    + JDK-8245412: Better class definitions\n    + JDK-8245417: Improve certificate chain handling\n    + JDK-8248574: Improve jpeg processing\n    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit\n    + JDK-8253019: Enhanced JPEG decoding\n  * Import of OpenJDK 8 u262 build 01\n    + JDK-4949105: Access Bridge lacks html tags parsing\n    + JDK-8003209: JFR events for network utilization\n    + JDK-8030680: 292 cleanup from default method code assessment\n    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java\n      and some tests failed on windows intermittently\n    + JDK-8041626: Shutdown tracing event\n    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp\n    + JDK-8149338: JVM Crash caused by Marlin renderer not handling\n       NaN coordinates\n    + JDK-8151582: (ch) test java/nio/channels/\n      /AsyncCloseAndInterrupt.java failing due to 'Connection\n      succeeded'\n    + JDK-8165675: Trace event for thread park has incorrect unit\n       for timeout\n    + JDK-8176182: 4 security tests are not run\n    + JDK-8178910: Problemlist sample tests\n    + JDK-8183925: Decouple crash protection from watcher thread\n    + JDK-8191393: Random crashes during cfree+0x1c\n    + JDK-8195817: JFR.stop should require name of recording\n    + JDK-8195818: JFR.start should increase autogenerated name by\n       one\n    + JDK-8195819: Remove recording=x from jcmd JFR.check output\n    + JDK-8199712: Flight Recorder\n    + JDK-8202578: Revisit location for class unload events\n    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on\n      missing events\n    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight\n      Recorder)\n    + JDK-8203346: JFR: Inconsistent signature of\n      jfr_add_string_constant\n    + JDK-8203664: JFR start failure after AppCDS archive created\n      with JFR StartFlightRecording\n    + JDK-8203921: JFR thread sampling is missing fixes from\n      JDK-8194552\n    + JDK-8203929: Limit amount of data for JFR.dump\n    + JDK-8205516: JFR tool\n    + JDK-8207392: [PPC64] Implement JFR profiling\n    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first\n      classloader which calls it\n    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR\n    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()\n    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD\n      1.0.7\n    + JDK-8211239: Build fails without JFR: empty JFR events\n      signatures mismatch\n    + JDK-8212232: Wrong metadata for the configuration of the\n      cutoff for old object sample events\n    + JDK-8213015: Inconsistent settings between JFR.configure and\n      -XX:FlightRecorderOptions\n    + JDK-8213421: Line number information for execution samples\n      always 0\n    + JDK-8213617: JFR should record the PID of the recorded process\n    + JDK-8213734: SAXParser.parse(File, ..) does not close\n      resources when Exception occurs.\n    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered\n      by tests\n    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by\n      test\n    + JDK-8213966: The ZGC JFR events should be marked as\n      experimental\n    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap\n      in debug builds\n    + JDK-8214750: Unnecessary \u003cp\u003e tags in jfr classes\n    + JDK-8214896: JFR Tool left files behind\n    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java\n      fails with UnsatisfiedLinkError\n    + JDK-8214925: JFR tool fails to execute\n    + JDK-8215175: Inconsistencies in JFR event metadata\n    + JDK-8215237: jdk.jfr.Recording javadoc does not compile\n    + JDK-8215284: Reduce noise induced by periodic task\n      getFileSize()\n    + JDK-8215355: Object monitor deadlock with no threads holding\n      the monitor (using jemalloc 5.1)\n    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails\n    + JDK-8215771: The jfr tool should pretty print reference chains\n    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work\n      properly\n    + JDK-8216486: Possibility of integer overflow in\n      JfrThreadSampler::run()\n    + JDK-8216528: test/jdk/java/rmi/transport/\n       /runtimeThreadInheritanceLeak/\n       /RuntimeThreadInheritanceLeak.java failing with Xcomp\n    + JDK-8216559: [JFR] Native libraries not correctly parsed from\n      /proc/self/maps\n    + JDK-8216578: Remove unused/obsolete method in JFR code\n    + JDK-8216995: Clean up JFR command line processing\n    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some\n      systems due to process surviving SIGINT\n    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR\n      TestShutdownEvent\n    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly\n    + JDK-8223147: JFR Backport\n    + JDK-8223689: Add JFR Thread Sampling Support\n    + JDK-8223690: Add JFR BiasedLock Event Support\n    + JDK-8223691: Add JFR G1 Region Type Change Event Support\n    + JDK-8223692: Add JFR G1 Heap Summary Event Support\n    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:\n      invariant\n    + JDK-8224475: JTextPane does not show images in HTML rendering\n    + JDK-8226253: JAWS reports wrong number of radio buttons when\n      buttons are hidden.\n    + JDK-8226779: [TESTBUG] Test JFR API from Java agent\n    + JDK-8226892: ActionListeners on JRadioButtons don't get\n      notified when selection is changed with arrow keys\n    + JDK-8227011: Starting a JFR recording in response to JVMTI\n      VMInit and / or Java agent premain corrupts memory\n    + JDK-8227605: Kitchensink fails 'assert((((klass)-\u003etrace_id()\n      \u0026 (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))\n      failed: invariant'\n    + JDK-8229366: JFR backport allows unchecked writing to memory\n    + JDK-8229401: Fix JFR code cache test failures\n    + JDK-8229708: JFR backport code does not initialize\n    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator\n    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on\n      Windows\n    + JDK-8230707: JFR related tests are failing\n    + JDK-8230782: Robot.createScreenCapture() fails if\n      'awt.robot.gtk' is set to false\n    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on\n       unix misses ReleaseStringUTFChars in early return\n    + JDK-8230947: TestLookForUntestedEvents.java is failing after\n      JDK-8230707\n    + JDK-8231995: two jtreg tests failed after 8229366 is fixed\n    + JDK-8233623: Add classpath exception to copyright in\n      EventHandlerProxyCreator.java file\n    + JDK-8236002: CSR for JFR backport suggests not leaving out\n      the package-info\n    + JDK-8236008: Some backup files were accidentally left in the\n      hotspot tree\n    + JDK-8236074: Missed package-info\n    + JDK-8236174: Should update javadoc since tags\n    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport\n    + JDK-8238452: Keytool generates wrong expiration date if\n      validity is set to 2050/01/01\n    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when\n      there are external FIPS modules in the NSSDB\n    + JDK-8238589: Necessary code cleanup in JFR for JDK8u\n    + JDK-8238590: Enable JFR by default during compilation in 8u\n    + JDK-8239055: Wrong implementation of VMState.hasListener\n    + JDK-8239476: JDK-8238589 broke windows build by moving\n      OrderedPair\n    + JDK-8239479: minimal1 and zero builds are failing\n    + JDK-8239867: correct over use of INCLUDE_JFR macro\n    + JDK-8240375: Disable JFR by default for July 2020 release\n    + JDK-8241444: Metaspace::_class_vsm not initialized if\n      compressed class pointers are disabled\n    + JDK-8241902: AIX Build broken after integration of\n      JDK-8223147 (JFR Backport)\n    + JDK-8242788: Non-PCH build is broken after JDK-8191393\n  * Import of OpenJDK 8 u262 build 02\n    + JDK-8130737: AffineTransformOp can't handle child raster with\n      non-zero x-offset\n    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation\n      in java/awt/image/Raster/TestChildRasterOp.java\n    + JDK-8230926: [macosx] Two apostrophes are entered instead of\n      one with 'U.S. International - PC' layout\n    + JDK-8240576: JVM crashes after transformation in C2\n      IdealLoopTree::merge_many_backedges\n    + JDK-8242883: Incomplete backport of JDK-8078268: backport\n      test part\n  * Import of OpenJDK 8 u262 build 03\n    + JDK-8037866: Replace the Fun class in tests with lambdas\n    + JDK-8146612: C2: Precedence edges specification violated\n    + JDK-8150986: serviceability/sa/jmap-hprof/\n       /JMapHProfLargeHeapTest.java failing because expects HPROF\n      JAVA PROFILE 1.0.1 file format\n    + JDK-8229888: (zipfs) Updating an existing zip file does not\n      preserve original permissions\n    + JDK-8230597: Update GIFlib library to the 5.2.1\n    + JDK-8230769: BufImg_SetupICM add\n      ReleasePrimitiveArrayCritical call in early return\n    + JDK-8233880, PR3798: Support compilers with multi-digit major\n      version numbers\n    + JDK-8239852: java/util/concurrent tests fail with\n      -XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:\n      verification should have failed\n    + JDK-8241638: launcher time metrics always report 1 on Linux\n      when _JAVA_LAUNCHER_DEBUG set\n    + JDK-8243059: Build fails when --with-vendor-name contains a\n      comma\n    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes\n    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32\n    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()\n      returns wrong result\n  * Import of OpenJDK 8 u262 build 04\n    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't\n      throw NPE if timeout is less than, or equal to zero when unit\n      == null\n    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering\n    + JDK-8171934:\n      ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()\n      does not recognize OpenJDK's HotSpot VM\n    + JDK-8196969: JTreg Failure:\n      serviceability/sa/ClhsdbJstack.java causes NPE\n    + JDK-8243539: Copyright info (Year) should be updated for fix\n      of 8241638\n    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value\n  * Import of OpenJDK 8 u262 build 05\n    + JDK-7147060: com/sun/org/apache/xml/internal/security/\n      /transforms/ClassLoaderTest.java doesn't run in agentvm mode\n    + JDK-8178374: Problematic ByteBuffer handling in\n      CipherSpi.bufferCrypt method\n    + JDK-8181841: A TSA server returns timestamp with precision\n      higher than milliseconds\n    + JDK-8227269: Slow class loading when running with JDWP\n    + JDK-8229899: Make java.io.File.isInvalid() less racy\n    + JDK-8236996: Incorrect Roboto font rendering on Windows with\n      subpixel antialiasing\n    + JDK-8241750: x86_32 build failure after JDK-8227269\n    + JDK-8244407: JVM crashes after transformation in C2\n      IdealLoopTree::split_fall_in\n    + JDK-8244843: JapanEraNameCompatTest fails\n  * Import of OpenJDK 8 u262 build 06\n    + JDK-8246223: Windows build fails after JDK-8227269\n  * Import of OpenJDK 8 u262 build 07\n    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and\n      Jfr:on_vm_start() start-up order for correct option parsing\n    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a\n    + JDK-8245167: Top package in method profiling shows null in JMC\n    + JDK-8246703: [TESTBUG] Add test for JDK-8233197\n  * Import of OpenJDK 8 u262 build 08\n    + JDK-8220293: Deadlock in JFR string pool\n    + JDK-8225068: Remove DocuSign root certificate that is\n      expiring in May 2020\n    + JDK-8225069: Remove Comodo root certificate that is expiring\n      in May 2020\n  * Import of OpenJDK 8 u262 build 09\n    + JDK-8248399: Build installs jfr binary when JFR is disabled\n  * Import of OpenJDK 8 u262 build 10\n    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'\n      installed in wrong package\n  * Import of OpenJDK 8 u265 build 01\n    + JDK-8249677: Regression in 8u after JDK-8237117: Better\n      ForkJoinPool behavior\n    + JDK-8250546: Expect changed behaviour reported in JDK-8249846\n  * Import of OpenJDK 8 u272 build 01\n    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY\n      test/compiler/7177917/Test7177917.java\n    + JDK-8035493: JVMTI PopFrame capability must instruct\n      compilers not to prune locals\n    + JDK-8036088: Replace strtok() with its safe equivalent\n      strtok_s() in DefaultProxySelector.c\n    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/\n      /BadSerializationTest/BadSerializationTest.java fails\n    + JDK-8075774: Small readability and performance improvements\n      for zipfs\n    + JDK-8132206: move ScanTest.java into OpenJDK\n    + JDK-8132376: Add @requires os.family to the client tests with\n      access to internal OS-specific API\n    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java\n    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/\n      /appletviewer/IOExceptionIfEncodedURLTest/\n      /IOExceptionIfEncodedURLTest.sh\n    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/\n      /MTGraphicsAccessTest.java hangs on Win. 8\n    + JDK-8151788: NullPointerException from ntlm.Client.type3\n    + JDK-8151834: Test SmallPrimeExponentP.java times out\n      intermittently\n    + JDK-8153430: jdk regression test MletParserLocaleTest,\n      ParserInfiniteLoopTest reduce default timeout\n    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary\n      public\n    + JDK-8156169: Some sound tests rarely hangs because of\n      incorrect synchronization\n    + JDK-8165936: Potential Heap buffer overflow when seaching\n      timezone info files\n    + JDK-8166148: Fix for JDK-8165936 broke solaris builds\n    + JDK-8167300: Scheduling failures during gcm should be fatal\n    + JDK-8167615: Opensource unit/regression tests for JavaSound\n    + JDK-8172012: [TEST_BUG] delays needed in\n      javax/swing/JTree/4633594/bug4633594.java\n    + JDK-8177628: Opensource unit/regression tests for ImageIO\n    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java\n    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/\n      /AppletContextTest/BadPluginConfigurationTest.sh\n    + JDK-8193137: Nashorn crashes when given an empty script file\n    + JDK-8194298: Add support for per Socket configuration of TCP\n      keepalive\n    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java\n      throws error\n    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java\n      fails\n    + JDK-8210147: adjust some WSAGetLastError usages in windows\n      network coding\n    + JDK-8211714: Need to update vm_version.cpp to recognise\n      VS2017 minor versions\n    + JDK-8214862: assert(proj != __null) at compile.cpp:3251\n    + JDK-8217606: LdapContext#reconnect always opens a new\n      connection\n    + JDK-8217647: JFR: recordings on 32-bit systems unreadable\n    + JDK-8226697: Several tests which need the @key headful\n      keyword are missing it.\n    + JDK-8229378: jdwp library loader in linker_md.c quietly\n      truncates on buffer overflow\n    + JDK-8230303: JDB hangs when running monitor command\n    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)\n      return NULL if n is not in the CG\n    + JDK-8234617: C1: Incorrect result of field load due to\n      missing narrowing conversion\n    + JDK-8235243: handle VS2017 15.9 and VS2019 in\n      abstract_vm_version\n    + JDK-8235325: build failure on Linux after 8235243\n    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink\n    + JDK-8237951: CTW: C2 compilation fails with 'malformed\n      control flow'\n    + JDK-8238225: Issues reported after replacing symlink at\n      Contents/MacOS/libjli.dylib with binary\n    + JDK-8239385: KerberosTicket client name refers wrongly to\n      sAMAccountName in AD\n    + JDK-8239819: XToolkit: Misread of screen information memory\n    + JDK-8240295: hs_err elapsed time in seconds is not accurate\n      enough\n    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system\n      property with a security one\n    + JDK-8242498: Invalid 'sun.awt.TimedWindowEvent' object leads\n      to JVM crash\n    + JDK-8243489: Thread CPU Load event may contain wrong data for\n      CPU time under certain conditions\n    + JDK-8244818: Java2D Queue Flusher crash while moving\n      application window to external monitor\n    + JDK-8246310: Clean commented-out code about ModuleEntry\n      and PackageEntry in JFR\n    + JDK-8246384: Enable JFR by default on supported architectures\n      for October 2020 release\n    + JDK-8248643: Remove extra leading space in JDK-8240295 8u\n      backport\n    + JDK-8249610: Make\n      sun.security.krb5.Config.getBooleanObject(String... keys)\n      method public\n  * Import of OpenJDK 8 u272 build 02\n    + JDK-8023697: failed class resolution reports different class\n      name in detail message for the first and subsequent times\n    + JDK-8025886: replace [[ and == bash extensions in regtest\n    + JDK-8046274: Removing dependency on jakarta-regexp\n    + JDK-8048933: -XX:+TraceExceptions output should include the\n      message\n    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/\n      /fileaccess/FontFile.java fails\n    + JDK-8148854: Class names 'SomeClass' and 'LSomeClass;'\n      treated by JVM as an equivalent\n    + JDK-8154313: Generated javadoc scattered all over the place\n    + JDK-8163251: Hard coded loop limit prevents reading of smart\n      card data greater than 8k\n    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java\n      fails with compiler.whitebox.SimpleTestCaseHelper(int) must be\n      compiled\n    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/\n      /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java\n    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt\n      FocusTransitionTest test.\n    + JDK-8201633: Problems with AES-GCM native acceleration\n    + JDK-8211049: Second parameter of 'initialize' method is not\n          used\n    + JDK-8219566: JFR did not collect call stacks when\n      MaxJavaStackTraceDepth is set to zero\n    + JDK-8220165: Encryption using GCM results in\n      RuntimeException- input length out of bound\n    + JDK-8220555: JFR tool shows potentially misleading message\n      when it cannot access a file\n    + JDK-8224217: RecordingInfo should use textual representation\n      of path\n    + JDK-8231779: crash\n      HeapWord*ParallelScavengeHeap::failed_mem_allocate\n    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c\n      'multiple definition' link errors with GCC10\n    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/\n      /SctpNet.c 'multiple definition' link errors with GCC10\n    + JDK-8238388, PR3798: libj2gss/NativeFunc.o 'multiple\n      definition' link errors with GCC10\n    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null\n      params from byte array\n    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/\n      /plugins/shared/CanWriteSequence.java\n  * Import of OpenJDK 8 u272 build 03\n    + JDK-6574989: TEST_BUG:\n      javax/sound/sampled/Clip/bug5070081.java fails sometimes\n    + JDK-8148754: C2 loop unrolling fails due to unexpected graph\n      shape\n    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests\n      fail with error : revokeall.exe: Permission denied\n    + JDK-8203357: Container Metrics\n    + JDK-8209113: Use WeakReference for lastFontStrike for created\n      Fonts\n    + JDK-8216283: Allow shorter method sampling interval than 10 ms\n    + JDK-8221569: JFR tool produces incorrect output when both\n      --categories and --events are specified\n    + JDK-8233097: Fontmetrics for large Fonts has zero width\n    + JDK-8248851: CMS: Missing memory fences between free chunk\n      check and klass read\n    + JDK-8250875: Incorrect parameter type for update_number in\n      JDK_Version::jdk_update\n  * Import of OpenJDK 8 u272 build 04\n    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws\n      IllegalArgumentException for flags of type double\n    + JDK-8177334: Update xmldsig implementation to Apache\n      Santuario 2.1.1\n    + JDK-8217878: ENVELOPING XML signature no longer works in JDK\n      11\n    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR\n      exception on OpenJDK 11, works 8/9/10\n    + JDK-8243138: Enhance BaseLdapServer to support starttls\n      extended request\n  * Import of OpenJDK 8 u272 build 05\n    + JDK-8026236: Add PrimeTest for BigInteger\n    + JDK-8057003: Large reference arrays cause extremely long\n      synchronization times\n    + JDK-8060721: Test runtime/SharedArchiveFile/\n      /LimitSharedSizes.java fails in jdk 9 fcs new\n      platforms/compiler\n    + JDK-8152077: (cal) Calendar.roll does not always roll the\n      hours during daylight savings\n    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed\n    + JDK-8211163: UNIX version of Java_java_io_Console_echo does\n      not return a clean boolean\n    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in\n      docker container only works with debug JVMs\n    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo\n    + JDK-8236645: JDK 8u231 introduces a regression with\n      incompatible handling of XML messages\n    + JDK-8240676: Meet not symmetric failure when running lucene\n      on jdk8\n    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA\n      program\n    + JDK-8249158: THREAD_START and THREAD_END event posted in\n      primordial phase\n    + JDK-8250627: Use -XX:+/-UseContainerSupport for\n      enabling/disabling Java container metrics\n    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and\n      Solaris builds\n    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:\n      AgeTableTracer::is_tenuring_distribution_event_enabled\n  * Import of OpenJDK 8 u272 build 06\n    + JDK-8064319: Need to enable -XX:+TraceExceptions in release\n      builds\n    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11\n      v2.40 support\n    + JDK-8160768: Add capability to custom resolve host/domain\n      names within the default JNDI LDAP provider\n    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()\n      not working\n    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface\n      license\n    + JDK-8184762: ZapStackSegments should use optimized memset\n    + JDK-8193234: When using -Xcheck:jni an internally allocated\n      buffer can leak\n    + JDK-8219919: RuntimeStub name lost with\n      PrintFrameConverterAssembly\n    + JDK-8220313: [TESTBUG] Update base image for Docker testing\n      to OL 7.6\n    + JDK-8222079: Don't use memset to initialize fields decode_env\n      constructor in disassembler.cpp\n    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update\n      SunPKCS11 provider with PKCS11 v2.40 support)\n    + JDK-8226575: OperatingSystemMXBean should be made container\n      aware\n    + JDK-8226809: Circular reference in printed stack trace is not\n      correctly indented \u0026 ambiguous\n    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM\n    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property\n      name\n    + JDK-8238898, PR3801: Missing hash characters for header on\n      license file\n    + JDK-8243320: Add SSL root certificates to Oracle Root CA\n      program\n    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest\n      release 1.8.26\n    + JDK-8245467: Remove 8u TLSv1.2 implementation files\n    + JDK-8245469: Remove DTLS protocol implementation\n    + JDK-8245470: Fix JDK8 compatibility issues\n    + JDK-8245471: Revert JDK-8148188\n    + JDK-8245472: Backport JDK-8038893 to JDK8\n    + JDK-8245473: OCSP stapling support\n    + JDK-8245474: Add TLS_KRB5 cipher suites support according to\n      RFC-2712\n    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello\n      message by default\n    + JDK-8245477: Adjust TLS tests location\n    + JDK-8245653: Remove 8u TLS tests\n    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7\n    + JDK-8251117: Cannot check P11Key size in P11Cipher and\n      P11AEADCipher\n    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is\n      set to either true or false\n    + JDK-8251341: Minimal Java specification change\n    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u\n  * Import of OpenJDK 8 u272 build 07\n    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ\n  * Import of OpenJDK 8 u272 build 08\n    + JDK-8062947: Fix exception message to correctly represent\n      LDAP connection failure\n    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed\n      due to timeout on DeadServerNoTimeoutTest is incorrect\n    + JDK-8252573: 8u: Windows build failed after 8222079 backport\n  * Import of OpenJDK 8 u272 build 09\n    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :\n      Compilation failed\n  * Import of OpenJDK 8 u272 build 10\n    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed\n      by the fix for JDK-8249158\n    + JDK-8254937: Revert JDK-8148854 for 8u272\n  * Backports\n    + JDK-8038723, PR3806: Openup some PrinterJob tests\n    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when\n      JTable contains certain string\n    + JDK-8058779, PR3805: Faster implementation of\n      String.replace(CharSequence, CharSequence)\n    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several\n      client tests unaffected by the automated bulk update\n    + JDK-8144015, PR3806: [PIT] failures of text layout font tests\n    + JDK-8144023, PR3806: [PIT] failure of text measurements in\n      javax/swing/text/html/parser/Parser/6836089/bug6836089.java\n    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in\n      closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java\n    + JDK-8145542, PR3806: The case failed automatically and thrown\n      java.lang.ArrayIndexOutOfBoundsException exception\n    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when\n      displaying Devanagari text in JEditorPane\n    + JDK-8152358, PR3800: code and comment cleanups found during\n      the hunt for 8077392\n    + JDK-8152545, PR3804: Use preprocessor instead of compiling a\n      program to generate native nio constants\n    + JDK-8152680, PR3806: Regression in\n      GlyphVector.getGlyphCharIndex behaviour\n    + JDK-8158924, PR3806: Incorrect i18n text document layout\n    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for\n      javax/swing/text/GlyphPainter2/6427244/bug6427244.java\n    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/\n      /GetGlyphCharIndexTest.java does not compile\n    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/\n      /GlyphPainter2/6427244/bug6427244.java - compilation failed\n    + JDK-8191512, PR3806: T2K font rasterizer code removal\n    + JDK-8191522, PR3806: Remove Bigelow\u0026Holmes Lucida fonts from\n      JDK sources\n    + JDK-8236512, PR3801: PKCS11 Connection closed after\n      Cipher.doFinal and NoPadding\n    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to\n      tzdata2020b\n  * Bug fixes\n    + PR3798: Fix format-overflow error on GCC 10, caused by\n      passing NULL to a '%s' directive\n    + PR3795: ECDSAUtils for XML digital signatures should support\n      the same curve set as the rest of the JDK\n    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add\n      TLSv1.3 implementation classes from 11.0.7\n    + PR3808: IcedTea does not install the JFR *.jfc files\n    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has\n      fixed its use with Shenandoah\n    + PR3811: Don't attempt to install JFR files when JFR is\n      disabled\n  * Shenandoah\n    + [backport] 8221435: Shenandoah should not mark through weak\n      roots\n    + [backport] 8221629: Shenandoah: Cleanup class unloading logic\n    + [backport] 8222992: Shenandoah: Pre-evacuate all roots\n    + [backport] 8223215: Shenandoah: Support verifying subset of\n      roots\n    + [backport] 8223774: Shenandoah: Refactor\n      ShenandoahRootProcessor and family\n    + [backport] 8224210: Shenandoah: Refactor\n      ShenandoahRootScanner to support scanning CSet codecache roots\n    + [backport] 8224508: Shenandoah: Need to update thread roots\n      in final mark for piggyback ref update cycle\n    + [backport] 8224579: ResourceMark not declared in\n      shenandoahRootProcessor.inline.hpp with\n      --disable-precompiled-headers\n    + [backport] 8224679: Shenandoah: Make\n      ShenandoahParallelCodeCacheIterator noncopyable\n    + [backport] 8224751: Shenandoah: Shenandoah Verifier should\n      select proper roots according to current GC cycle\n    + [backport] 8225014: Separate ShenandoahRootScanner method for\n      object_iterate\n    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't\n      work for Shenandoah\n    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to\n      ensure roots to-space invariant\n    + [backport] 8225590: Shenandoah: Refactor\n      ShenandoahClassLoaderDataRoots API\n    + [backport] 8226413: Shenandoah: Separate root scanner for\n      SH::object_iterate()\n    + [backport] 8230853: Shenandoah: replace leftover\n      assert(is_in(...)) with rich asserts\n    + [backport] 8231198: Shenandoah: heap walking should visit all\n      roots most of the time\n    + [backport] 8231244: Shenandoah: all-roots heap walking misses\n      some weak roots\n    + [backport] 8237632: Shenandoah: accept NULL fwdptr to\n      cooperate with JVMTI and JFR\n    + [backport] 8239786: Shenandoah: print per-cycle statistics\n    + [backport] 8239926: Shenandoah: Shenandoah needs to mark\n      nmethod's metadata\n    + [backport] 8240671: Shenandoah: refactor\n      ShenandoahPhaseTimings\n    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils\n    + [backport] 8240750: Shenandoah: remove leftover files and\n      mentions of ShenandoahAllocTracker\n    + [backport] 8240868: Shenandoah: remove CM-with-UR\n      piggybacking cycles\n    + [backport] 8240872: Shenandoah: Avoid updating new regions\n      from start of evacuation\n    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers\n    + [backport] 8240915: Shenandoah: Remove unused fields in init\n      mark tasks\n    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects\n      paths after JDK-8240868\n    + [backport] 8241007: Shenandoah: remove\n      ShenandoahCriticalControlThreadPriority support\n    + [backport] 8241062: Shenandoah: rich asserts trigger 'empty\n      statement' inspection\n    + [backport] 8241081: Shenandoah: Do not modify\n      update-watermark concurrently\n    + [backport] 8241093: Shenandoah: editorial changes in flag\n      descriptions\n    + [backport] 8241139: Shenandoah: distribute mark-compact work\n      exactly to minimize fragmentation\n    + [backport] 8241142: Shenandoah: should not use parallel\n      reference processing with single GC thread\n    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul\n    + [backport] 8241435: Shenandoah: avoid disabling pacing with\n      'aggressive'\n    + [backport] 8241520: Shenandoah: simplify region sequence\n      numbers handling\n    + [backport] 8241534: Shenandoah: region status should include\n      update watermark\n    + [backport] 8241574: Shenandoah: remove\n      ShenandoahAssertToSpaceClosure\n    + [backport] 8241583: Shenandoah: turn heap lock asserts into\n      macros\n    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not\n      derive from ContiguousSpace\n    + [backport] 8241673: Shenandoah: refactor anti-false-sharing\n      padding\n    + [backport] 8241675: Shenandoah: assert(n-\u003eoutcnt() \u003e 0) at\n      shenandoahSupport.cpp:2858 with\n      java/util/Collections/FindSubList.java\n    + [backport] 8241692: Shenandoah: remove\n      ShenandoahHeapRegion::_reserved\n    + [backport] 8241700: Shenandoah: Fold\n      ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier\n    + [backport] 8241740: Shenandoah: remove\n      ShenandoahHeapRegion::_heap\n    + [backport] 8241743: Shenandoah: refactor and inline\n      ShenandoahHeap::heap()\n    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS\n      methods\n    + [backport] 8241838: Shenandoah: no need to trash cset during\n      final mark\n    + [backport] 8241841: Shenandoah: ditch one of allocation type\n      counters in ShenandoahHeapRegion\n    + [backport] 8241842: Shenandoah: inline\n      ShenandoahHeapRegion::region_number\n    + [backport] 8241844: Shenandoah: rename\n      ShenandoahHeapRegion::region_number\n    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions\n      to cache lines\n    + [backport] 8241926: Shenandoah: only print heap changes for\n      operations that directly affect it\n    + [backport] 8241983: Shenandoah: simplify FreeSet logging\n    + [backport] 8241985: Shenandoah: simplify collectable garbage\n      logging\n    + [backport] 8242040: Shenandoah: print allocation failure type\n    + [backport] 8242041: Shenandoah: adaptive heuristics should\n      account evac reserve in free target\n    + [backport] 8242042: Shenandoah: tune down\n      ShenandoahGarbageThreshold\n    + [backport] 8242054: Shenandoah: New incremental-update mode\n    + [backport] 8242075: Shenandoah: rename\n      ShenandoahHeapRegionSize flag\n    + [backport] 8242082: Shenandoah: Purge Traversal mode\n    + [backport] 8242083: Shenandoah: split 'Prepare Evacuation'\n      tracking into cset/freeset counters\n    + [backport] 8242089: Shenandoah: per-worker stats should be\n      summed up, not averaged\n    + [backport] 8242101: Shenandoah: coalesce and parallelise heap\n      region walks during the pauses\n    + [backport] 8242114: Shenandoah: remove\n      ShenandoahHeapRegion::reset_alloc_metadata_to_shared\n    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier\n      dispatching\n    + [backport] 8242211: Shenandoah: remove\n      ShenandoahHeuristics::RegionData::_seqnum_last_alloc\n    + [backport] 8242212: Shenandoah: initialize\n      ShenandoahHeuristics::_region_data eagerly\n    + [backport] 8242213: Shenandoah: remove\n      ShenandoahHeuristics::_bytes_in_cset\n    + [backport] 8242217: Shenandoah: Enable GC mode to be\n      diagnostic/experimental and have a name\n    + [backport] 8242227: Shenandoah: transit regions to cset state\n      when adding to collection set\n    + [backport] 8242228: Shenandoah: remove unused\n      ShenandoahCollectionSet methods\n    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion\n      liveness-related methods\n    + [backport] 8242267: Shenandoah: regions space needs to be\n      aligned by os::vm_allocation_granularity()\n    + [backport] 8242271: Shenandoah: add test to verify GC mode\n      unlock\n    + [backport] 8242273: Shenandoah: accept either SATB or IU\n      barriers, but not both\n    + [backport] 8242301: Shenandoah: Inline LRB runtime call\n    + [backport] 8242316: Shenandoah: Turn NULL-check into assert\n      in SATB slow-path entry\n    + [backport] 8242353: Shenandoah: micro-optimize region\n      liveness handling\n    + [backport] 8242365: Shenandoah: use uint16_t instead of\n      jushort for liveness cache\n    + [backport] 8242375: Shenandoah: Remove\n      ShenandoahHeuristic::record_gc_start/end methods\n    + [backport] 8242641: Shenandoah: clear live data and update\n      TAMS optimistically\n    + [backport] 8243238: Shenandoah: explicit GC request should\n      wait for a complete GC cycle\n    + [backport] 8243301: Shenandoah: ditch\n      ShenandoahAllowMixedAllocs\n    + [backport] 8243307: Shenandoah: remove\n      ShCollectionSet::live_data\n    + [backport] 8243395: Shenandoah: demote guarantee in\n      ShenandoahPhaseTimings::record_workers_end\n    + [backport] 8243463: Shenandoah: ditch total_pause counters\n    + [backport] 8243464: Shenandoah: print statistic counters in\n      time order\n    + [backport] 8243465: Shenandoah: ditch unused pause_other,\n      conc_other counters\n    + [backport] 8243487: Shenandoah: make _num_phases illegal\n      phase type\n    + [backport] 8243494: Shenandoah: set counters once per cycle\n    + [backport] 8243573: Shenandoah: rename GCParPhases and\n      related code\n    + [backport] 8243848: Shenandoah: Windows build fails after\n      JDK-8239786\n    + [backport] 8244180: Shenandoah: carry Phase to\n      ShWorkerTimingsTracker explicitly\n    + [backport] 8244200: Shenandoah: build breakages after\n      JDK-8241743\n    + [backport] 8244226: Shenandoah: per-cycle statistics contain\n      worker data from previous cycles\n    + [backport] 8244326: Shenandoah: global statistics should not\n      accept bogus samples\n    + [backport] 8244509: Shenandoah: refactor\n      ShenandoahBarrierC2Support::test_* methods\n    + [backport] 8244551: Shenandoah: Fix racy update of\n      update_watermark\n    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state\n      takes loop for wrong control\n    + [backport] 8244730: Shenandoah: gc/shenandoah/options/\n      /TestHeuristicsUnlock.java should only verify the heuristics\n    + [backport] 8244732: Shenandoah: move heuristics code to\n      gc/shenandoah/heuristics\n    + [backport] 8244737: Shenandoah: move mode code to\n      gc/shenandoah/mode\n    + [backport] 8244739: Shenandoah: break superclass dependency\n      on ShenandoahNormalMode\n    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode\n      to ShenandoahSATBMode\n    + [backport] 8245461: Shenandoah: refine mode name()-s\n    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings\n      constructor arguments\n    + [backport] 8245464: Shenandoah: allocate collection set\n      bitmap at lower addresses\n    + [backport] 8245465: Shenandoah: test_in_cset can use more\n      efficient encoding\n    + [backport] 8245726: Shenandoah: lift/cleanup\n      ShenandoahHeuristics names and properties\n    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch\n    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not\n      disable heap resizing or uncommits\n    + [backport] 8245773: Shenandoah: Windows assertion failure\n      after JDK-8245464\n    + [backport] 8245812: Shenandoah: compute root phase parallelism\n    + [backport] 8245814: Shenandoah: reconsider format specifiers\n      for stats\n    + [backport] 8245825: Shenandoah: Remove diagnostic flag\n      ShenandoahConcurrentScanCodeRoots\n    + [backport] 8246162: Shenandoah: full GC does not mark code\n      roots when class unloading is off\n    + [backport] 8247310: Shenandoah: pacer should not affect\n      interrupt status\n    + [backport] 8247358: Shenandoah: reconsider free budget slice\n      for marking\n    + [backport] 8247367: Shenandoah: pacer should wait on lock\n      instead of exponential backoff\n    + [backport] 8247474: Shenandoah: Windows build warning after\n      JDK-8247310\n    + [backport] 8247560: Shenandoah: heap iteration holds root\n      locks all the time\n    + [backport] 8247593: Shenandoah: should not block pacing\n      reporters\n    + [backport] 8247751: Shenandoah: options tests should run with\n      smaller heaps\n    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter\n    + [backport] 8247757: Shenandoah: split heavy tests by\n      heuristics to improve parallelism\n    + [backport] 8247860: Shenandoah: add update watermark line in\n      rich assert failure message\n    + [backport] 8248041: Shenandoah: pre-Full GC root updates may\n      miss some roots\n    + [backport] 8248652: Shenandoah: SATB buffer handling may\n      assume no forwarded objects\n    + [backport] 8249560: Shenandoah: Fix racy GC request handling\n    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats\n    + [backport] 8249801: Shenandoah: Clear soft-refs on requested\n      GC cycle\n    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests\n      should account for corner cases\n    + Fix slowdebug build after JDK-8230853 backport\n    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for\n      x86_32 and JFR\n    + JDK-8252366: Shenandoah: revert/cleanup changes in\n      graphKit.cpp\n    + Shenandoah: add JFR roots to root processor after JFR\n      integration\n    + Shenandoah: add root statistics for string dedup table/queues\n    + Shenandoah: enable low-frequency STW class unloading\n    + Shenandoah: fix build failures after JDK-8244737 backport\n    + Shenandoah: Fix build failure with +JFR -PCH\n    + Shenandoah: fix forceful pacer claim\n    + Shenandoah: fix formats in\n      ShenandoahStringSymbolTableUnlinkTask\n    + Shenandoah: fix runtime linking failure due to non-compiled\n      shenandoahBarrierSetC1\n    + Shenandoah: hook statistics printing to PrintGCDetails, not\n      PrintGC\n    + Shenandoah: JNI weak roots are always cleared before Full GC\n      mark\n    + Shenandoah: missing SystemDictionary roots in\n      ShenandoahHeapIterationRootScanner\n    + Shenandoah: move barrier sets to their proper locations\n    + Shenandoah: move parallelCleaning.* to shenandoah/\n    + Shenandoah: pacer should use proper Atomics for intptr_t\n    + Shenandoah: properly deallocates class loader metadata\n    + Shenandoah: specialize String Table scans for better pause\n      performance\n    + Shenandoah: Zero build fails after recent Atomic cleanup in\n      Pacer\n  * AArch64 port\n    + JDK-8161072, PR3797: AArch64: jtreg\n      compiler/uncommontrap/TestDeoptOOM failure\n    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java\n      generates guarantee failure in C1\n    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from\n      watcher thread\n    + JDK-8199712, PR3797: [AArch64] Flight Recorder\n    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp\n      in frame:safe_for_sender\n    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall\n      fails with SIGILL on aarch64\n    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command\n    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java\n      fails on AArch64\n    + JDK-8216989, PR3797:\n      CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()\n      does not check for zero length on AARCH64\n    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking\n      optimisation not triggered\n    + JDK-8221658, PR3797: aarch64: add necessary predicate for\n      ubfx patterns\n    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a\n      BufferBlob\n    + JDK-8246482, PR3797: Build failures with +JFR -PCH\n    + JDK-8247979, PR3797: aarch64: missing side effect of killing\n      flags for clearArray_reg_reg\n    + JDK-8248219, PR3797: aarch64: missing memory barrier in\n      fast_storefield and fast_accessfield\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-11-27T13:25:52Z","modified":"2026-02-04T03:55:20.033146Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:10871-1","title":"java-11-openjdk-11.0.12.0-3.1 on GA media","description":"These are all security issues fixed in the java-11-openjdk-11.0.12.0-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:20:19.394894Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:10872-1","title":"java-13-openjdk-13.0.8.0-3.1 on GA media","description":"These are all security issues fixed in the java-13-openjdk-13.0.8.0-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:43:55.885522Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:10873-1","title":"java-15-openjdk-15.0.4.0-2.1 on GA media","description":"These are all security issues fixed in the java-15-openjdk-15.0.4.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:38:37.743883Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:10876-1","title":"java-1_8_0-openjdk-1.8.0.302-2.2 on GA media","description":"These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.302-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:22:42.093736Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2020:14587-1","title":"Security update for java-1_7_0-ibm","description":"This update for java-1_7_0-ibm fixes the following issues:\n\n- Update to Java 7.0 Service Refresh 10 Fix Pack 75 [bsc#1180063, bsc#1177943]\n  CVE-2020-14792 CVE-2020-14797 CVE-2020-14782 CVE-2020-14781\n  CVE-2020-14779 CVE-2020-14798 CVE-2020-14796 CVE-2020-14803\n  * Class Libraries:\n    - Z/OS specific C function send_file is changing the file pointer position\n  * Security:\n    - Add the new oracle signer certificate\n    - Certificate parsing error\n    - JVM memory growth can be caused by the IBMPKCS11IMPL crypto provider\n    - Remove check for websphere signed jars\n    - sessionid.hashcode generates too many collisions\n    - The Java 8 IBM certpath provider does not honor the user\n      specified system property for CLR connect timeout\n","status":"published","published":"2020-12-22T09:54:35Z","modified":"2026-02-04T04:25:12.608487Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:14588-1","title":"Security update for java-1_7_1-ibm","description":"This update for java-1_7_1-ibm fixes the following issues:\n\n- Update to Java 7.1 Service Refresh 4 Fix Pack 75 [bsc#1180063, bsc#1177943]\n  CVE-2020-14792 CVE-2020-14797 CVE-2020-14782 CVE-2020-14781\n  CVE-2020-14779 CVE-2020-14798 CVE-2020-14796 CVE-2020-14803\n  * Class Libraries:\n    - Z/OS specific C function send_file is changing the file pointer position\n  * Security:\n    - Add the new oracle signer certificate\n    - Certificate parsing error\n    - JVM memory growth can be caused by the IBMPKCS11IMPL crypto provider\n    - Remove check for websphere signed jars\n    - sessionid.hashcode generates too many collisions\n    - The Java 8 IBM certpath provider does not honor the user\n      specified system property for CLR connect timeout\n","status":"published","published":"2020-12-22T09:55:56Z","modified":"2026-02-04T04:37:34.076487Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:3159-1","title":"Security update for java-11-openjdk","description":"This update for java-11-openjdk fixes the following issues:\n\n- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,\n  bsc#1177943)\n  * New features\n    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector\n  * Security fixes\n    + JDK-8233624: Enhance JNI linkage\n    + JDK-8236196: Improve string pooling\n    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class\n    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts\n    + JDK-8237995, CVE-2020-14782: Enhance certificate processing\n    + JDK-8240124: Better VM Interning\n    + JDK-8241114, CVE-2020-14792: Better range handling\n    + JDK-8242680, CVE-2020-14796: Improved URI Support\n    + JDK-8242685, CVE-2020-14797: Better Path Validation\n    + JDK-8242695, CVE-2020-14798: Enhanced buffer support\n    + JDK-8243302: Advanced class supports\n    + JDK-8244136, CVE-2020-14803: Improved Buffer supports\n    + JDK-8244479: Further constrain certificates\n    + JDK-8244955: Additional Fix for JDK-8240124\n    + JDK-8245407: Enhance zoning of times\n    + JDK-8245412: Better class definitions\n    + JDK-8245417: Improve certificate chain handling\n    + JDK-8248574: Improve jpeg processing\n    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit\n    + JDK-8253019: Enhanced JPEG decoding\n  * Other changes\n    + JDK-6532025: GIF reader throws misleading exception with\n      truncated images\n    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/\n      /PDialogTest.java needs update by removing an infinite loop\n    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/\n      /Test8017492.java fails\n    + JDK-8062947: Fix exception message to correctly represent\n      LDAP connection failure\n    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed\n    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/\n      /CloseServerSocket.java fails intermittently with Address\n      already in use\n    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed\n      due to timeout on DeadServerNoTimeoutTest is incorrect\n    + JDK-8160768: Add capability to custom resolve host/domain\n      names within the default JNDI LDAP provider\n    + JDK-8172404: Tools should warn if weak algorithms are used\n      before restricting them\n    + JDK-8193367: Annotated type variable bounds crash javac\n    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java\n      fails intermittently: Connection reset\n    + JDK-8203026: java.rmi.NoSuchObjectException: no such object\n      in table\n    + JDK-8203281: [Windows] JComboBox change in ui when\n      editor.setBorder() is called\n    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to\n      resolve_wk_klass\n    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and\n      JdbExprTest.sh fail due to timeout\n    + JDK-8203928: [Test] Convert non-JDB scaffolding\n      serviceability shell script tests to java\n    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak\n    + JDK-8204994: SA might fail to attach to process with 'Windbg\n      Error: WaitForEvent failed'\n    + JDK-8205534: Remove SymbolTable dependency from\n      serviceability agent\n    + JDK-8206309: Tier1 SA tests fail\n    + JDK-8208281: java/nio/channels/\n      /AsynchronousSocketChannel/Basic.java timed out\n    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java\n      version - step1\n    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh\n      is incorrect\n    + JDK-8209342: Problemlist SA tests on Solaris due to Error\n      attaching to process: Can't create thread_db agent!\n    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java\n      should be marked as headful\n    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with\n      timeout\n    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java\n      version - step2\n    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with\n      ZGC\n    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java\n    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/\n      /ap10t001/TestDescription.java failed with ObjectFree:\n      GetCurrentThreadCpuTimerInfo returned unexpected error code\n    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java\n      version - step3\n    + JDK-8210527: JShell: NullPointerException in\n      jdk.jshell.Eval.translateExceptionStack\n    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related\n      tests\n    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails\n      with waitForPrompt timed out after 60 seconds\n    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should\n      clarify which output is the pending reply after a timeout\n    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java\n      version - step4\n    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java\n      fails to find ThreadLocalObject\n    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh\n      test\n    + JDK-8211694: JShell: Redeclared variable should be reset\n    + JDK-8212200: assert when shared java.lang.Object is redefined\n      by JVMTI agent\n    + JDK-8212629: [TEST] wrong breakpoint in\n      test/jdk/com/sun/jdi/DeferredStepTest\n    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)\n      - unexpected. lastLine=52, minLine=52, maxLine=55\n    + JDK-8212807: tools/jar/multiRelease/Basic.java times out\n    + JDK-8213182: Minimal VM build failure after JDK-8212200\n      (assert when shared java.lang.Object is redefined by JVMTI\n      agent)\n    + JDK-8213214: Set -Djava.io.tmpdir= when running tests\n    + JDK-8213275: ReplaceCriticalClasses.java fails with\n      jdk.internal.vm.PostVMInitHook not found\n    + JDK-8213574: Deadlock in string table expansion when dumping\n      lots of CDS classes\n    + JDK-8213703: LambdaConversionException: Invalid receiver type\n      not a subtype of implementation type interface\n    + JDK-8214074: Ghash optimization using AVX instructions\n    + JDK-8214491: Upgrade to JLine 3.9.0\n    + JDK-8214797: TestJmapCoreMetaspace.java timed out\n    + JDK-8215243: JShell tests failing intermitently with\n      'Problem cleaning up the following threads:'\n    + JDK-8215244: jdk/jshell/ToolBasicTest.java\n      testHistoryReference failed\n    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash\n      optimization using AVX instructions)\n    + JDK-8215438: jshell tool: Ctrl-D causes EOF\n    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on\n      Windows\n    + JDK-8216974: HttpConnection not returned to the pool after\n      204 response\n    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not\n      reflected correctly during run time\n    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is\n      too small on new Skylake CPUs\n    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs\n      instead of aliased B\u0026W glyphs\n    + JDK-8221658: aarch64: add necessary predicate for ubfx\n      patterns\n    + JDK-8221759: Crash when completing 'java.io.File.path'\n    + JDK-8221918: runtime/SharedArchiveFile/serviceability/\n      /ReplaceCriticalClasses.java fails: Shared archive not found\n    + JDK-8222074: Enhance auto vectorization for x86\n    + JDK-8222079: Don't use memset to initialize fields decode_env\n      constructor in disassembler.cpp\n    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely\n      on hostname command\n    + JDK-8223688: JShell: crash on the instantiation of raw\n      anonymous class\n    + JDK-8223777: In posix_spawn mode, failing to exec()\n      jspawnhelper does not result in an error\n    + JDK-8223940: Private key not supported by chosen signature\n      algorithm\n    + JDK-8224184: jshell got IOException at exiting with AIX\n    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in\n      test_mulc\n    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws\n      NullPointerException\n    + JDK-8225625: AES Electronic Codebook (ECB) encryption and\n      decryption optimization using AVX512 + VAES instructions\n    + JDK-8226536: Catch OOM from deopt that fails rematerializing\n      objects\n    + JDK-8226575: OperatingSystemMXBean should be made container\n      aware\n    + JDK-8226697: Several tests which need the @key headful\n      keyword are missing it.\n    + JDK-8226809: Circular reference in printed stack trace is not\n      correctly indented \u0026 ambiguous\n    + JDK-8227059: sun/security/tools/keytool/\n      /DefaultSignatureAlgorithm.java timed out\n    + JDK-8227269: Slow class loading when running with JDWP\n    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java\n      fails due to 'exitValue = 6'\n    + JDK-8228448: Jconsole can't connect to itself\n    + JDK-8228967: Trust/Key store and SSL context utilities for\n      tests\n    + JDK-8229378: jdwp library loader in linker_md.c quietly\n      truncates on buffer overflow\n    + JDK-8229815: Upgrade Jline to 3.12.1\n    + JDK-8230000: some httpclients testng tests run zero test\n    + JDK-8230002: javax/xml/jaxp/unittest/transform/\n      /SecureProcessingTest.java runs zero test\n    + JDK-8230010: Remove jdk8037819/BasicTest1.java\n    + JDK-8230094: CCE in createXMLEventWriter(Result) over an\n      arbitrary XMLStreamWriter\n    + JDK-8230402: Allocation of compile task fails with assert:\n      'Leaking compilation tasks?'\n    + JDK-8230767: FlightRecorderListener returns null recording\n    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to\n      test/jdk/java/util/zip/EntryCount64k.java\n    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()\n      can be quicker for self thread\n    + JDK-8231586: enlarge encoding space for OopMapValue offsets\n    + JDK-8231953: Wrong assumption in assertion in\n      oop::register_oop\n    + JDK-8231968: getCurrentThreadAllocatedBytes default\n      implementation s/b getThreadAllocatedBytes\n    + JDK-8232083: Minimal VM is broken after JDK-8231586\n    + JDK-8232161: Align some one-way conversion in MS950 charset\n      with Windows\n    + JDK-8232855: jshell missing word in /help help\n    + JDK-8233027: OopMapSet::all_do does oms.next() twice during\n      iteration\n    + JDK-8233228: Disable weak named curves by default in TLS,\n      CertPath, and Signed JAR\n    + JDK-8233386: Initialize NULL fields for unused decorations\n    + JDK-8233452: java.math.BigDecimal.sqrt() with\n      RoundingMode.FLOOR results in incorrect result\n    + JDK-8233686: XML transformer uses excessive amount of memory\n    + JDK-8233741: AES Countermode (AES-CTR) optimization using\n      AVX512 + VAES instructions\n    + JDK-8233829: javac cannot find non-ASCII module name under\n      non-UTF8 environment\n    + JDK-8233958: Memory retention due to HttpsURLConnection\n      finalizer that serves no purpose\n    + JDK-8234011: (zipfs) Memory leak in\n      ZipFileSystem.releaseDeflater()\n    + JDK-8234058: runtime/CompressedOops/\n      /CompressedClassPointers.java fails with 'Narrow klass base:\n      0x0000000000000000' missing from stdout/stderr\n    + JDK-8234149: Several regression tests do not dispose Frame at\n      end\n    + JDK-8234347: 'Turkey' meta time zone does not generate\n      composed localized names\n    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/\n      /bug6980209.java fails in linux nightly\n    + JDK-8234535: Cross compilation fails due to missing CFLAGS\n      for the BUILD_CC\n    + JDK-8234541: C1 emits an empty message when it inlines\n      successfully\n    + JDK-8234687: change javap reporting on unknown attributes\n    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK\n      11\n    + JDK-8236548: Localized time zone name inconsistency between\n      English and other locales\n    + JDK-8236617: jtreg test containers/docker/\n      /TestMemoryAwareness.java fails after 8226575\n    + JDK-8237182: Update copyright header for shenandoah and\n      epsilon files\n    + JDK-8237888: security/infra/java/security/cert/\n      /CertPathValidator/certification/LuxTrustCA.java fails when\n      checking validity interval\n    + JDK-8237977: Further update\n      javax/net/ssl/compatibility/Compatibility.java\n    + JDK-8238270: java.net HTTP/2 client does not decrease stream\n      count when receives 204 response\n    + JDK-8238284: [macos] Zero VM build fails due to an obvious\n      typo\n    + JDK-8238380: java.base/unix/native/libjava/childproc.c\n      'multiple definition' link errors with GCC10\n    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c\n      'multiple definition' link errors with GCC10\n    + JDK-8238388: libj2gss/NativeFunc.o 'multiple definition' link\n      errors with GCC10\n    + JDK-8238448: RSASSA-PSS signature verification fail when\n      using certain odd key sizes\n    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits\n      with non-zero code\n    + JDK-8239083: C1 assert(known_holder == NULL ||\n      (known_holder-\u003eis_instance_klass() \u0026\u0026\n      (!known_holder-\u003eis_interface() ||\n      ((ciInstanceKlass*)known_holder)-\u003ehas_nonstatic_concrete_methods())),\n      'should be non-static concrete method');\n    + JDK-8239385: KerberosTicket client name refers wrongly to\n      sAMAccountName in AD\n    + JDK-8240169: javadoc fails to link to non-modular api docs\n    + JDK-8240295: hs_err elapsed time in seconds is not accurate\n      enough\n    + JDK-8240360: NativeLibraryEvent has wrong library name on\n      Linux\n    + JDK-8240676: Meet not symmetric failure when running lucene\n      on jdk8\n    + JDK-8241007: Shenandoah: remove\n      ShenandoahCriticalControlThreadPriority support\n    + JDK-8241065: Shenandoah: remove leftover code after\n      JDK-8231086\n    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is\n      failing on 32bit Windows\n    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:\n      java.lang.NullPointerException\n    + JDK-8241138: http.nonProxyHosts=* causes\n      StringIndexOutOfBoundsException in DefaultProxySelector\n    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark\n    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java\n      fails with OOME\n    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure\n    + JDK-8241750: x86_32 build failure after JDK-8227269\n    + JDK-8242184: CRL generation error with RSASSA-PSS\n    + JDK-8242283: Can't start JVM when java home path includes\n      non-ASCII character\n    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null\n      params from byte array\n    + JDK-8243029: Rewrite javax/net/ssl/compatibility/\n      /Compatibility.java with a flexible interop test framework\n    + JDK-8243138: Enhance BaseLdapServer to support starttls\n      extended request\n    + JDK-8243320: Add SSL root certificates to Oracle Root CA\n      program\n    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA\n      program\n    + JDK-8243389: enhance os::pd_print_cpu_info on linux\n    + JDK-8243453: java --describe-module failed with non-ASCII\n      module name under non-UTF8 environment\n    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp\n    + JDK-8243489: Thread CPU Load event may contain wrong data for\n      CPU time under certain conditions\n    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on\n      HiDPI screens (Windows)\n    + JDK-8244087: 2020-04-24 public suffix list update\n    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest\n      release 1.8.26\n    + JDK-8244164: AArch64: jaotc generates incorrect code for\n      compressed OOPs with non-zero heap base\n    + JDK-8244196: adjust output in os_linux\n    + JDK-8244225: stringop-overflow warning on strncpy call from\n      compile_the_world_in\n    + JDK-8244287: JFR: Methods samples have line number 0\n    + JDK-8244703: 'platform encoding not initialized' exceptions\n      with debugger, JNI\n    + JDK-8244719: CTW: C2 compilation fails with\n      'assert(!VerifyHashTableKeys || _hash_lock == 0) failed:\n      remove node from hash table before modifying it'\n    + JDK-8244729: Shenandoah: remove resolve paths from\n      SBSA::generate_shenandoah_lrb\n    + JDK-8244763: Update --release 8 symbol information after JSR\n      337 MR3\n    + JDK-8244818: Java2D Queue Flusher crash while moving\n      application window to external monitor\n    + JDK-8245151: jarsigner should not raise duplicate warnings on\n      verification\n    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9\n    + JDK-8245714: 'Bad graph detected in build_loop_late' when\n      loads are pinned on loop limit check uncommon branch\n    + JDK-8245801: StressRecompilation triggers assert 'redundunt\n      OSR recompilation detected. memory leak in CodeCache!'\n    + JDK-8245832: JDK build make-static-libs should build all JDK\n      libraries\n    + JDK-8245880: Shenandoah: check class unloading flag early in\n      concurrent code root scan\n    + JDK-8245981: Upgrade to jQuery 3.5.1\n    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801\n    + JDK-8246094: [macos] Sound Recording and playback is not\n      working\n    + JDK-8246153: TestEliminateArrayCopy fails with\n      -XX:+StressReflectiveCode\n    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ\n    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest\n      fails with AssertionError\n    + JDK-8246203: Segmentation fault in verification due to stack\n      overflow with -XX:+VerifyIterativeGVN\n    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves\n    + JDK-8246453: TestClone crashes with 'all collected exceptions\n      must come from the same place'\n    + JDK-8247246: Add explicit ResolvedJavaType.link and expose\n      presence of default methods\n    + JDK-8247350: [aarch64] assert(false) failed: wrong size of\n      mach node\n    + JDK-8247502: PhaseStringOpts crashes while optimising\n      effectively dead code\n    + JDK-8247615: Initialize the bytes left for the heap sampler\n    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV\n      in SBC2Support::pin_and_expand\n    + JDK-8247874: Replacement in VersionProps.java.template not\n      working when --with-vendor-bug-url contains '\u0026'\n    + JDK-8247979: aarch64: missing side effect of killing flags\n      for clearArray_reg_reg\n    + JDK-8248214: Add paddings for TaskQueueSuper to reduce\n      false-sharing cache contention\n    + JDK-8248219: aarch64: missing memory barrier in\n      fast_storefield and fast_accessfield\n    + JDK-8248348: Regression caused by the update to BCEL 6.0\n    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to\n      jtreg 5.1\n    + JDK-8248495: [macos] zerovm is broken due to libffi headers\n      location\n    + JDK-8248851: CMS: Missing memory fences between free chunk\n      check and klass read\n    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on\n      Windows\n    + JDK-8249159: Downport test rework for SSLSocketTemplate from\n      8224650\n    + JDK-8249215: JFrame::setVisible crashed with\n      -Dfile.encoding=UTF-8 on Japanese Windows.\n    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is\n      not highlighted in GTKLookAndFeel\n    + JDK-8249255: Build fails if source code in cygwin home dir\n    + JDK-8249277: TestVerifyIterativeGVN.java is failing with\n      timeout in OpenJDK 11\n    + JDK-8249278: Revert JDK-8226253 which breaks the spec of\n      AccessibleState.SHOWING for JList\n    + JDK-8249560: Shenandoah: Fix racy GC request handling\n    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle\n    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should\n      account for corner cases\n    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when\n      requesting TGS Kerberos tickets\n    + JDK-8250609: C2 crash in IfNode::fold_compares\n    + JDK-8250627: Use -XX:+/-UseContainerSupport for\n      enabling/disabling Java container metrics\n    + JDK-8250755: Better cleanup for\n      jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java\n    + JDK-8250787: Provider.put no longer registering aliases in\n      FIPS env\n    + JDK-8250826: jhsdb does not work with coredump which comes\n      from Substrate VM\n    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's\n      dead count before/after parallel walk\n    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check\n      the bounds\n    + JDK-8251117: Cannot check P11Key size in P11Cipher and\n      P11AEADCipher\n    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java\n      test failure\n    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with\n      I-U\n    + JDK-8251469: Better cleanup for\n      test/jdk/javax/imageio/SetOutput.java\n    + JDK-8251487: Shenandoah: missing detail timing tracking for\n      final mark cleaning phase\n    + JDK-8252120: compiler/oracle/TestCompileCommand.java\n      misspells 'occured'\n    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary\n      compatibility\n    + JDK-8252258: [11u] JDK-8242154 changes the default vendor\n    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after\n      downport of 8234011\n    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)\n      in JDK 11\n    + JDK-8253283: [11u] Test build/translations/\n      /VerifyTranslations.java failing after JDK-8252258\n    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several\n      crashes\n    + Fix regression '8250861: Crash in MinINode::Ideal(PhaseGVN*,\n      bool)' introduced in jdk 11.0.9\n","status":"published","published":"2020-11-05T09:33:03Z","modified":"2026-02-04T03:41:22.752388Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:3191-1","title":"Security update for java-1_8_0-openjdk","description":"This update for java-1_8_0-openjdk fixes the following issues:\n\n- Fix regression '8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)',\n  introduced in October 2020 CPU.\n\n- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,\n  bsc#1174157, and October 2020 CPU, bsc#1177943)\n  * New features\n    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7\n    + PR3796: Allow the number of curves supported to be specified\n  * Security fixes\n    + JDK-8028431, CVE-2020-14579: NullPointerException in\n      DerValue.equals(DerValue)\n    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in\n      sun.security.util.DerInputStream.getUnalignedBitString()\n    + JDK-8230613: Better ASCII conversions\n    + JDK-8231800: Better listing of arrays\n    + JDK-8232014: Expand DTD support\n    + JDK-8233255: Better Swing Buttons\n    + JDK-8233624: Enhance JNI linkage\n    + JDK-8234032: Improve basic calendar services\n    + JDK-8234042: Better factory production of certificates\n    + JDK-8234418: Better parsing with CertificateFactory\n    + JDK-8234836: Improve serialization handling\n    + JDK-8236191: Enhance OID processing\n    + JDK-8236196: Improve string pooling\n    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class\n    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior\n    + JDK-8237592, CVE-2020-14577: Enhance certificate verification\n    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts\n    + JDK-8237995, CVE-2020-14782: Enhance certificate processing\n    + JDK-8238002, CVE-2020-14581: Better matrix operations\n    + JDK-8238804: Enhance key handling process\n    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable\n    + JDK-8238843: Enhanced font handing\n    + JDK-8238920, CVE-2020-14583: Better Buffer support\n    + JDK-8238925: Enhance WAV file playback\n    + JDK-8240119, CVE-2020-14593: Less Affine Transformations\n    + JDK-8240124: Better VM Interning\n    + JDK-8240482: Improved WAV file playback\n    + JDK-8241114, CVE-2020-14792: Better range handling\n    + JDK-8241379: Update JCEKS support\n    + JDK-8241522: Manifest improved jar headers redux\n    + JDK-8242136, CVE-2020-14621: Better XML namespace handling\n    + JDK-8242680, CVE-2020-14796: Improved URI Support\n    + JDK-8242685, CVE-2020-14797: Better Path Validation\n    + JDK-8242695, CVE-2020-14798: Enhanced buffer support\n    + JDK-8243302: Advanced class supports\n    + JDK-8244136, CVE-2020-14803: Improved Buffer supports\n    + JDK-8244479: Further constrain certificates\n    + JDK-8244955: Additional Fix for JDK-8240124\n    + JDK-8245407: Enhance zoning of times\n    + JDK-8245412: Better class definitions\n    + JDK-8245417: Improve certificate chain handling\n    + JDK-8248574: Improve jpeg processing\n    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit\n    + JDK-8253019: Enhanced JPEG decoding\n  * Import of OpenJDK 8 u262 build 01\n    + JDK-4949105: Access Bridge lacks html tags parsing\n    + JDK-8003209: JFR events for network utilization\n    + JDK-8030680: 292 cleanup from default method code assessment\n    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java\n      and some tests failed on windows intermittently\n    + JDK-8041626: Shutdown tracing event\n    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp\n    + JDK-8149338: JVM Crash caused by Marlin renderer not handling\n       NaN coordinates\n    + JDK-8151582: (ch) test java/nio/channels/\n      /AsyncCloseAndInterrupt.java failing due to 'Connection\n      succeeded'\n    + JDK-8165675: Trace event for thread park has incorrect unit\n       for timeout\n    + JDK-8176182: 4 security tests are not run\n    + JDK-8178910: Problemlist sample tests\n    + JDK-8183925: Decouple crash protection from watcher thread\n    + JDK-8191393: Random crashes during cfree+0x1c\n    + JDK-8195817: JFR.stop should require name of recording\n    + JDK-8195818: JFR.start should increase autogenerated name by\n       one\n    + JDK-8195819: Remove recording=x from jcmd JFR.check output\n    + JDK-8199712: Flight Recorder\n    + JDK-8202578: Revisit location for class unload events\n    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on\n      missing events\n    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight\n      Recorder)\n    + JDK-8203346: JFR: Inconsistent signature of\n      jfr_add_string_constant\n    + JDK-8203664: JFR start failure after AppCDS archive created\n      with JFR StartFlightRecording\n    + JDK-8203921: JFR thread sampling is missing fixes from\n      JDK-8194552\n    + JDK-8203929: Limit amount of data for JFR.dump\n    + JDK-8205516: JFR tool\n    + JDK-8207392: [PPC64] Implement JFR profiling\n    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first\n      classloader which calls it\n    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR\n    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()\n    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD\n      1.0.7\n    + JDK-8211239: Build fails without JFR: empty JFR events\n      signatures mismatch\n    + JDK-8212232: Wrong metadata for the configuration of the\n      cutoff for old object sample events\n    + JDK-8213015: Inconsistent settings between JFR.configure and\n      -XX:FlightRecorderOptions\n    + JDK-8213421: Line number information for execution samples\n      always 0\n    + JDK-8213617: JFR should record the PID of the recorded process\n    + JDK-8213734: SAXParser.parse(File, ..) does not close\n      resources when Exception occurs.\n    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered\n      by tests\n    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by\n      test\n    + JDK-8213966: The ZGC JFR events should be marked as\n      experimental\n    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap\n      in debug builds\n    + JDK-8214750: Unnecessary \u003cp\u003e tags in jfr classes\n    + JDK-8214896: JFR Tool left files behind\n    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java\n      fails with UnsatisfiedLinkError\n    + JDK-8214925: JFR tool fails to execute\n    + JDK-8215175: Inconsistencies in JFR event metadata\n    + JDK-8215237: jdk.jfr.Recording javadoc does not compile\n    + JDK-8215284: Reduce noise induced by periodic task\n      getFileSize()\n    + JDK-8215355: Object monitor deadlock with no threads holding\n      the monitor (using jemalloc 5.1)\n    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails\n    + JDK-8215771: The jfr tool should pretty print reference chains\n    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work\n      properly\n    + JDK-8216486: Possibility of integer overflow in\n      JfrThreadSampler::run()\n    + JDK-8216528: test/jdk/java/rmi/transport/\n       /runtimeThreadInheritanceLeak/\n       /RuntimeThreadInheritanceLeak.java failing with Xcomp\n    + JDK-8216559: [JFR] Native libraries not correctly parsed from\n      /proc/self/maps\n    + JDK-8216578: Remove unused/obsolete method in JFR code\n    + JDK-8216995: Clean up JFR command line processing\n    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some\n      systems due to process surviving SIGINT\n    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR\n      TestShutdownEvent\n    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly\n    + JDK-8223147: JFR Backport\n    + JDK-8223689: Add JFR Thread Sampling Support\n    + JDK-8223690: Add JFR BiasedLock Event Support\n    + JDK-8223691: Add JFR G1 Region Type Change Event Support\n    + JDK-8223692: Add JFR G1 Heap Summary Event Support\n    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:\n      invariant\n    + JDK-8224475: JTextPane does not show images in HTML rendering\n    + JDK-8226253: JAWS reports wrong number of radio buttons when\n      buttons are hidden.\n    + JDK-8226779: [TESTBUG] Test JFR API from Java agent\n    + JDK-8226892: ActionListeners on JRadioButtons don't get\n      notified when selection is changed with arrow keys\n    + JDK-8227011: Starting a JFR recording in response to JVMTI\n      VMInit and / or Java agent premain corrupts memory\n    + JDK-8227605: Kitchensink fails 'assert((((klass)-\u003etrace_id()\n      \u0026 (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))\n      failed: invariant'\n    + JDK-8229366: JFR backport allows unchecked writing to memory\n    + JDK-8229401: Fix JFR code cache test failures\n    + JDK-8229708: JFR backport code does not initialize\n    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator\n    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on\n      Windows\n    + JDK-8230707: JFR related tests are failing\n    + JDK-8230782: Robot.createScreenCapture() fails if\n      'awt.robot.gtk' is set to false\n    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on\n       unix misses ReleaseStringUTFChars in early return\n    + JDK-8230947: TestLookForUntestedEvents.java is failing after\n      JDK-8230707\n    + JDK-8231995: two jtreg tests failed after 8229366 is fixed\n    + JDK-8233623: Add classpath exception to copyright in\n      EventHandlerProxyCreator.java file\n    + JDK-8236002: CSR for JFR backport suggests not leaving out\n      the package-info\n    + JDK-8236008: Some backup files were accidentally left in the\n      hotspot tree\n    + JDK-8236074: Missed package-info\n    + JDK-8236174: Should update javadoc since tags\n    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport\n    + JDK-8238452: Keytool generates wrong expiration date if\n      validity is set to 2050/01/01\n    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when\n      there are external FIPS modules in the NSSDB\n    + JDK-8238589: Necessary code cleanup in JFR for JDK8u\n    + JDK-8238590: Enable JFR by default during compilation in 8u\n    + JDK-8239055: Wrong implementation of VMState.hasListener\n    + JDK-8239476: JDK-8238589 broke windows build by moving\n      OrderedPair\n    + JDK-8239479: minimal1 and zero builds are failing\n    + JDK-8239867: correct over use of INCLUDE_JFR macro\n    + JDK-8240375: Disable JFR by default for July 2020 release\n    + JDK-8241444: Metaspace::_class_vsm not initialized if\n      compressed class pointers are disabled\n    + JDK-8241902: AIX Build broken after integration of\n      JDK-8223147 (JFR Backport)\n    + JDK-8242788: Non-PCH build is broken after JDK-8191393\n  * Import of OpenJDK 8 u262 build 02\n    + JDK-8130737: AffineTransformOp can't handle child raster with\n      non-zero x-offset\n    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation\n      in java/awt/image/Raster/TestChildRasterOp.java\n    + JDK-8230926: [macosx] Two apostrophes are entered instead of\n      one with 'U.S. International - PC' layout\n    + JDK-8240576: JVM crashes after transformation in C2\n      IdealLoopTree::merge_many_backedges\n    + JDK-8242883: Incomplete backport of JDK-8078268: backport\n      test part\n  * Import of OpenJDK 8 u262 build 03\n    + JDK-8037866: Replace the Fun class in tests with lambdas\n    + JDK-8146612: C2: Precedence edges specification violated\n    + JDK-8150986: serviceability/sa/jmap-hprof/\n       /JMapHProfLargeHeapTest.java failing because expects HPROF\n      JAVA PROFILE 1.0.1 file format\n    + JDK-8229888: (zipfs) Updating an existing zip file does not\n      preserve original permissions\n    + JDK-8230597: Update GIFlib library to the 5.2.1\n    + JDK-8230769: BufImg_SetupICM add\n      ReleasePrimitiveArrayCritical call in early return\n    + JDK-8233880, PR3798: Support compilers with multi-digit major\n      version numbers\n    + JDK-8239852: java/util/concurrent tests fail with\n      -XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:\n      verification should have failed\n    + JDK-8241638: launcher time metrics always report 1 on Linux\n      when _JAVA_LAUNCHER_DEBUG set\n    + JDK-8243059: Build fails when --with-vendor-name contains a\n      comma\n    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes\n    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32\n    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()\n      returns wrong result\n  * Import of OpenJDK 8 u262 build 04\n    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't\n      throw NPE if timeout is less than, or equal to zero when unit\n      == null\n    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering\n    + JDK-8171934:\n      ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()\n      does not recognize OpenJDK's HotSpot VM\n    + JDK-8196969: JTreg Failure:\n      serviceability/sa/ClhsdbJstack.java causes NPE\n    + JDK-8243539: Copyright info (Year) should be updated for fix\n      of 8241638\n    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value\n  * Import of OpenJDK 8 u262 build 05\n    + JDK-7147060: com/sun/org/apache/xml/internal/security/\n      /transforms/ClassLoaderTest.java doesn't run in agentvm mode\n    + JDK-8178374: Problematic ByteBuffer handling in\n      CipherSpi.bufferCrypt method\n    + JDK-8181841: A TSA server returns timestamp with precision\n      higher than milliseconds\n    + JDK-8227269: Slow class loading when running with JDWP\n    + JDK-8229899: Make java.io.File.isInvalid() less racy\n    + JDK-8236996: Incorrect Roboto font rendering on Windows with\n      subpixel antialiasing\n    + JDK-8241750: x86_32 build failure after JDK-8227269\n    + JDK-8244407: JVM crashes after transformation in C2\n      IdealLoopTree::split_fall_in\n    + JDK-8244843: JapanEraNameCompatTest fails\n  * Import of OpenJDK 8 u262 build 06\n    + JDK-8246223: Windows build fails after JDK-8227269\n  * Import of OpenJDK 8 u262 build 07\n    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and\n      Jfr:on_vm_start() start-up order for correct option parsing\n    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a\n    + JDK-8245167: Top package in method profiling shows null in JMC\n    + JDK-8246703: [TESTBUG] Add test for JDK-8233197\n  * Import of OpenJDK 8 u262 build 08\n    + JDK-8220293: Deadlock in JFR string pool\n    + JDK-8225068: Remove DocuSign root certificate that is\n      expiring in May 2020\n    + JDK-8225069: Remove Comodo root certificate that is expiring\n      in May 2020\n  * Import of OpenJDK 8 u262 build 09\n    + JDK-8248399: Build installs jfr binary when JFR is disabled\n  * Import of OpenJDK 8 u262 build 10\n    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'\n      installed in wrong package\n  * Import of OpenJDK 8 u265 build 01\n    + JDK-8249677: Regression in 8u after JDK-8237117: Better\n      ForkJoinPool behavior\n    + JDK-8250546: Expect changed behaviour reported in JDK-8249846\n  * Import of OpenJDK 8 u272 build 01\n    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY\n      test/compiler/7177917/Test7177917.java\n    + JDK-8035493: JVMTI PopFrame capability must instruct\n      compilers not to prune locals\n    + JDK-8036088: Replace strtok() with its safe equivalent\n      strtok_s() in DefaultProxySelector.c\n    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/\n      /BadSerializationTest/BadSerializationTest.java fails\n    + JDK-8075774: Small readability and performance improvements\n      for zipfs\n    + JDK-8132206: move ScanTest.java into OpenJDK\n    + JDK-8132376: Add @requires os.family to the client tests with\n      access to internal OS-specific API\n    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java\n    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/\n      /appletviewer/IOExceptionIfEncodedURLTest/\n      /IOExceptionIfEncodedURLTest.sh\n    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/\n      /MTGraphicsAccessTest.java hangs on Win. 8\n    + JDK-8151788: NullPointerException from ntlm.Client.type3\n    + JDK-8151834: Test SmallPrimeExponentP.java times out\n      intermittently\n    + JDK-8153430: jdk regression test MletParserLocaleTest,\n      ParserInfiniteLoopTest reduce default timeout\n    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary\n      public\n    + JDK-8156169: Some sound tests rarely hangs because of\n      incorrect synchronization\n    + JDK-8165936: Potential Heap buffer overflow when seaching\n      timezone info files\n    + JDK-8166148: Fix for JDK-8165936 broke solaris builds\n    + JDK-8167300: Scheduling failures during gcm should be fatal\n    + JDK-8167615: Opensource unit/regression tests for JavaSound\n    + JDK-8172012: [TEST_BUG] delays needed in\n      javax/swing/JTree/4633594/bug4633594.java\n    + JDK-8177628: Opensource unit/regression tests for ImageIO\n    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java\n    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/\n      /AppletContextTest/BadPluginConfigurationTest.sh\n    + JDK-8193137: Nashorn crashes when given an empty script file\n    + JDK-8194298: Add support for per Socket configuration of TCP\n      keepalive\n    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java\n      throws error\n    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java\n      fails\n    + JDK-8210147: adjust some WSAGetLastError usages in windows\n      network coding\n    + JDK-8211714: Need to update vm_version.cpp to recognise\n      VS2017 minor versions\n    + JDK-8214862: assert(proj != __null) at compile.cpp:3251\n    + JDK-8217606: LdapContext#reconnect always opens a new\n      connection\n    + JDK-8217647: JFR: recordings on 32-bit systems unreadable\n    + JDK-8226697: Several tests which need the @key headful\n      keyword are missing it.\n    + JDK-8229378: jdwp library loader in linker_md.c quietly\n      truncates on buffer overflow\n    + JDK-8230303: JDB hangs when running monitor command\n    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)\n      return NULL if n is not in the CG\n    + JDK-8234617: C1: Incorrect result of field load due to\n      missing narrowing conversion\n    + JDK-8235243: handle VS2017 15.9 and VS2019 in\n      abstract_vm_version\n    + JDK-8235325: build failure on Linux after 8235243\n    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink\n    + JDK-8237951: CTW: C2 compilation fails with 'malformed\n      control flow'\n    + JDK-8238225: Issues reported after replacing symlink at\n      Contents/MacOS/libjli.dylib with binary\n    + JDK-8239385: KerberosTicket client name refers wrongly to\n      sAMAccountName in AD\n    + JDK-8239819: XToolkit: Misread of screen information memory\n    + JDK-8240295: hs_err elapsed time in seconds is not accurate\n      enough\n    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system\n      property with a security one\n    + JDK-8242498: Invalid 'sun.awt.TimedWindowEvent' object leads\n      to JVM crash\n    + JDK-8243489: Thread CPU Load event may contain wrong data for\n      CPU time under certain conditions\n    + JDK-8244818: Java2D Queue Flusher crash while moving\n      application window to external monitor\n    + JDK-8246310: Clean commented-out code about ModuleEntry\n      and PackageEntry in JFR\n    + JDK-8246384: Enable JFR by default on supported architectures\n      for October 2020 release\n    + JDK-8248643: Remove extra leading space in JDK-8240295 8u\n      backport\n    + JDK-8249610: Make\n      sun.security.krb5.Config.getBooleanObject(String... keys)\n      method public\n  * Import of OpenJDK 8 u272 build 02\n    + JDK-8023697: failed class resolution reports different class\n      name in detail message for the first and subsequent times\n    + JDK-8025886: replace [[ and == bash extensions in regtest\n    + JDK-8046274: Removing dependency on jakarta-regexp\n    + JDK-8048933: -XX:+TraceExceptions output should include the\n      message\n    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/\n      /fileaccess/FontFile.java fails\n    + JDK-8148854: Class names 'SomeClass' and 'LSomeClass;'\n      treated by JVM as an equivalent\n    + JDK-8154313: Generated javadoc scattered all over the place\n    + JDK-8163251: Hard coded loop limit prevents reading of smart\n      card data greater than 8k\n    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java\n      fails with compiler.whitebox.SimpleTestCaseHelper(int) must be\n      compiled\n    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/\n      /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java\n    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt\n      FocusTransitionTest test.\n    + JDK-8201633: Problems with AES-GCM native acceleration\n    + JDK-8211049: Second parameter of 'initialize' method is not\n          used\n    + JDK-8219566: JFR did not collect call stacks when\n      MaxJavaStackTraceDepth is set to zero\n    + JDK-8220165: Encryption using GCM results in\n      RuntimeException- input length out of bound\n    + JDK-8220555: JFR tool shows potentially misleading message\n      when it cannot access a file\n    + JDK-8224217: RecordingInfo should use textual representation\n      of path\n    + JDK-8231779: crash\n      HeapWord*ParallelScavengeHeap::failed_mem_allocate\n    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c\n      'multiple definition' link errors with GCC10\n    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/\n      /SctpNet.c 'multiple definition' link errors with GCC10\n    + JDK-8238388, PR3798: libj2gss/NativeFunc.o 'multiple\n      definition' link errors with GCC10\n    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null\n      params from byte array\n    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/\n      /plugins/shared/CanWriteSequence.java\n  * Import of OpenJDK 8 u272 build 03\n    + JDK-6574989: TEST_BUG:\n      javax/sound/sampled/Clip/bug5070081.java fails sometimes\n    + JDK-8148754: C2 loop unrolling fails due to unexpected graph\n      shape\n    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests\n      fail with error : revokeall.exe: Permission denied\n    + JDK-8203357: Container Metrics\n    + JDK-8209113: Use WeakReference for lastFontStrike for created\n      Fonts\n    + JDK-8216283: Allow shorter method sampling interval than 10 ms\n    + JDK-8221569: JFR tool produces incorrect output when both\n      --categories and --events are specified\n    + JDK-8233097: Fontmetrics for large Fonts has zero width\n    + JDK-8248851: CMS: Missing memory fences between free chunk\n      check and klass read\n    + JDK-8250875: Incorrect parameter type for update_number in\n      JDK_Version::jdk_update\n  * Import of OpenJDK 8 u272 build 04\n    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws\n      IllegalArgumentException for flags of type double\n    + JDK-8177334: Update xmldsig implementation to Apache\n      Santuario 2.1.1\n    + JDK-8217878: ENVELOPING XML signature no longer works in JDK\n      11\n    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR\n      exception on OpenJDK 11, works 8/9/10\n    + JDK-8243138: Enhance BaseLdapServer to support starttls\n      extended request\n  * Import of OpenJDK 8 u272 build 05\n    + JDK-8026236: Add PrimeTest for BigInteger\n    + JDK-8057003: Large reference arrays cause extremely long\n      synchronization times\n    + JDK-8060721: Test runtime/SharedArchiveFile/\n      /LimitSharedSizes.java fails in jdk 9 fcs new\n      platforms/compiler\n    + JDK-8152077: (cal) Calendar.roll does not always roll the\n      hours during daylight savings\n    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed\n    + JDK-8211163: UNIX version of Java_java_io_Console_echo does\n      not return a clean boolean\n    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in\n      docker container only works with debug JVMs\n    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo\n    + JDK-8236645: JDK 8u231 introduces a regression with\n      incompatible handling of XML messages\n    + JDK-8240676: Meet not symmetric failure when running lucene\n      on jdk8\n    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA\n      program\n    + JDK-8249158: THREAD_START and THREAD_END event posted in\n      primordial phase\n    + JDK-8250627: Use -XX:+/-UseContainerSupport for\n      enabling/disabling Java container metrics\n    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and\n      Solaris builds\n    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:\n      AgeTableTracer::is_tenuring_distribution_event_enabled\n  * Import of OpenJDK 8 u272 build 06\n    + JDK-8064319: Need to enable -XX:+TraceExceptions in release\n      builds\n    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11\n      v2.40 support\n    + JDK-8160768: Add capability to custom resolve host/domain\n      names within the default JNDI LDAP provider\n    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()\n      not working\n    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface\n      license\n    + JDK-8184762: ZapStackSegments should use optimized memset\n    + JDK-8193234: When using -Xcheck:jni an internally allocated\n      buffer can leak\n    + JDK-8219919: RuntimeStub name lost with\n      PrintFrameConverterAssembly\n    + JDK-8220313: [TESTBUG] Update base image for Docker testing\n      to OL 7.6\n    + JDK-8222079: Don't use memset to initialize fields decode_env\n      constructor in disassembler.cpp\n    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update\n      SunPKCS11 provider with PKCS11 v2.40 support)\n    + JDK-8226575: OperatingSystemMXBean should be made container\n      aware\n    + JDK-8226809: Circular reference in printed stack trace is not\n      correctly indented \u0026 ambiguous\n    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM\n    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property\n      name\n    + JDK-8238898, PR3801: Missing hash characters for header on\n      license file\n    + JDK-8243320: Add SSL root certificates to Oracle Root CA\n      program\n    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest\n      release 1.8.26\n    + JDK-8245467: Remove 8u TLSv1.2 implementation files\n    + JDK-8245469: Remove DTLS protocol implementation\n    + JDK-8245470: Fix JDK8 compatibility issues\n    + JDK-8245471: Revert JDK-8148188\n    + JDK-8245472: Backport JDK-8038893 to JDK8\n    + JDK-8245473: OCSP stapling support\n    + JDK-8245474: Add TLS_KRB5 cipher suites support according to\n      RFC-2712\n    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello\n      message by default\n    + JDK-8245477: Adjust TLS tests location\n    + JDK-8245653: Remove 8u TLS tests\n    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7\n    + JDK-8251117: Cannot check P11Key size in P11Cipher and\n      P11AEADCipher\n    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is\n      set to either true or false\n    + JDK-8251341: Minimal Java specification change\n    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u\n  * Import of OpenJDK 8 u272 build 07\n    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ\n  * Import of OpenJDK 8 u272 build 08\n    + JDK-8062947: Fix exception message to correctly represent\n      LDAP connection failure\n    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed\n      due to timeout on DeadServerNoTimeoutTest is incorrect\n    + JDK-8252573: 8u: Windows build failed after 8222079 backport\n  * Import of OpenJDK 8 u272 build 09\n    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :\n      Compilation failed\n  * Import of OpenJDK 8 u272 build 10\n    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed\n      by the fix for JDK-8249158\n    + JDK-8254937: Revert JDK-8148854 for 8u272\n  * Backports\n    + JDK-8038723, PR3806: Openup some PrinterJob tests\n    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when\n      JTable contains certain string\n    + JDK-8058779, PR3805: Faster implementation of\n      String.replace(CharSequence, CharSequence)\n    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several\n      client tests unaffected by the automated bulk update\n    + JDK-8144015, PR3806: [PIT] failures of text layout font tests\n    + JDK-8144023, PR3806: [PIT] failure of text measurements in\n      javax/swing/text/html/parser/Parser/6836089/bug6836089.java\n    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in\n      closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java\n    + JDK-8145542, PR3806: The case failed automatically and thrown\n      java.lang.ArrayIndexOutOfBoundsException exception\n    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when\n      displaying Devanagari text in JEditorPane\n    + JDK-8152358, PR3800: code and comment cleanups found during\n      the hunt for 8077392\n    + JDK-8152545, PR3804: Use preprocessor instead of compiling a\n      program to generate native nio constants\n    + JDK-8152680, PR3806: Regression in\n      GlyphVector.getGlyphCharIndex behaviour\n    + JDK-8158924, PR3806: Incorrect i18n text document layout\n    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for\n      javax/swing/text/GlyphPainter2/6427244/bug6427244.java\n    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/\n      /GetGlyphCharIndexTest.java does not compile\n    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/\n      /GlyphPainter2/6427244/bug6427244.java - compilation failed\n    + JDK-8191512, PR3806: T2K font rasterizer code removal\n    + JDK-8191522, PR3806: Remove Bigelow\u0026Holmes Lucida fonts from\n      JDK sources\n    + JDK-8236512, PR3801: PKCS11 Connection closed after\n      Cipher.doFinal and NoPadding\n    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to\n      tzdata2020b\n  * Bug fixes\n    + PR3798: Fix format-overflow error on GCC 10, caused by\n      passing NULL to a '%s' directive\n    + PR3795: ECDSAUtils for XML digital signatures should support\n      the same curve set as the rest of the JDK\n    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add\n      TLSv1.3 implementation classes from 11.0.7\n    + PR3808: IcedTea does not install the JFR *.jfc files\n    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has\n      fixed its use with Shenandoah\n    + PR3811: Don't attempt to install JFR files when JFR is\n      disabled\n  * Shenandoah\n    + [backport] 8221435: Shenandoah should not mark through weak\n      roots\n    + [backport] 8221629: Shenandoah: Cleanup class unloading logic\n    + [backport] 8222992: Shenandoah: Pre-evacuate all roots\n    + [backport] 8223215: Shenandoah: Support verifying subset of\n      roots\n    + [backport] 8223774: Shenandoah: Refactor\n      ShenandoahRootProcessor and family\n    + [backport] 8224210: Shenandoah: Refactor\n      ShenandoahRootScanner to support scanning CSet codecache roots\n    + [backport] 8224508: Shenandoah: Need to update thread roots\n      in final mark for piggyback ref update cycle\n    + [backport] 8224579: ResourceMark not declared in\n      shenandoahRootProcessor.inline.hpp with\n      --disable-precompiled-headers\n    + [backport] 8224679: Shenandoah: Make\n      ShenandoahParallelCodeCacheIterator noncopyable\n    + [backport] 8224751: Shenandoah: Shenandoah Verifier should\n      select proper roots according to current GC cycle\n    + [backport] 8225014: Separate ShenandoahRootScanner method for\n      object_iterate\n    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't\n      work for Shenandoah\n    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to\n      ensure roots to-space invariant\n    + [backport] 8225590: Shenandoah: Refactor\n      ShenandoahClassLoaderDataRoots API\n    + [backport] 8226413: Shenandoah: Separate root scanner for\n      SH::object_iterate()\n    + [backport] 8230853: Shenandoah: replace leftover\n      assert(is_in(...)) with rich asserts\n    + [backport] 8231198: Shenandoah: heap walking should visit all\n      roots most of the time\n    + [backport] 8231244: Shenandoah: all-roots heap walking misses\n      some weak roots\n    + [backport] 8237632: Shenandoah: accept NULL fwdptr to\n      cooperate with JVMTI and JFR\n    + [backport] 8239786: Shenandoah: print per-cycle statistics\n    + [backport] 8239926: Shenandoah: Shenandoah needs to mark\n      nmethod's metadata\n    + [backport] 8240671: Shenandoah: refactor\n      ShenandoahPhaseTimings\n    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils\n    + [backport] 8240750: Shenandoah: remove leftover files and\n      mentions of ShenandoahAllocTracker\n    + [backport] 8240868: Shenandoah: remove CM-with-UR\n      piggybacking cycles\n    + [backport] 8240872: Shenandoah: Avoid updating new regions\n      from start of evacuation\n    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers\n    + [backport] 8240915: Shenandoah: Remove unused fields in init\n      mark tasks\n    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects\n      paths after JDK-8240868\n    + [backport] 8241007: Shenandoah: remove\n      ShenandoahCriticalControlThreadPriority support\n    + [backport] 8241062: Shenandoah: rich asserts trigger 'empty\n      statement' inspection\n    + [backport] 8241081: Shenandoah: Do not modify\n      update-watermark concurrently\n    + [backport] 8241093: Shenandoah: editorial changes in flag\n      descriptions\n    + [backport] 8241139: Shenandoah: distribute mark-compact work\n      exactly to minimize fragmentation\n    + [backport] 8241142: Shenandoah: should not use parallel\n      reference processing with single GC thread\n    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul\n    + [backport] 8241435: Shenandoah: avoid disabling pacing with\n      'aggressive'\n    + [backport] 8241520: Shenandoah: simplify region sequence\n      numbers handling\n    + [backport] 8241534: Shenandoah: region status should include\n      update watermark\n    + [backport] 8241574: Shenandoah: remove\n      ShenandoahAssertToSpaceClosure\n    + [backport] 8241583: Shenandoah: turn heap lock asserts into\n      macros\n    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not\n      derive from ContiguousSpace\n    + [backport] 8241673: Shenandoah: refactor anti-false-sharing\n      padding\n    + [backport] 8241675: Shenandoah: assert(n-\u003eoutcnt() \u003e 0) at\n      shenandoahSupport.cpp:2858 with\n      java/util/Collections/FindSubList.java\n    + [backport] 8241692: Shenandoah: remove\n      ShenandoahHeapRegion::_reserved\n    + [backport] 8241700: Shenandoah: Fold\n      ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier\n    + [backport] 8241740: Shenandoah: remove\n      ShenandoahHeapRegion::_heap\n    + [backport] 8241743: Shenandoah: refactor and inline\n      ShenandoahHeap::heap()\n    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS\n      methods\n    + [backport] 8241838: Shenandoah: no need to trash cset during\n      final mark\n    + [backport] 8241841: Shenandoah: ditch one of allocation type\n      counters in ShenandoahHeapRegion\n    + [backport] 8241842: Shenandoah: inline\n      ShenandoahHeapRegion::region_number\n    + [backport] 8241844: Shenandoah: rename\n      ShenandoahHeapRegion::region_number\n    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions\n      to cache lines\n    + [backport] 8241926: Shenandoah: only print heap changes for\n      operations that directly affect it\n    + [backport] 8241983: Shenandoah: simplify FreeSet logging\n    + [backport] 8241985: Shenandoah: simplify collectable garbage\n      logging\n    + [backport] 8242040: Shenandoah: print allocation failure type\n    + [backport] 8242041: Shenandoah: adaptive heuristics should\n      account evac reserve in free target\n    + [backport] 8242042: Shenandoah: tune down\n      ShenandoahGarbageThreshold\n    + [backport] 8242054: Shenandoah: New incremental-update mode\n    + [backport] 8242075: Shenandoah: rename\n      ShenandoahHeapRegionSize flag\n    + [backport] 8242082: Shenandoah: Purge Traversal mode\n    + [backport] 8242083: Shenandoah: split 'Prepare Evacuation'\n      tracking into cset/freeset counters\n    + [backport] 8242089: Shenandoah: per-worker stats should be\n      summed up, not averaged\n    + [backport] 8242101: Shenandoah: coalesce and parallelise heap\n      region walks during the pauses\n    + [backport] 8242114: Shenandoah: remove\n      ShenandoahHeapRegion::reset_alloc_metadata_to_shared\n    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier\n      dispatching\n    + [backport] 8242211: Shenandoah: remove\n      ShenandoahHeuristics::RegionData::_seqnum_last_alloc\n    + [backport] 8242212: Shenandoah: initialize\n      ShenandoahHeuristics::_region_data eagerly\n    + [backport] 8242213: Shenandoah: remove\n      ShenandoahHeuristics::_bytes_in_cset\n    + [backport] 8242217: Shenandoah: Enable GC mode to be\n      diagnostic/experimental and have a name\n    + [backport] 8242227: Shenandoah: transit regions to cset state\n      when adding to collection set\n    + [backport] 8242228: Shenandoah: remove unused\n      ShenandoahCollectionSet methods\n    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion\n      liveness-related methods\n    + [backport] 8242267: Shenandoah: regions space needs to be\n      aligned by os::vm_allocation_granularity()\n    + [backport] 8242271: Shenandoah: add test to verify GC mode\n      unlock\n    + [backport] 8242273: Shenandoah: accept either SATB or IU\n      barriers, but not both\n    + [backport] 8242301: Shenandoah: Inline LRB runtime call\n    + [backport] 8242316: Shenandoah: Turn NULL-check into assert\n      in SATB slow-path entry\n    + [backport] 8242353: Shenandoah: micro-optimize region\n      liveness handling\n    + [backport] 8242365: Shenandoah: use uint16_t instead of\n      jushort for liveness cache\n    + [backport] 8242375: Shenandoah: Remove\n      ShenandoahHeuristic::record_gc_start/end methods\n    + [backport] 8242641: Shenandoah: clear live data and update\n      TAMS optimistically\n    + [backport] 8243238: Shenandoah: explicit GC request should\n      wait for a complete GC cycle\n    + [backport] 8243301: Shenandoah: ditch\n      ShenandoahAllowMixedAllocs\n    + [backport] 8243307: Shenandoah: remove\n      ShCollectionSet::live_data\n    + [backport] 8243395: Shenandoah: demote guarantee in\n      ShenandoahPhaseTimings::record_workers_end\n    + [backport] 8243463: Shenandoah: ditch total_pause counters\n    + [backport] 8243464: Shenandoah: print statistic counters in\n      time order\n    + [backport] 8243465: Shenandoah: ditch unused pause_other,\n      conc_other counters\n    + [backport] 8243487: Shenandoah: make _num_phases illegal\n      phase type\n    + [backport] 8243494: Shenandoah: set counters once per cycle\n    + [backport] 8243573: Shenandoah: rename GCParPhases and\n      related code\n    + [backport] 8243848: Shenandoah: Windows build fails after\n      JDK-8239786\n    + [backport] 8244180: Shenandoah: carry Phase to\n      ShWorkerTimingsTracker explicitly\n    + [backport] 8244200: Shenandoah: build breakages after\n      JDK-8241743\n    + [backport] 8244226: Shenandoah: per-cycle statistics contain\n      worker data from previous cycles\n    + [backport] 8244326: Shenandoah: global statistics should not\n      accept bogus samples\n    + [backport] 8244509: Shenandoah: refactor\n      ShenandoahBarrierC2Support::test_* methods\n    + [backport] 8244551: Shenandoah: Fix racy update of\n      update_watermark\n    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state\n      takes loop for wrong control\n    + [backport] 8244730: Shenandoah: gc/shenandoah/options/\n      /TestHeuristicsUnlock.java should only verify the heuristics\n    + [backport] 8244732: Shenandoah: move heuristics code to\n      gc/shenandoah/heuristics\n    + [backport] 8244737: Shenandoah: move mode code to\n      gc/shenandoah/mode\n    + [backport] 8244739: Shenandoah: break superclass dependency\n      on ShenandoahNormalMode\n    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode\n      to ShenandoahSATBMode\n    + [backport] 8245461: Shenandoah: refine mode name()-s\n    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings\n      constructor arguments\n    + [backport] 8245464: Shenandoah: allocate collection set\n      bitmap at lower addresses\n    + [backport] 8245465: Shenandoah: test_in_cset can use more\n      efficient encoding\n    + [backport] 8245726: Shenandoah: lift/cleanup\n      ShenandoahHeuristics names and properties\n    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch\n    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not\n      disable heap resizing or uncommits\n    + [backport] 8245773: Shenandoah: Windows assertion failure\n      after JDK-8245464\n    + [backport] 8245812: Shenandoah: compute root phase parallelism\n    + [backport] 8245814: Shenandoah: reconsider format specifiers\n      for stats\n    + [backport] 8245825: Shenandoah: Remove diagnostic flag\n      ShenandoahConcurrentScanCodeRoots\n    + [backport] 8246162: Shenandoah: full GC does not mark code\n      roots when class unloading is off\n    + [backport] 8247310: Shenandoah: pacer should not affect\n      interrupt status\n    + [backport] 8247358: Shenandoah: reconsider free budget slice\n      for marking\n    + [backport] 8247367: Shenandoah: pacer should wait on lock\n      instead of exponential backoff\n    + [backport] 8247474: Shenandoah: Windows build warning after\n      JDK-8247310\n    + [backport] 8247560: Shenandoah: heap iteration holds root\n      locks all the time\n    + [backport] 8247593: Shenandoah: should not block pacing\n      reporters\n    + [backport] 8247751: Shenandoah: options tests should run with\n      smaller heaps\n    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter\n    + [backport] 8247757: Shenandoah: split heavy tests by\n      heuristics to improve parallelism\n    + [backport] 8247860: Shenandoah: add update watermark line in\n      rich assert failure message\n    + [backport] 8248041: Shenandoah: pre-Full GC root updates may\n      miss some roots\n    + [backport] 8248652: Shenandoah: SATB buffer handling may\n      assume no forwarded objects\n    + [backport] 8249560: Shenandoah: Fix racy GC request handling\n    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats\n    + [backport] 8249801: Shenandoah: Clear soft-refs on requested\n      GC cycle\n    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests\n      should account for corner cases\n    + Fix slowdebug build after JDK-8230853 backport\n    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for\n      x86_32 and JFR\n    + JDK-8252366: Shenandoah: revert/cleanup changes in\n      graphKit.cpp\n    + Shenandoah: add JFR roots to root processor after JFR\n      integration\n    + Shenandoah: add root statistics for string dedup table/queues\n    + Shenandoah: enable low-frequency STW class unloading\n    + Shenandoah: fix build failures after JDK-8244737 backport\n    + Shenandoah: Fix build failure with +JFR -PCH\n    + Shenandoah: fix forceful pacer claim\n    + Shenandoah: fix formats in\n      ShenandoahStringSymbolTableUnlinkTask\n    + Shenandoah: fix runtime linking failure due to non-compiled\n      shenandoahBarrierSetC1\n    + Shenandoah: hook statistics printing to PrintGCDetails, not\n      PrintGC\n    + Shenandoah: JNI weak roots are always cleared before Full GC\n      mark\n    + Shenandoah: missing SystemDictionary roots in\n      ShenandoahHeapIterationRootScanner\n    + Shenandoah: move barrier sets to their proper locations\n    + Shenandoah: move parallelCleaning.* to shenandoah/\n    + Shenandoah: pacer should use proper Atomics for intptr_t\n    + Shenandoah: properly deallocates class loader metadata\n    + Shenandoah: specialize String Table scans for better pause\n      performance\n    + Shenandoah: Zero build fails after recent Atomic cleanup in\n      Pacer\n  * AArch64 port\n    + JDK-8161072, PR3797: AArch64: jtreg\n      compiler/uncommontrap/TestDeoptOOM failure\n    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java\n      generates guarantee failure in C1\n    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from\n      watcher thread\n    + JDK-8199712, PR3797: [AArch64] Flight Recorder\n    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp\n      in frame:safe_for_sender\n    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall\n      fails with SIGILL on aarch64\n    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command\n    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java\n      fails on AArch64\n    + JDK-8216989, PR3797:\n      CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()\n      does not check for zero length on AARCH64\n    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking\n      optimisation not triggered\n    + JDK-8221658, PR3797: aarch64: add necessary predicate for\n      ubfx patterns\n    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a\n      BufferBlob\n    + JDK-8246482, PR3797: Build failures with +JFR -PCH\n    + JDK-8247979, PR3797: aarch64: missing side effect of killing\n      flags for clearArray_reg_reg\n    + JDK-8248219, PR3797: aarch64: missing memory barrier in\n      fast_storefield and fast_accessfield\n\n- Ignore whitespaces after the header or footer in PEM X.509 cert\n  (bsc#1171352)\n","status":"published","published":"2020-11-05T16:40:00Z","modified":"2026-02-04T04:24:54.380333Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:3310-1","title":"Security update for java-1_7_0-openjdk","description":"This update for java-1_7_0-openjdk fixes the following issues:\n\n- Update to 2.6.24 - OpenJDK 7u281 (October 2020 CPU, bsc#1177943)\n  * Security fixes\n    + JDK-8233624: Enhance JNI linkage\n    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class\n    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts\n    + JDK-8237995, CVE-2020-14782: Enhance certificate processing\n    + JDK-8240124: Better VM Interning\n    + JDK-8241114, CVE-2020-14792: Better range handling\n    + JDK-8242680, CVE-2020-14796: Improved URI Support\n    + JDK-8242685, CVE-2020-14797: Better Path Validation\n    + JDK-8242695, CVE-2020-14798: Enhanced buffer support\n    + JDK-8243302: Advanced class supports\n    + JDK-8244136, CVE-2020-14803: Improved Buffer supports\n    + JDK-8244479: Further constrain certificates\n    + JDK-8244955: Additional Fix for JDK-8240124\n    + JDK-8245407: Enhance zoning of times\n    + JDK-8245412: Better class definitions\n    + JDK-8245417: Improve certificate chain handling\n    + JDK-8248574: Improve jpeg processing\n    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit\n    + JDK-8253019: Enhanced JPEG decoding\n  * Import of OpenJDK 7 u281 build 1\n    + JDK-8145096: Undefined behaviour in HotSpot\n    + JDK-8215265: C2: range check elimination may allow illegal\n      out of bound access\n  * Backports\n    + JDK-8250861, PR3812: Crash in MinINode::Ideal(PhaseGVN*, bool)\n","status":"published","published":"2020-11-12T15:04:09Z","modified":"2026-02-04T04:40:17.357025Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:3359-1","title":"Security update for java-11-openjdk","description":"This update for java-11-openjdk fixes the following issues:\n\n- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,\n  bsc#1177943)\n  * New features\n    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector\n  * Security fixes\n    + JDK-8233624: Enhance JNI linkage\n    + JDK-8236196: Improve string pooling\n    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class\n    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts\n    + JDK-8237995, CVE-2020-14782: Enhance certificate processing\n    + JDK-8240124: Better VM Interning\n    + JDK-8241114, CVE-2020-14792: Better range handling\n    + JDK-8242680, CVE-2020-14796: Improved URI Support\n    + JDK-8242685, CVE-2020-14797: Better Path Validation\n    + JDK-8242695, CVE-2020-14798: Enhanced buffer support\n    + JDK-8243302: Advanced class supports\n    + JDK-8244136, CVE-2020-14803: Improved Buffer supports\n    + JDK-8244479: Further constrain certificates\n    + JDK-8244955: Additional Fix for JDK-8240124\n    + JDK-8245407: Enhance zoning of times\n    + JDK-8245412: Better class definitions\n    + JDK-8245417: Improve certificate chain handling\n    + JDK-8248574: Improve jpeg processing\n    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit\n    + JDK-8253019: Enhanced JPEG decoding\n  * Other changes\n    + JDK-6532025: GIF reader throws misleading exception with\n      truncated images\n    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/\n      /PDialogTest.java needs update by removing an infinite loop\n    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/\n      /Test8017492.java fails\n    + JDK-8062947: Fix exception message to correctly represent\n      LDAP connection failure\n    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed\n    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/\n      /CloseServerSocket.java fails intermittently with Address\n      already in use\n    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed\n      due to timeout on DeadServerNoTimeoutTest is incorrect\n    + JDK-8160768: Add capability to custom resolve host/domain\n      names within the default JNDI LDAP provider\n    + JDK-8172404: Tools should warn if weak algorithms are used\n      before restricting them\n    + JDK-8193367: Annotated type variable bounds crash javac\n    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java\n      fails intermittently: Connection reset\n    + JDK-8203026: java.rmi.NoSuchObjectException: no such object\n      in table\n    + JDK-8203281: [Windows] JComboBox change in ui when\n      editor.setBorder() is called\n    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to\n      resolve_wk_klass\n    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and\n      JdbExprTest.sh fail due to timeout\n    + JDK-8203928: [Test] Convert non-JDB scaffolding\n      serviceability shell script tests to java\n    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak\n    + JDK-8204994: SA might fail to attach to process with 'Windbg\n      Error: WaitForEvent failed'\n    + JDK-8205534: Remove SymbolTable dependency from\n      serviceability agent\n    + JDK-8206309: Tier1 SA tests fail\n    + JDK-8208281: java/nio/channels/\n      /AsynchronousSocketChannel/Basic.java timed out\n    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java\n      version - step1\n    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh\n      is incorrect\n    + JDK-8209342: Problemlist SA tests on Solaris due to Error\n      attaching to process: Can't create thread_db agent!\n    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java\n      should be marked as headful\n    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with\n      timeout\n    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java\n      version - step2\n    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with\n      ZGC\n    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java\n    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/\n      /ap10t001/TestDescription.java failed with ObjectFree:\n      GetCurrentThreadCpuTimerInfo returned unexpected error code\n    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java\n      version - step3\n    + JDK-8210527: JShell: NullPointerException in\n      jdk.jshell.Eval.translateExceptionStack\n    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related\n      tests\n    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails\n      with waitForPrompt timed out after 60 seconds\n    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should\n      clarify which output is the pending reply after a timeout\n    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java\n      version - step4\n    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java\n      fails to find ThreadLocalObject\n    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh\n      test\n    + JDK-8211694: JShell: Redeclared variable should be reset\n    + JDK-8212200: assert when shared java.lang.Object is redefined\n      by JVMTI agent\n    + JDK-8212629: [TEST] wrong breakpoint in\n      test/jdk/com/sun/jdi/DeferredStepTest\n    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)\n      - unexpected. lastLine=52, minLine=52, maxLine=55\n    + JDK-8212807: tools/jar/multiRelease/Basic.java times out\n    + JDK-8213182: Minimal VM build failure after JDK-8212200\n      (assert when shared java.lang.Object is redefined by JVMTI\n      agent)\n    + JDK-8213214: Set -Djava.io.tmpdir= when running tests\n    + JDK-8213275: ReplaceCriticalClasses.java fails with\n      jdk.internal.vm.PostVMInitHook not found\n    + JDK-8213574: Deadlock in string table expansion when dumping\n      lots of CDS classes\n    + JDK-8213703: LambdaConversionException: Invalid receiver type\n      not a subtype of implementation type interface\n    + JDK-8214074: Ghash optimization using AVX instructions\n    + JDK-8214491: Upgrade to JLine 3.9.0\n    + JDK-8214797: TestJmapCoreMetaspace.java timed out\n    + JDK-8215243: JShell tests failing intermitently with\n      'Problem cleaning up the following threads:'\n    + JDK-8215244: jdk/jshell/ToolBasicTest.java\n      testHistoryReference failed\n    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash\n      optimization using AVX instructions)\n    + JDK-8215438: jshell tool: Ctrl-D causes EOF\n    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on\n      Windows\n    + JDK-8216974: HttpConnection not returned to the pool after\n      204 response\n    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not\n      reflected correctly during run time\n    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is\n      too small on new Skylake CPUs\n    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs\n      instead of aliased B\u0026W glyphs\n    + JDK-8221658: aarch64: add necessary predicate for ubfx\n      patterns\n    + JDK-8221759: Crash when completing 'java.io.File.path'\n    + JDK-8221918: runtime/SharedArchiveFile/serviceability/\n      /ReplaceCriticalClasses.java fails: Shared archive not found\n    + JDK-8222074: Enhance auto vectorization for x86\n    + JDK-8222079: Don't use memset to initialize fields decode_env\n      constructor in disassembler.cpp\n    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely\n      on hostname command\n    + JDK-8223688: JShell: crash on the instantiation of raw\n      anonymous class\n    + JDK-8223777: In posix_spawn mode, failing to exec()\n      jspawnhelper does not result in an error\n    + JDK-8223940: Private key not supported by chosen signature\n      algorithm\n    + JDK-8224184: jshell got IOException at exiting with AIX\n    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in\n      test_mulc\n    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws\n      NullPointerException\n    + JDK-8225625: AES Electronic Codebook (ECB) encryption and\n      decryption optimization using AVX512 + VAES instructions\n    + JDK-8226536: Catch OOM from deopt that fails rematerializing\n      objects\n    + JDK-8226575: OperatingSystemMXBean should be made container\n      aware\n    + JDK-8226697: Several tests which need the @key headful\n      keyword are missing it.\n    + JDK-8226809: Circular reference in printed stack trace is not\n      correctly indented \u0026 ambiguous\n    + JDK-8227059: sun/security/tools/keytool/\n      /DefaultSignatureAlgorithm.java timed out\n    + JDK-8227269: Slow class loading when running with JDWP\n    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java\n      fails due to 'exitValue = 6'\n    + JDK-8228448: Jconsole can't connect to itself\n    + JDK-8228967: Trust/Key store and SSL context utilities for\n      tests\n    + JDK-8229378: jdwp library loader in linker_md.c quietly\n      truncates on buffer overflow\n    + JDK-8229815: Upgrade Jline to 3.12.1\n    + JDK-8230000: some httpclients testng tests run zero test\n    + JDK-8230002: javax/xml/jaxp/unittest/transform/\n      /SecureProcessingTest.java runs zero test\n    + JDK-8230010: Remove jdk8037819/BasicTest1.java\n    + JDK-8230094: CCE in createXMLEventWriter(Result) over an\n      arbitrary XMLStreamWriter\n    + JDK-8230402: Allocation of compile task fails with assert:\n      'Leaking compilation tasks?'\n    + JDK-8230767: FlightRecorderListener returns null recording\n    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to\n      test/jdk/java/util/zip/EntryCount64k.java\n    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()\n      can be quicker for self thread\n    + JDK-8231586: enlarge encoding space for OopMapValue offsets\n    + JDK-8231953: Wrong assumption in assertion in\n      oop::register_oop\n    + JDK-8231968: getCurrentThreadAllocatedBytes default\n      implementation s/b getThreadAllocatedBytes\n    + JDK-8232083: Minimal VM is broken after JDK-8231586\n    + JDK-8232161: Align some one-way conversion in MS950 charset\n      with Windows\n    + JDK-8232855: jshell missing word in /help help\n    + JDK-8233027: OopMapSet::all_do does oms.next() twice during\n      iteration\n    + JDK-8233228: Disable weak named curves by default in TLS,\n      CertPath, and Signed JAR\n    + JDK-8233386: Initialize NULL fields for unused decorations\n    + JDK-8233452: java.math.BigDecimal.sqrt() with\n      RoundingMode.FLOOR results in incorrect result\n    + JDK-8233686: XML transformer uses excessive amount of memory\n    + JDK-8233741: AES Countermode (AES-CTR) optimization using\n      AVX512 + VAES instructions\n    + JDK-8233829: javac cannot find non-ASCII module name under\n      non-UTF8 environment\n    + JDK-8233958: Memory retention due to HttpsURLConnection\n      finalizer that serves no purpose\n    + JDK-8234011: (zipfs) Memory leak in\n      ZipFileSystem.releaseDeflater()\n    + JDK-8234058: runtime/CompressedOops/\n      /CompressedClassPointers.java fails with 'Narrow klass base:\n      0x0000000000000000' missing from stdout/stderr\n    + JDK-8234149: Several regression tests do not dispose Frame at\n      end\n    + JDK-8234347: 'Turkey' meta time zone does not generate\n      composed localized names\n    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/\n      /bug6980209.java fails in linux nightly\n    + JDK-8234535: Cross compilation fails due to missing CFLAGS\n      for the BUILD_CC\n    + JDK-8234541: C1 emits an empty message when it inlines\n      successfully\n    + JDK-8234687: change javap reporting on unknown attributes\n    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK\n      11\n    + JDK-8236548: Localized time zone name inconsistency between\n      English and other locales\n    + JDK-8236617: jtreg test containers/docker/\n      /TestMemoryAwareness.java fails after 8226575\n    + JDK-8237182: Update copyright header for shenandoah and\n      epsilon files\n    + JDK-8237888: security/infra/java/security/cert/\n      /CertPathValidator/certification/LuxTrustCA.java fails when\n      checking validity interval\n    + JDK-8237977: Further update\n      javax/net/ssl/compatibility/Compatibility.java\n    + JDK-8238270: java.net HTTP/2 client does not decrease stream\n      count when receives 204 response\n    + JDK-8238284: [macos] Zero VM build fails due to an obvious\n      typo\n    + JDK-8238380: java.base/unix/native/libjava/childproc.c\n      'multiple definition' link errors with GCC10\n    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c\n      'multiple definition' link errors with GCC10\n    + JDK-8238388: libj2gss/NativeFunc.o 'multiple definition' link\n      errors with GCC10\n    + JDK-8238448: RSASSA-PSS signature verification fail when\n      using certain odd key sizes\n    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits\n      with non-zero code\n    + JDK-8239083: C1 assert(known_holder == NULL ||\n      (known_holder-\u003eis_instance_klass() \u0026\u0026\n      (!known_holder-\u003eis_interface() ||\n      ((ciInstanceKlass*)known_holder)-\u003ehas_nonstatic_concrete_methods())),\n      'should be non-static concrete method');\n    + JDK-8239385: KerberosTicket client name refers wrongly to\n      sAMAccountName in AD\n    + JDK-8240169: javadoc fails to link to non-modular api docs\n    + JDK-8240295: hs_err elapsed time in seconds is not accurate\n      enough\n    + JDK-8240360: NativeLibraryEvent has wrong library name on\n      Linux\n    + JDK-8240676: Meet not symmetric failure when running lucene\n      on jdk8\n    + JDK-8241007: Shenandoah: remove\n      ShenandoahCriticalControlThreadPriority support\n    + JDK-8241065: Shenandoah: remove leftover code after\n      JDK-8231086\n    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is\n      failing on 32bit Windows\n    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:\n      java.lang.NullPointerException\n    + JDK-8241138: http.nonProxyHosts=* causes\n      StringIndexOutOfBoundsException in DefaultProxySelector\n    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark\n    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java\n      fails with OOME\n    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure\n    + JDK-8241750: x86_32 build failure after JDK-8227269\n    + JDK-8242184: CRL generation error with RSASSA-PSS\n    + JDK-8242283: Can't start JVM when java home path includes\n      non-ASCII character\n    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null\n      params from byte array\n    + JDK-8243029: Rewrite javax/net/ssl/compatibility/\n      /Compatibility.java with a flexible interop test framework\n    + JDK-8243138: Enhance BaseLdapServer to support starttls\n      extended request\n    + JDK-8243320: Add SSL root certificates to Oracle Root CA\n      program\n    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA\n      program\n    + JDK-8243389: enhance os::pd_print_cpu_info on linux\n    + JDK-8243453: java --describe-module failed with non-ASCII\n      module name under non-UTF8 environment\n    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp\n    + JDK-8243489: Thread CPU Load event may contain wrong data for\n      CPU time under certain conditions\n    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on\n      HiDPI screens (Windows)\n    + JDK-8244087: 2020-04-24 public suffix list update\n    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest\n      release 1.8.26\n    + JDK-8244164: AArch64: jaotc generates incorrect code for\n      compressed OOPs with non-zero heap base\n    + JDK-8244196: adjust output in os_linux\n    + JDK-8244225: stringop-overflow warning on strncpy call from\n      compile_the_world_in\n    + JDK-8244287: JFR: Methods samples have line number 0\n    + JDK-8244703: 'platform encoding not initialized' exceptions\n      with debugger, JNI\n    + JDK-8244719: CTW: C2 compilation fails with\n      'assert(!VerifyHashTableKeys || _hash_lock == 0) failed:\n      remove node from hash table before modifying it'\n    + JDK-8244729: Shenandoah: remove resolve paths from\n      SBSA::generate_shenandoah_lrb\n    + JDK-8244763: Update --release 8 symbol information after JSR\n      337 MR3\n    + JDK-8244818: Java2D Queue Flusher crash while moving\n      application window to external monitor\n    + JDK-8245151: jarsigner should not raise duplicate warnings on\n      verification\n    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9\n    + JDK-8245714: 'Bad graph detected in build_loop_late' when\n      loads are pinned on loop limit check uncommon branch\n    + JDK-8245801: StressRecompilation triggers assert 'redundunt\n      OSR recompilation detected. memory leak in CodeCache!'\n    + JDK-8245832: JDK build make-static-libs should build all JDK\n      libraries\n    + JDK-8245880: Shenandoah: check class unloading flag early in\n      concurrent code root scan\n    + JDK-8245981: Upgrade to jQuery 3.5.1\n    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801\n    + JDK-8246094: [macos] Sound Recording and playback is not\n      working\n    + JDK-8246153: TestEliminateArrayCopy fails with\n      -XX:+StressReflectiveCode\n    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ\n    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest\n      fails with AssertionError\n    + JDK-8246203: Segmentation fault in verification due to stack\n      overflow with -XX:+VerifyIterativeGVN\n    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves\n    + JDK-8246453: TestClone crashes with 'all collected exceptions\n      must come from the same place'\n    + JDK-8247246: Add explicit ResolvedJavaType.link and expose\n      presence of default methods\n    + JDK-8247350: [aarch64] assert(false) failed: wrong size of\n      mach node\n    + JDK-8247502: PhaseStringOpts crashes while optimising\n      effectively dead code\n    + JDK-8247615: Initialize the bytes left for the heap sampler\n    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV\n      in SBC2Support::pin_and_expand\n    + JDK-8247874: Replacement in VersionProps.java.template not\n      working when --with-vendor-bug-url contains '\u0026'\n    + JDK-8247979: aarch64: missing side effect of killing flags\n      for clearArray_reg_reg\n    + JDK-8248214: Add paddings for TaskQueueSuper to reduce\n      false-sharing cache contention\n    + JDK-8248219: aarch64: missing memory barrier in\n      fast_storefield and fast_accessfield\n    + JDK-8248348: Regression caused by the update to BCEL 6.0\n    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to\n      jtreg 5.1\n    + JDK-8248495: [macos] zerovm is broken due to libffi headers\n      location\n    + JDK-8248851: CMS: Missing memory fences between free chunk\n      check and klass read\n    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on\n      Windows\n    + JDK-8249159: Downport test rework for SSLSocketTemplate from\n      8224650\n    + JDK-8249215: JFrame::setVisible crashed with\n      -Dfile.encoding=UTF-8 on Japanese Windows.\n    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is\n      not highlighted in GTKLookAndFeel\n    + JDK-8249255: Build fails if source code in cygwin home dir\n    + JDK-8249277: TestVerifyIterativeGVN.java is failing with\n      timeout in OpenJDK 11\n    + JDK-8249278: Revert JDK-8226253 which breaks the spec of\n      AccessibleState.SHOWING for JList\n    + JDK-8249560: Shenandoah: Fix racy GC request handling\n    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle\n    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should\n      account for corner cases\n    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when\n      requesting TGS Kerberos tickets\n    + JDK-8250609: C2 crash in IfNode::fold_compares\n    + JDK-8250627: Use -XX:+/-UseContainerSupport for\n      enabling/disabling Java container metrics\n    + JDK-8250755: Better cleanup for\n      jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java\n    + JDK-8250787: Provider.put no longer registering aliases in\n      FIPS env\n    + JDK-8250826: jhsdb does not work with coredump which comes\n      from Substrate VM\n    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's\n      dead count before/after parallel walk\n    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check\n      the bounds\n    + JDK-8251117: Cannot check P11Key size in P11Cipher and\n      P11AEADCipher\n    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java\n      test failure\n    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with\n      I-U\n    + JDK-8251469: Better cleanup for\n      test/jdk/javax/imageio/SetOutput.java\n    + JDK-8251487: Shenandoah: missing detail timing tracking for\n      final mark cleaning phase\n    + JDK-8252120: compiler/oracle/TestCompileCommand.java\n      misspells 'occured'\n    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary\n      compatibility\n    + JDK-8252258: [11u] JDK-8242154 changes the default vendor\n    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after\n      downport of 8234011\n    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)\n      in JDK 11\n    + JDK-8253283: [11u] Test build/translations/\n      /VerifyTranslations.java failing after JDK-8252258\n    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several\n      crashes\n    + Fix regression '8250861: Crash in MinINode::Ideal(PhaseGVN*,\n      bool)' introduced in jdk 11.0.9\n","status":"published","published":"2020-11-17T12:19:11Z","modified":"2026-02-04T02:53:17.760499Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:3460-1","title":"Security update for java-1_8_0-openjdk","description":"This update for java-1_8_0-openjdk fixes the following issues:\n\n- Fix regression '8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)',\n  introduced in October 2020 CPU.\n\n- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,\n  bsc#1174157, and October 2020 CPU, bsc#1177943)\n  * New features\n    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7\n    + PR3796: Allow the number of curves supported to be specified\n  * Security fixes\n    + JDK-8028431, CVE-2020-14579: NullPointerException in\n      DerValue.equals(DerValue)\n    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in\n      sun.security.util.DerInputStream.getUnalignedBitString()\n    + JDK-8230613: Better ASCII conversions\n    + JDK-8231800: Better listing of arrays\n    + JDK-8232014: Expand DTD support\n    + JDK-8233255: Better Swing Buttons\n    + JDK-8233624: Enhance JNI linkage\n    + JDK-8234032: Improve basic calendar services\n    + JDK-8234042: Better factory production of certificates\n    + JDK-8234418: Better parsing with CertificateFactory\n    + JDK-8234836: Improve serialization handling\n    + JDK-8236191: Enhance OID processing\n    + JDK-8236196: Improve string pooling\n    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class\n    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior\n    + JDK-8237592, CVE-2020-14577: Enhance certificate verification\n    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts\n    + JDK-8237995, CVE-2020-14782: Enhance certificate processing\n    + JDK-8238002, CVE-2020-14581: Better matrix operations\n    + JDK-8238804: Enhance key handling process\n    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable\n    + JDK-8238843: Enhanced font handing\n    + JDK-8238920, CVE-2020-14583: Better Buffer support\n    + JDK-8238925: Enhance WAV file playback\n    + JDK-8240119, CVE-2020-14593: Less Affine Transformations\n    + JDK-8240124: Better VM Interning\n    + JDK-8240482: Improved WAV file playback\n    + JDK-8241114, CVE-2020-14792: Better range handling\n    + JDK-8241379: Update JCEKS support\n    + JDK-8241522: Manifest improved jar headers redux\n    + JDK-8242136, CVE-2020-14621: Better XML namespace handling\n    + JDK-8242680, CVE-2020-14796: Improved URI Support\n    + JDK-8242685, CVE-2020-14797: Better Path Validation\n    + JDK-8242695, CVE-2020-14798: Enhanced buffer support\n    + JDK-8243302: Advanced class supports\n    + JDK-8244136, CVE-2020-14803: Improved Buffer supports\n    + JDK-8244479: Further constrain certificates\n    + JDK-8244955: Additional Fix for JDK-8240124\n    + JDK-8245407: Enhance zoning of times\n    + JDK-8245412: Better class definitions\n    + JDK-8245417: Improve certificate chain handling\n    + JDK-8248574: Improve jpeg processing\n    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit\n    + JDK-8253019: Enhanced JPEG decoding\n  * Import of OpenJDK 8 u262 build 01\n    + JDK-4949105: Access Bridge lacks html tags parsing\n    + JDK-8003209: JFR events for network utilization\n    + JDK-8030680: 292 cleanup from default method code assessment\n    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java\n      and some tests failed on windows intermittently\n    + JDK-8041626: Shutdown tracing event\n    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp\n    + JDK-8149338: JVM Crash caused by Marlin renderer not handling\n       NaN coordinates\n    + JDK-8151582: (ch) test java/nio/channels/\n      /AsyncCloseAndInterrupt.java failing due to 'Connection\n      succeeded'\n    + JDK-8165675: Trace event for thread park has incorrect unit\n       for timeout\n    + JDK-8176182: 4 security tests are not run\n    + JDK-8178910: Problemlist sample tests\n    + JDK-8183925: Decouple crash protection from watcher thread\n    + JDK-8191393: Random crashes during cfree+0x1c\n    + JDK-8195817: JFR.stop should require name of recording\n    + JDK-8195818: JFR.start should increase autogenerated name by\n       one\n    + JDK-8195819: Remove recording=x from jcmd JFR.check output\n    + JDK-8199712: Flight Recorder\n    + JDK-8202578: Revisit location for class unload events\n    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on\n      missing events\n    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight\n      Recorder)\n    + JDK-8203346: JFR: Inconsistent signature of\n      jfr_add_string_constant\n    + JDK-8203664: JFR start failure after AppCDS archive created\n      with JFR StartFlightRecording\n    + JDK-8203921: JFR thread sampling is missing fixes from\n      JDK-8194552\n    + JDK-8203929: Limit amount of data for JFR.dump\n    + JDK-8205516: JFR tool\n    + JDK-8207392: [PPC64] Implement JFR profiling\n    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first\n      classloader which calls it\n    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR\n    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()\n    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD\n      1.0.7\n    + JDK-8211239: Build fails without JFR: empty JFR events\n      signatures mismatch\n    + JDK-8212232: Wrong metadata for the configuration of the\n      cutoff for old object sample events\n    + JDK-8213015: Inconsistent settings between JFR.configure and\n      -XX:FlightRecorderOptions\n    + JDK-8213421: Line number information for execution samples\n      always 0\n    + JDK-8213617: JFR should record the PID of the recorded process\n    + JDK-8213734: SAXParser.parse(File, ..) does not close\n      resources when Exception occurs.\n    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered\n      by tests\n    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by\n      test\n    + JDK-8213966: The ZGC JFR events should be marked as\n      experimental\n    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap\n      in debug builds\n    + JDK-8214750: Unnecessary \u003cp\u003e tags in jfr classes\n    + JDK-8214896: JFR Tool left files behind\n    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java\n      fails with UnsatisfiedLinkError\n    + JDK-8214925: JFR tool fails to execute\n    + JDK-8215175: Inconsistencies in JFR event metadata\n    + JDK-8215237: jdk.jfr.Recording javadoc does not compile\n    + JDK-8215284: Reduce noise induced by periodic task\n      getFileSize()\n    + JDK-8215355: Object monitor deadlock with no threads holding\n      the monitor (using jemalloc 5.1)\n    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails\n    + JDK-8215771: The jfr tool should pretty print reference chains\n    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work\n      properly\n    + JDK-8216486: Possibility of integer overflow in\n      JfrThreadSampler::run()\n    + JDK-8216528: test/jdk/java/rmi/transport/\n       /runtimeThreadInheritanceLeak/\n       /RuntimeThreadInheritanceLeak.java failing with Xcomp\n    + JDK-8216559: [JFR] Native libraries not correctly parsed from\n      /proc/self/maps\n    + JDK-8216578: Remove unused/obsolete method in JFR code\n    + JDK-8216995: Clean up JFR command line processing\n    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some\n      systems due to process surviving SIGINT\n    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR\n      TestShutdownEvent\n    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly\n    + JDK-8223147: JFR Backport\n    + JDK-8223689: Add JFR Thread Sampling Support\n    + JDK-8223690: Add JFR BiasedLock Event Support\n    + JDK-8223691: Add JFR G1 Region Type Change Event Support\n    + JDK-8223692: Add JFR G1 Heap Summary Event Support\n    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:\n      invariant\n    + JDK-8224475: JTextPane does not show images in HTML rendering\n    + JDK-8226253: JAWS reports wrong number of radio buttons when\n      buttons are hidden.\n    + JDK-8226779: [TESTBUG] Test JFR API from Java agent\n    + JDK-8226892: ActionListeners on JRadioButtons don't get\n      notified when selection is changed with arrow keys\n    + JDK-8227011: Starting a JFR recording in response to JVMTI\n      VMInit and / or Java agent premain corrupts memory\n    + JDK-8227605: Kitchensink fails 'assert((((klass)-\u003etrace_id()\n      \u0026 (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))\n      failed: invariant'\n    + JDK-8229366: JFR backport allows unchecked writing to memory\n    + JDK-8229401: Fix JFR code cache test failures\n    + JDK-8229708: JFR backport code does not initialize\n    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator\n    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on\n      Windows\n    + JDK-8230707: JFR related tests are failing\n    + JDK-8230782: Robot.createScreenCapture() fails if\n      'awt.robot.gtk' is set to false\n    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on\n       unix misses ReleaseStringUTFChars in early return\n    + JDK-8230947: TestLookForUntestedEvents.java is failing after\n      JDK-8230707\n    + JDK-8231995: two jtreg tests failed after 8229366 is fixed\n    + JDK-8233623: Add classpath exception to copyright in\n      EventHandlerProxyCreator.java file\n    + JDK-8236002: CSR for JFR backport suggests not leaving out\n      the package-info\n    + JDK-8236008: Some backup files were accidentally left in the\n      hotspot tree\n    + JDK-8236074: Missed package-info\n    + JDK-8236174: Should update javadoc since tags\n    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport\n    + JDK-8238452: Keytool generates wrong expiration date if\n      validity is set to 2050/01/01\n    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when\n      there are external FIPS modules in the NSSDB\n    + JDK-8238589: Necessary code cleanup in JFR for JDK8u\n    + JDK-8238590: Enable JFR by default during compilation in 8u\n    + JDK-8239055: Wrong implementation of VMState.hasListener\n    + JDK-8239476: JDK-8238589 broke windows build by moving\n      OrderedPair\n    + JDK-8239479: minimal1 and zero builds are failing\n    + JDK-8239867: correct over use of INCLUDE_JFR macro\n    + JDK-8240375: Disable JFR by default for July 2020 release\n    + JDK-8241444: Metaspace::_class_vsm not initialized if\n      compressed class pointers are disabled\n    + JDK-8241902: AIX Build broken after integration of\n      JDK-8223147 (JFR Backport)\n    + JDK-8242788: Non-PCH build is broken after JDK-8191393\n  * Import of OpenJDK 8 u262 build 02\n    + JDK-8130737: AffineTransformOp can't handle child raster with\n      non-zero x-offset\n    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation\n      in java/awt/image/Raster/TestChildRasterOp.java\n    + JDK-8230926: [macosx] Two apostrophes are entered instead of\n      one with 'U.S. International - PC' layout\n    + JDK-8240576: JVM crashes after transformation in C2\n      IdealLoopTree::merge_many_backedges\n    + JDK-8242883: Incomplete backport of JDK-8078268: backport\n      test part\n  * Import of OpenJDK 8 u262 build 03\n    + JDK-8037866: Replace the Fun class in tests with lambdas\n    + JDK-8146612: C2: Precedence edges specification violated\n    + JDK-8150986: serviceability/sa/jmap-hprof/\n       /JMapHProfLargeHeapTest.java failing because expects HPROF\n      JAVA PROFILE 1.0.1 file format\n    + JDK-8229888: (zipfs) Updating an existing zip file does not\n      preserve original permissions\n    + JDK-8230597: Update GIFlib library to the 5.2.1\n    + JDK-8230769: BufImg_SetupICM add\n      ReleasePrimitiveArrayCritical call in early return\n    + JDK-8233880, PR3798: Support compilers with multi-digit major\n      version numbers\n    + JDK-8239852: java/util/concurrent tests fail with\n      -XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:\n      verification should have failed\n    + JDK-8241638: launcher time metrics always report 1 on Linux\n      when _JAVA_LAUNCHER_DEBUG set\n    + JDK-8243059: Build fails when --with-vendor-name contains a\n      comma\n    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes\n    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32\n    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()\n      returns wrong result\n  * Import of OpenJDK 8 u262 build 04\n    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't\n      throw NPE if timeout is less than, or equal to zero when unit\n      == null\n    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering\n    + JDK-8171934:\n      ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()\n      does not recognize OpenJDK's HotSpot VM\n    + JDK-8196969: JTreg Failure:\n      serviceability/sa/ClhsdbJstack.java causes NPE\n    + JDK-8243539: Copyright info (Year) should be updated for fix\n      of 8241638\n    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value\n  * Import of OpenJDK 8 u262 build 05\n    + JDK-7147060: com/sun/org/apache/xml/internal/security/\n      /transforms/ClassLoaderTest.java doesn't run in agentvm mode\n    + JDK-8178374: Problematic ByteBuffer handling in\n      CipherSpi.bufferCrypt method\n    + JDK-8181841: A TSA server returns timestamp with precision\n      higher than milliseconds\n    + JDK-8227269: Slow class loading when running with JDWP\n    + JDK-8229899: Make java.io.File.isInvalid() less racy\n    + JDK-8236996: Incorrect Roboto font rendering on Windows with\n      subpixel antialiasing\n    + JDK-8241750: x86_32 build failure after JDK-8227269\n    + JDK-8244407: JVM crashes after transformation in C2\n      IdealLoopTree::split_fall_in\n    + JDK-8244843: JapanEraNameCompatTest fails\n  * Import of OpenJDK 8 u262 build 06\n    + JDK-8246223: Windows build fails after JDK-8227269\n  * Import of OpenJDK 8 u262 build 07\n    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and\n      Jfr:on_vm_start() start-up order for correct option parsing\n    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a\n    + JDK-8245167: Top package in method profiling shows null in JMC\n    + JDK-8246703: [TESTBUG] Add test for JDK-8233197\n  * Import of OpenJDK 8 u262 build 08\n    + JDK-8220293: Deadlock in JFR string pool\n    + JDK-8225068: Remove DocuSign root certificate that is\n      expiring in May 2020\n    + JDK-8225069: Remove Comodo root certificate that is expiring\n      in May 2020\n  * Import of OpenJDK 8 u262 build 09\n    + JDK-8248399: Build installs jfr binary when JFR is disabled\n  * Import of OpenJDK 8 u262 build 10\n    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'\n      installed in wrong package\n  * Import of OpenJDK 8 u265 build 01\n    + JDK-8249677: Regression in 8u after JDK-8237117: Better\n      ForkJoinPool behavior\n    + JDK-8250546: Expect changed behaviour reported in JDK-8249846\n  * Import of OpenJDK 8 u272 build 01\n    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY\n      test/compiler/7177917/Test7177917.java\n    + JDK-8035493: JVMTI PopFrame capability must instruct\n      compilers not to prune locals\n    + JDK-8036088: Replace strtok() with its safe equivalent\n      strtok_s() in DefaultProxySelector.c\n    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/\n      /BadSerializationTest/BadSerializationTest.java fails\n    + JDK-8075774: Small readability and performance improvements\n      for zipfs\n    + JDK-8132206: move ScanTest.java into OpenJDK\n    + JDK-8132376: Add @requires os.family to the client tests with\n      access to internal OS-specific API\n    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java\n    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/\n      /appletviewer/IOExceptionIfEncodedURLTest/\n      /IOExceptionIfEncodedURLTest.sh\n    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/\n      /MTGraphicsAccessTest.java hangs on Win. 8\n    + JDK-8151788: NullPointerException from ntlm.Client.type3\n    + JDK-8151834: Test SmallPrimeExponentP.java times out\n      intermittently\n    + JDK-8153430: jdk regression test MletParserLocaleTest,\n      ParserInfiniteLoopTest reduce default timeout\n    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary\n      public\n    + JDK-8156169: Some sound tests rarely hangs because of\n      incorrect synchronization\n    + JDK-8165936: Potential Heap buffer overflow when seaching\n      timezone info files\n    + JDK-8166148: Fix for JDK-8165936 broke solaris builds\n    + JDK-8167300: Scheduling failures during gcm should be fatal\n    + JDK-8167615: Opensource unit/regression tests for JavaSound\n    + JDK-8172012: [TEST_BUG] delays needed in\n      javax/swing/JTree/4633594/bug4633594.java\n    + JDK-8177628: Opensource unit/regression tests for ImageIO\n    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java\n    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/\n      /AppletContextTest/BadPluginConfigurationTest.sh\n    + JDK-8193137: Nashorn crashes when given an empty script file\n    + JDK-8194298: Add support for per Socket configuration of TCP\n      keepalive\n    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java\n      throws error\n    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java\n      fails\n    + JDK-8210147: adjust some WSAGetLastError usages in windows\n      network coding\n    + JDK-8211714: Need to update vm_version.cpp to recognise\n      VS2017 minor versions\n    + JDK-8214862: assert(proj != __null) at compile.cpp:3251\n    + JDK-8217606: LdapContext#reconnect always opens a new\n      connection\n    + JDK-8217647: JFR: recordings on 32-bit systems unreadable\n    + JDK-8226697: Several tests which need the @key headful\n      keyword are missing it.\n    + JDK-8229378: jdwp library loader in linker_md.c quietly\n      truncates on buffer overflow\n    + JDK-8230303: JDB hangs when running monitor command\n    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)\n      return NULL if n is not in the CG\n    + JDK-8234617: C1: Incorrect result of field load due to\n      missing narrowing conversion\n    + JDK-8235243: handle VS2017 15.9 and VS2019 in\n      abstract_vm_version\n    + JDK-8235325: build failure on Linux after 8235243\n    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink\n    + JDK-8237951: CTW: C2 compilation fails with 'malformed\n      control flow'\n    + JDK-8238225: Issues reported after replacing symlink at\n      Contents/MacOS/libjli.dylib with binary\n    + JDK-8239385: KerberosTicket client name refers wrongly to\n      sAMAccountName in AD\n    + JDK-8239819: XToolkit: Misread of screen information memory\n    + JDK-8240295: hs_err elapsed time in seconds is not accurate\n      enough\n    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system\n      property with a security one\n    + JDK-8242498: Invalid 'sun.awt.TimedWindowEvent' object leads\n      to JVM crash\n    + JDK-8243489: Thread CPU Load event may contain wrong data for\n      CPU time under certain conditions\n    + JDK-8244818: Java2D Queue Flusher crash while moving\n      application window to external monitor\n    + JDK-8246310: Clean commented-out code about ModuleEntry\n      and PackageEntry in JFR\n    + JDK-8246384: Enable JFR by default on supported architectures\n      for October 2020 release\n    + JDK-8248643: Remove extra leading space in JDK-8240295 8u\n      backport\n    + JDK-8249610: Make\n      sun.security.krb5.Config.getBooleanObject(String... keys)\n      method public\n  * Import of OpenJDK 8 u272 build 02\n    + JDK-8023697: failed class resolution reports different class\n      name in detail message for the first and subsequent times\n    + JDK-8025886: replace [[ and == bash extensions in regtest\n    + JDK-8046274: Removing dependency on jakarta-regexp\n    + JDK-8048933: -XX:+TraceExceptions output should include the\n      message\n    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/\n      /fileaccess/FontFile.java fails\n    + JDK-8148854: Class names 'SomeClass' and 'LSomeClass;'\n      treated by JVM as an equivalent\n    + JDK-8154313: Generated javadoc scattered all over the place\n    + JDK-8163251: Hard coded loop limit prevents reading of smart\n      card data greater than 8k\n    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java\n      fails with compiler.whitebox.SimpleTestCaseHelper(int) must be\n      compiled\n    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/\n      /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java\n    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt\n      FocusTransitionTest test.\n    + JDK-8201633: Problems with AES-GCM native acceleration\n    + JDK-8211049: Second parameter of 'initialize' method is not\n          used\n    + JDK-8219566: JFR did not collect call stacks when\n      MaxJavaStackTraceDepth is set to zero\n    + JDK-8220165: Encryption using GCM results in\n      RuntimeException- input length out of bound\n    + JDK-8220555: JFR tool shows potentially misleading message\n      when it cannot access a file\n    + JDK-8224217: RecordingInfo should use textual representation\n      of path\n    + JDK-8231779: crash\n      HeapWord*ParallelScavengeHeap::failed_mem_allocate\n    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c\n      'multiple definition' link errors with GCC10\n    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/\n      /SctpNet.c 'multiple definition' link errors with GCC10\n    + JDK-8238388, PR3798: libj2gss/NativeFunc.o 'multiple\n      definition' link errors with GCC10\n    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null\n      params from byte array\n    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/\n      /plugins/shared/CanWriteSequence.java\n  * Import of OpenJDK 8 u272 build 03\n    + JDK-6574989: TEST_BUG:\n      javax/sound/sampled/Clip/bug5070081.java fails sometimes\n    + JDK-8148754: C2 loop unrolling fails due to unexpected graph\n      shape\n    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests\n      fail with error : revokeall.exe: Permission denied\n    + JDK-8203357: Container Metrics\n    + JDK-8209113: Use WeakReference for lastFontStrike for created\n      Fonts\n    + JDK-8216283: Allow shorter method sampling interval than 10 ms\n    + JDK-8221569: JFR tool produces incorrect output when both\n      --categories and --events are specified\n    + JDK-8233097: Fontmetrics for large Fonts has zero width\n    + JDK-8248851: CMS: Missing memory fences between free chunk\n      check and klass read\n    + JDK-8250875: Incorrect parameter type for update_number in\n      JDK_Version::jdk_update\n  * Import of OpenJDK 8 u272 build 04\n    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws\n      IllegalArgumentException for flags of type double\n    + JDK-8177334: Update xmldsig implementation to Apache\n      Santuario 2.1.1\n    + JDK-8217878: ENVELOPING XML signature no longer works in JDK\n      11\n    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR\n      exception on OpenJDK 11, works 8/9/10\n    + JDK-8243138: Enhance BaseLdapServer to support starttls\n      extended request\n  * Import of OpenJDK 8 u272 build 05\n    + JDK-8026236: Add PrimeTest for BigInteger\n    + JDK-8057003: Large reference arrays cause extremely long\n      synchronization times\n    + JDK-8060721: Test runtime/SharedArchiveFile/\n      /LimitSharedSizes.java fails in jdk 9 fcs new\n      platforms/compiler\n    + JDK-8152077: (cal) Calendar.roll does not always roll the\n      hours during daylight savings\n    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed\n    + JDK-8211163: UNIX version of Java_java_io_Console_echo does\n      not return a clean boolean\n    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in\n      docker container only works with debug JVMs\n    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo\n    + JDK-8236645: JDK 8u231 introduces a regression with\n      incompatible handling of XML messages\n    + JDK-8240676: Meet not symmetric failure when running lucene\n      on jdk8\n    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA\n      program\n    + JDK-8249158: THREAD_START and THREAD_END event posted in\n      primordial phase\n    + JDK-8250627: Use -XX:+/-UseContainerSupport for\n      enabling/disabling Java container metrics\n    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and\n      Solaris builds\n    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:\n      AgeTableTracer::is_tenuring_distribution_event_enabled\n  * Import of OpenJDK 8 u272 build 06\n    + JDK-8064319: Need to enable -XX:+TraceExceptions in release\n      builds\n    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11\n      v2.40 support\n    + JDK-8160768: Add capability to custom resolve host/domain\n      names within the default JNDI LDAP provider\n    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()\n      not working\n    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface\n      license\n    + JDK-8184762: ZapStackSegments should use optimized memset\n    + JDK-8193234: When using -Xcheck:jni an internally allocated\n      buffer can leak\n    + JDK-8219919: RuntimeStub name lost with\n      PrintFrameConverterAssembly\n    + JDK-8220313: [TESTBUG] Update base image for Docker testing\n      to OL 7.6\n    + JDK-8222079: Don't use memset to initialize fields decode_env\n      constructor in disassembler.cpp\n    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update\n      SunPKCS11 provider with PKCS11 v2.40 support)\n    + JDK-8226575: OperatingSystemMXBean should be made container\n      aware\n    + JDK-8226809: Circular reference in printed stack trace is not\n      correctly indented \u0026 ambiguous\n    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM\n    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property\n      name\n    + JDK-8238898, PR3801: Missing hash characters for header on\n      license file\n    + JDK-8243320: Add SSL root certificates to Oracle Root CA\n      program\n    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest\n      release 1.8.26\n    + JDK-8245467: Remove 8u TLSv1.2 implementation files\n    + JDK-8245469: Remove DTLS protocol implementation\n    + JDK-8245470: Fix JDK8 compatibility issues\n    + JDK-8245471: Revert JDK-8148188\n    + JDK-8245472: Backport JDK-8038893 to JDK8\n    + JDK-8245473: OCSP stapling support\n    + JDK-8245474: Add TLS_KRB5 cipher suites support according to\n      RFC-2712\n    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello\n      message by default\n    + JDK-8245477: Adjust TLS tests location\n    + JDK-8245653: Remove 8u TLS tests\n    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7\n    + JDK-8251117: Cannot check P11Key size in P11Cipher and\n      P11AEADCipher\n    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is\n      set to either true or false\n    + JDK-8251341: Minimal Java specification change\n    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u\n  * Import of OpenJDK 8 u272 build 07\n    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ\n  * Import of OpenJDK 8 u272 build 08\n    + JDK-8062947: Fix exception message to correctly represent\n      LDAP connection failure\n    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed\n      due to timeout on DeadServerNoTimeoutTest is incorrect\n    + JDK-8252573: 8u: Windows build failed after 8222079 backport\n  * Import of OpenJDK 8 u272 build 09\n    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :\n      Compilation failed\n  * Import of OpenJDK 8 u272 build 10\n    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed\n      by the fix for JDK-8249158\n    + JDK-8254937: Revert JDK-8148854 for 8u272\n  * Backports\n    + JDK-8038723, PR3806: Openup some PrinterJob tests\n    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when\n      JTable contains certain string\n    + JDK-8058779, PR3805: Faster implementation of\n      String.replace(CharSequence, CharSequence)\n    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several\n      client tests unaffected by the automated bulk update\n    + JDK-8144015, PR3806: [PIT] failures of text layout font tests\n    + JDK-8144023, PR3806: [PIT] failure of text measurements in\n      javax/swing/text/html/parser/Parser/6836089/bug6836089.java\n    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in\n      closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java\n    + JDK-8145542, PR3806: The case failed automatically and thrown\n      java.lang.ArrayIndexOutOfBoundsException exception\n    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when\n      displaying Devanagari text in JEditorPane\n    + JDK-8152358, PR3800: code and comment cleanups found during\n      the hunt for 8077392\n    + JDK-8152545, PR3804: Use preprocessor instead of compiling a\n      program to generate native nio constants\n    + JDK-8152680, PR3806: Regression in\n      GlyphVector.getGlyphCharIndex behaviour\n    + JDK-8158924, PR3806: Incorrect i18n text document layout\n    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for\n      javax/swing/text/GlyphPainter2/6427244/bug6427244.java\n    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/\n      /GetGlyphCharIndexTest.java does not compile\n    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/\n      /GlyphPainter2/6427244/bug6427244.java - compilation failed\n    + JDK-8191512, PR3806: T2K font rasterizer code removal\n    + JDK-8191522, PR3806: Remove Bigelow\u0026Holmes Lucida fonts from\n      JDK sources\n    + JDK-8236512, PR3801: PKCS11 Connection closed after\n      Cipher.doFinal and NoPadding\n    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to\n      tzdata2020b\n  * Bug fixes\n    + PR3798: Fix format-overflow error on GCC 10, caused by\n      passing NULL to a '%s' directive\n    + PR3795: ECDSAUtils for XML digital signatures should support\n      the same curve set as the rest of the JDK\n    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add\n      TLSv1.3 implementation classes from 11.0.7\n    + PR3808: IcedTea does not install the JFR *.jfc files\n    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has\n      fixed its use with Shenandoah\n    + PR3811: Don't attempt to install JFR files when JFR is\n      disabled\n  * Shenandoah\n    + [backport] 8221435: Shenandoah should not mark through weak\n      roots\n    + [backport] 8221629: Shenandoah: Cleanup class unloading logic\n    + [backport] 8222992: Shenandoah: Pre-evacuate all roots\n    + [backport] 8223215: Shenandoah: Support verifying subset of\n      roots\n    + [backport] 8223774: Shenandoah: Refactor\n      ShenandoahRootProcessor and family\n    + [backport] 8224210: Shenandoah: Refactor\n      ShenandoahRootScanner to support scanning CSet codecache roots\n    + [backport] 8224508: Shenandoah: Need to update thread roots\n      in final mark for piggyback ref update cycle\n    + [backport] 8224579: ResourceMark not declared in\n      shenandoahRootProcessor.inline.hpp with\n      --disable-precompiled-headers\n    + [backport] 8224679: Shenandoah: Make\n      ShenandoahParallelCodeCacheIterator noncopyable\n    + [backport] 8224751: Shenandoah: Shenandoah Verifier should\n      select proper roots according to current GC cycle\n    + [backport] 8225014: Separate ShenandoahRootScanner method for\n      object_iterate\n    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't\n      work for Shenandoah\n    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to\n      ensure roots to-space invariant\n    + [backport] 8225590: Shenandoah: Refactor\n      ShenandoahClassLoaderDataRoots API\n    + [backport] 8226413: Shenandoah: Separate root scanner for\n      SH::object_iterate()\n    + [backport] 8230853: Shenandoah: replace leftover\n      assert(is_in(...)) with rich asserts\n    + [backport] 8231198: Shenandoah: heap walking should visit all\n      roots most of the time\n    + [backport] 8231244: Shenandoah: all-roots heap walking misses\n      some weak roots\n    + [backport] 8237632: Shenandoah: accept NULL fwdptr to\n      cooperate with JVMTI and JFR\n    + [backport] 8239786: Shenandoah: print per-cycle statistics\n    + [backport] 8239926: Shenandoah: Shenandoah needs to mark\n      nmethod's metadata\n    + [backport] 8240671: Shenandoah: refactor\n      ShenandoahPhaseTimings\n    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils\n    + [backport] 8240750: Shenandoah: remove leftover files and\n      mentions of ShenandoahAllocTracker\n    + [backport] 8240868: Shenandoah: remove CM-with-UR\n      piggybacking cycles\n    + [backport] 8240872: Shenandoah: Avoid updating new regions\n      from start of evacuation\n    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers\n    + [backport] 8240915: Shenandoah: Remove unused fields in init\n      mark tasks\n    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects\n      paths after JDK-8240868\n    + [backport] 8241007: Shenandoah: remove\n      ShenandoahCriticalControlThreadPriority support\n    + [backport] 8241062: Shenandoah: rich asserts trigger 'empty\n      statement' inspection\n    + [backport] 8241081: Shenandoah: Do not modify\n      update-watermark concurrently\n    + [backport] 8241093: Shenandoah: editorial changes in flag\n      descriptions\n    + [backport] 8241139: Shenandoah: distribute mark-compact work\n      exactly to minimize fragmentation\n    + [backport] 8241142: Shenandoah: should not use parallel\n      reference processing with single GC thread\n    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul\n    + [backport] 8241435: Shenandoah: avoid disabling pacing with\n      'aggressive'\n    + [backport] 8241520: Shenandoah: simplify region sequence\n      numbers handling\n    + [backport] 8241534: Shenandoah: region status should include\n      update watermark\n    + [backport] 8241574: Shenandoah: remove\n      ShenandoahAssertToSpaceClosure\n    + [backport] 8241583: Shenandoah: turn heap lock asserts into\n      macros\n    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not\n      derive from ContiguousSpace\n    + [backport] 8241673: Shenandoah: refactor anti-false-sharing\n      padding\n    + [backport] 8241675: Shenandoah: assert(n-\u003eoutcnt() \u003e 0) at\n      shenandoahSupport.cpp:2858 with\n      java/util/Collections/FindSubList.java\n    + [backport] 8241692: Shenandoah: remove\n      ShenandoahHeapRegion::_reserved\n    + [backport] 8241700: Shenandoah: Fold\n      ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier\n    + [backport] 8241740: Shenandoah: remove\n      ShenandoahHeapRegion::_heap\n    + [backport] 8241743: Shenandoah: refactor and inline\n      ShenandoahHeap::heap()\n    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS\n      methods\n    + [backport] 8241838: Shenandoah: no need to trash cset during\n      final mark\n    + [backport] 8241841: Shenandoah: ditch one of allocation type\n      counters in ShenandoahHeapRegion\n    + [backport] 8241842: Shenandoah: inline\n      ShenandoahHeapRegion::region_number\n    + [backport] 8241844: Shenandoah: rename\n      ShenandoahHeapRegion::region_number\n    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions\n      to cache lines\n    + [backport] 8241926: Shenandoah: only print heap changes for\n      operations that directly affect it\n    + [backport] 8241983: Shenandoah: simplify FreeSet logging\n    + [backport] 8241985: Shenandoah: simplify collectable garbage\n      logging\n    + [backport] 8242040: Shenandoah: print allocation failure type\n    + [backport] 8242041: Shenandoah: adaptive heuristics should\n      account evac reserve in free target\n    + [backport] 8242042: Shenandoah: tune down\n      ShenandoahGarbageThreshold\n    + [backport] 8242054: Shenandoah: New incremental-update mode\n    + [backport] 8242075: Shenandoah: rename\n      ShenandoahHeapRegionSize flag\n    + [backport] 8242082: Shenandoah: Purge Traversal mode\n    + [backport] 8242083: Shenandoah: split 'Prepare Evacuation'\n      tracking into cset/freeset counters\n    + [backport] 8242089: Shenandoah: per-worker stats should be\n      summed up, not averaged\n    + [backport] 8242101: Shenandoah: coalesce and parallelise heap\n      region walks during the pauses\n    + [backport] 8242114: Shenandoah: remove\n      ShenandoahHeapRegion::reset_alloc_metadata_to_shared\n    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier\n      dispatching\n    + [backport] 8242211: Shenandoah: remove\n      ShenandoahHeuristics::RegionData::_seqnum_last_alloc\n    + [backport] 8242212: Shenandoah: initialize\n      ShenandoahHeuristics::_region_data eagerly\n    + [backport] 8242213: Shenandoah: remove\n      ShenandoahHeuristics::_bytes_in_cset\n    + [backport] 8242217: Shenandoah: Enable GC mode to be\n      diagnostic/experimental and have a name\n    + [backport] 8242227: Shenandoah: transit regions to cset state\n      when adding to collection set\n    + [backport] 8242228: Shenandoah: remove unused\n      ShenandoahCollectionSet methods\n    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion\n      liveness-related methods\n    + [backport] 8242267: Shenandoah: regions space needs to be\n      aligned by os::vm_allocation_granularity()\n    + [backport] 8242271: Shenandoah: add test to verify GC mode\n      unlock\n    + [backport] 8242273: Shenandoah: accept either SATB or IU\n      barriers, but not both\n    + [backport] 8242301: Shenandoah: Inline LRB runtime call\n    + [backport] 8242316: Shenandoah: Turn NULL-check into assert\n      in SATB slow-path entry\n    + [backport] 8242353: Shenandoah: micro-optimize region\n      liveness handling\n    + [backport] 8242365: Shenandoah: use uint16_t instead of\n      jushort for liveness cache\n    + [backport] 8242375: Shenandoah: Remove\n      ShenandoahHeuristic::record_gc_start/end methods\n    + [backport] 8242641: Shenandoah: clear live data and update\n      TAMS optimistically\n    + [backport] 8243238: Shenandoah: explicit GC request should\n      wait for a complete GC cycle\n    + [backport] 8243301: Shenandoah: ditch\n      ShenandoahAllowMixedAllocs\n    + [backport] 8243307: Shenandoah: remove\n      ShCollectionSet::live_data\n    + [backport] 8243395: Shenandoah: demote guarantee in\n      ShenandoahPhaseTimings::record_workers_end\n    + [backport] 8243463: Shenandoah: ditch total_pause counters\n    + [backport] 8243464: Shenandoah: print statistic counters in\n      time order\n    + [backport] 8243465: Shenandoah: ditch unused pause_other,\n      conc_other counters\n    + [backport] 8243487: Shenandoah: make _num_phases illegal\n      phase type\n    + [backport] 8243494: Shenandoah: set counters once per cycle\n    + [backport] 8243573: Shenandoah: rename GCParPhases and\n      related code\n    + [backport] 8243848: Shenandoah: Windows build fails after\n      JDK-8239786\n    + [backport] 8244180: Shenandoah: carry Phase to\n      ShWorkerTimingsTracker explicitly\n    + [backport] 8244200: Shenandoah: build breakages after\n      JDK-8241743\n    + [backport] 8244226: Shenandoah: per-cycle statistics contain\n      worker data from previous cycles\n    + [backport] 8244326: Shenandoah: global statistics should not\n      accept bogus samples\n    + [backport] 8244509: Shenandoah: refactor\n      ShenandoahBarrierC2Support::test_* methods\n    + [backport] 8244551: Shenandoah: Fix racy update of\n      update_watermark\n    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state\n      takes loop for wrong control\n    + [backport] 8244730: Shenandoah: gc/shenandoah/options/\n      /TestHeuristicsUnlock.java should only verify the heuristics\n    + [backport] 8244732: Shenandoah: move heuristics code to\n      gc/shenandoah/heuristics\n    + [backport] 8244737: Shenandoah: move mode code to\n      gc/shenandoah/mode\n    + [backport] 8244739: Shenandoah: break superclass dependency\n      on ShenandoahNormalMode\n    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode\n      to ShenandoahSATBMode\n    + [backport] 8245461: Shenandoah: refine mode name()-s\n    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings\n      constructor arguments\n    + [backport] 8245464: Shenandoah: allocate collection set\n      bitmap at lower addresses\n    + [backport] 8245465: Shenandoah: test_in_cset can use more\n      efficient encoding\n    + [backport] 8245726: Shenandoah: lift/cleanup\n      ShenandoahHeuristics names and properties\n    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch\n    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not\n      disable heap resizing or uncommits\n    + [backport] 8245773: Shenandoah: Windows assertion failure\n      after JDK-8245464\n    + [backport] 8245812: Shenandoah: compute root phase parallelism\n    + [backport] 8245814: Shenandoah: reconsider format specifiers\n      for stats\n    + [backport] 8245825: Shenandoah: Remove diagnostic flag\n      ShenandoahConcurrentScanCodeRoots\n    + [backport] 8246162: Shenandoah: full GC does not mark code\n      roots when class unloading is off\n    + [backport] 8247310: Shenandoah: pacer should not affect\n      interrupt status\n    + [backport] 8247358: Shenandoah: reconsider free budget slice\n      for marking\n    + [backport] 8247367: Shenandoah: pacer should wait on lock\n      instead of exponential backoff\n    + [backport] 8247474: Shenandoah: Windows build warning after\n      JDK-8247310\n    + [backport] 8247560: Shenandoah: heap iteration holds root\n      locks all the time\n    + [backport] 8247593: Shenandoah: should not block pacing\n      reporters\n    + [backport] 8247751: Shenandoah: options tests should run with\n      smaller heaps\n    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter\n    + [backport] 8247757: Shenandoah: split heavy tests by\n      heuristics to improve parallelism\n    + [backport] 8247860: Shenandoah: add update watermark line in\n      rich assert failure message\n    + [backport] 8248041: Shenandoah: pre-Full GC root updates may\n      miss some roots\n    + [backport] 8248652: Shenandoah: SATB buffer handling may\n      assume no forwarded objects\n    + [backport] 8249560: Shenandoah: Fix racy GC request handling\n    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats\n    + [backport] 8249801: Shenandoah: Clear soft-refs on requested\n      GC cycle\n    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests\n      should account for corner cases\n    + Fix slowdebug build after JDK-8230853 backport\n    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for\n      x86_32 and JFR\n    + JDK-8252366: Shenandoah: revert/cleanup changes in\n      graphKit.cpp\n    + Shenandoah: add JFR roots to root processor after JFR\n      integration\n    + Shenandoah: add root statistics for string dedup table/queues\n    + Shenandoah: enable low-frequency STW class unloading\n    + Shenandoah: fix build failures after JDK-8244737 backport\n    + Shenandoah: Fix build failure with +JFR -PCH\n    + Shenandoah: fix forceful pacer claim\n    + Shenandoah: fix formats in\n      ShenandoahStringSymbolTableUnlinkTask\n    + Shenandoah: fix runtime linking failure due to non-compiled\n      shenandoahBarrierSetC1\n    + Shenandoah: hook statistics printing to PrintGCDetails, not\n      PrintGC\n    + Shenandoah: JNI weak roots are always cleared before Full GC\n      mark\n    + Shenandoah: missing SystemDictionary roots in\n      ShenandoahHeapIterationRootScanner\n    + Shenandoah: move barrier sets to their proper locations\n    + Shenandoah: move parallelCleaning.* to shenandoah/\n    + Shenandoah: pacer should use proper Atomics for intptr_t\n    + Shenandoah: properly deallocates class loader metadata\n    + Shenandoah: specialize String Table scans for better pause\n      performance\n    + Shenandoah: Zero build fails after recent Atomic cleanup in\n      Pacer\n  * AArch64 port\n    + JDK-8161072, PR3797: AArch64: jtreg\n      compiler/uncommontrap/TestDeoptOOM failure\n    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java\n      generates guarantee failure in C1\n    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from\n      watcher thread\n    + JDK-8199712, PR3797: [AArch64] Flight Recorder\n    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp\n      in frame:safe_for_sender\n    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall\n      fails with SIGILL on aarch64\n    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command\n    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java\n      fails on AArch64\n    + JDK-8216989, PR3797:\n      CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()\n      does not check for zero length on AARCH64\n    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking\n      optimisation not triggered\n    + JDK-8221658, PR3797: aarch64: add necessary predicate for\n      ubfx patterns\n    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a\n      BufferBlob\n    + JDK-8246482, PR3797: Build failures with +JFR -PCH\n    + JDK-8247979, PR3797: aarch64: missing side effect of killing\n      flags for clearArray_reg_reg\n    + JDK-8248219, PR3797: aarch64: missing memory barrier in\n      fast_storefield and fast_accessfield\n","status":"published","published":"2020-11-20T11:41:47Z","modified":"2026-02-04T03:57:08.585294Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:3932-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\n- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]\n  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779\n  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803\n  * Class libraries:\n    - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time\n      that the set timeout\n    - Z/OS specific C function send_file is changing the file pointer\n      position\n  * Java Virtual Machine:\n    - Crash on iterate java stack\n    - Java process hang on SIGTERM\n  * JIT Compiler:\n    - JMS performance regression from JDK8 SR5 FP40 TO FP41\n\n  * Class Libraries:\n    - z15 high utilization following Z/VM and Linux migration from\n      z14 To z15\n  * Java Virtual Machine:\n    - Assertion failed when trying to write a class file\n    - Assertion failure at modronapi.cpp\n    - Improve the performance of defining and finding classes\n  * JIT Compiler:\n    - An assert in ppcbinaryencoding.cpp may trigger when running\n      with traps disabled on power\n    - AOT field offset off by n bytes\n    - Segmentation fault in jit module on ibm z platform","status":"published","published":"2020-12-23T17:22:34Z","modified":"2026-02-04T03:41:25.365357Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0019-1","title":"Security update for java-1_7_1-ibm","description":"This update for java-1_7_1-ibm fixes the following issues:\n\n- Update to Java 7.1 Service Refresh 4 Fix Pack 75 [bsc#1180063, bsc#1177943]\n  CVE-2020-14792 CVE-2020-14797 CVE-2020-14782 CVE-2020-14781\n  CVE-2020-14779 CVE-2020-14798 CVE-2020-14796 CVE-2020-14803\n  * Class Libraries:\n    - Z/OS specific C function send_file is changing the file pointer position\n  * Security:\n    - Add the new oracle signer certificate\n    - Certificate parsing error\n    - JVM memory growth can be caused by the IBMPKCS11IMPL crypto provider\n    - Remove check for websphere signed jars\n    - sessionid.hashcode generates too many collisions\n    - The Java 8 IBM certpath provider does not honor the user\n      specified system property for CLR connect timeout\n","status":"published","published":"2021-01-04T15:14:52Z","modified":"2026-02-04T04:08:23.482394Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0032-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\n- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]\n  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779\n  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803\n  * Class libraries:\n    - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time\n      that the set timeout\n    - Z/OS specific C function send_file is changing the file pointer\n      position\n  * Java Virtual Machine:\n    - Crash on iterate java stack\n    - Java process hang on SIGTERM\n  * JIT Compiler:\n    - JMS performance regression from JDK8 SR5 FP40 TO FP41\n\n  * Class Libraries:\n    - z15 high utilization following Z/VM and Linux migration from\n      z14 To z15\n  * Java Virtual Machine:\n    - Assertion failed when trying to write a class file\n    - Assertion failure at modronapi.cpp\n    - Improve the performance of defining and finding classes\n  * JIT Compiler:\n    - An assert in ppcbinaryencoding.cpp may trigger when running\n      with traps disabled on power\n    - AOT field offset off by n bytes\n    - Segmentation fault in jit module on ibm z platform","status":"published","published":"2021-01-05T15:21:38Z","modified":"2026-02-04T02:32:52.26342Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"USN-4607-1","title":"openjdk-8, openjdk-lts vulnerabilities","description":"It was discovered that OpenJDK incorrectly handled deserializing Proxy\nclass objects with many interfaces. A remote attacker could possibly use\nthis issue to cause a denial of service (memory consumption) via a\nspecially crafted input. (CVE-2020-14779)\n\nSergey Ostanin discovered that OpenJDK incorrectly restricted\nauthentication mechanisms. A remote attacker could possibly use this\nissue to obtain sensitive information over an unencrypted connection.\n(CVE-2020-14781)\n\nIt was discovered that OpenJDK incorrectly handled untrusted certificates.\nAn attacker could possibly use this issue to read or write sensitive\ninformation. (CVE-2020-14782)\n\nZhiqiang Zang discovered that OpenJDK incorrectly checked for integer\noverflows. An attacker could possibly use this issue to bypass certain\nJava sandbox restrictions. (CVE-2020-14792)\n\nMarkus Loewe discovered that OpenJDK incorrectly checked permissions when\nconverting a file system path to an URI. An attacker could possibly use\nthis issue to bypass certain Java sandbox restrictions. (CVE-2020-14796)\n\nMarkus Loewe discovered that OpenJDK incorrectly checked for invalid\ncharacters when converting an URI to a path. An attacker could possibly\nuse this issue to read or write sensitive information. (CVE-2020-14797)\n\nMarkus Loewe discovered that OpenJDK incorrectly checked the length of\ninput strings. An attacker could possibly use this issue to bypass certain\nJava sandbox restrictions. (CVE-2020-14798)\n\nIt was discovered that OpenJDK incorrectly handled boundary checks. An\nattacker could possibly use this issue to bypass certain Java sandbox\nrestrictions. (CVE-2020-14803)\n","status":"published","published":"2020-10-27T23:15:43Z","modified":"2026-04-27T15:45:15.902728Z","updated_at":"2026-11-02T16:58:15.159055Z"},{"id":"USN-4607-2","title":"openjdk-8, openjdk-lts regressions","description":"USN-4607-1 fixed vulnerabilities and added features in OpenJDK.\nUnfortunately, that update introduced a regression that could cause TLS\nconnections with client certificate authentication to fail in some\nsituations. This update fixes the problem.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n It was discovered that OpenJDK incorrectly handled deserializing Proxy\n class objects with many interfaces. A remote attacker could possibly use\n this issue to cause a denial of service (memory consumption) via a\n specially crafted input. (CVE-2020-14779)\n \n Sergey Ostanin discovered that OpenJDK incorrectly restricted\n authentication mechanisms. A remote attacker could possibly use this\n issue to obtain sensitive information over an unencrypted connection.\n (CVE-2020-14781)\n \n It was discovered that OpenJDK incorrectly handled untrusted certificates.\n An attacker could possibly use this issue to read or write sensitive\n information. (CVE-2020-14782)\n \n Zhiqiang Zang discovered that OpenJDK incorrectly checked for integer\n overflows. An attacker could possibly use this issue to bypass certain\n Java sandbox restrictions. (CVE-2020-14792)\n \n Markus Loewe discovered that OpenJDK incorrectly checked permissions when\n converting a file system path to an URI. An attacker could possibly use\n this issue to bypass certain Java sandbox restrictions. (CVE-2020-14796)\n \n Markus Loewe discovered that OpenJDK incorrectly checked for invalid\n characters when converting an URI to a path. An attacker could possibly\n use this issue to read or write sensitive information. (CVE-2020-14797)\n \n Markus Loewe discovered that OpenJDK incorrectly checked the length of\n input strings. An attacker could possibly use this issue to bypass certain\n Java sandbox restrictions. (CVE-2020-14798)\n \n It was discovered that OpenJDK incorrectly handled boundary checks. An\n attacker could possibly use this issue to bypass certain Java sandbox\n restrictions. (CVE-2020-14803)\n","status":"published","published":"2020-11-12T21:58:30Z","modified":"2026-04-27T18:40:25.33394Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}