Automatically generated on 2026-10-09 17:00:05.015507
A table of all the issues found using the queries in file `config.yml`.
| Category | Issue | Date | Priority | Summary | Components | Labels |
|---|---|---|---|---|---|---|
| HPI | JDK-8384815 | 2026-05-17 | P2 | SelectOneKeyOutOfMany and PreferredKey fail after expired test certificate | security-libs | jdk11u-fix-request jdk11u-fix-yes jdk17u-fix-request jdk17u-fix-yes jdk21u-fix-request jdk21u-fix-yes jdk25u-fix-request jdk25u-fix-yes jdk26u-fix-request noreg-self problemlist tier2 tier6 ur-ci-health |
| HPI | JDK-8385009 | 2026-05-19 | P2 | [lworld] cherry-pick JDK-8384815 SelectOneKeyOutOfMany and PreferredKey fail after expired test certificate | security-libs | noreg-trivial tier2 tier6 |
| HPI | JDK-8386473 | 2026-06-11 | P2 | DESKeySpec and DESedeKeySpec may throw InvalidKeyException instead of ArrayIndexOutOfBoundsException for Integer.MIN_VALUE offset | security-libs | conformance hgupdate-sync tck-red-27 |
| HPI | JDK-8386466 | 2026-06-11 | P2 | DESedeKeySpec.isParityAdjusted spec permits 8-byte key but RI throws InvalidKeyException | security-libs | conformance hgupdate-sync noreg-doc tck-red-27 |
| HPI | JDK-8386911 | 2026-06-18 | P2 | Crypto benchmark regressions after JDK-8384353 | security-libs | hgupdate-sync noreg-perf perf-regression |
| CACERT | JDK-8392771 | 2026-09-21 | P2 | Add 2 Certum roots | security-libs | cac-add release-note=yes |
| CACERT | JDK-8374886 | 2026-01-09 | P3 | CAInterop.java#microsoftrsa2017 test fails as EE certificate does not specify OCSP responder | security-libs | amazon-interest cac-issue jdk17u-fix-request jdk17u-fix-yes jdk21u-fix-request jdk21u-fix-yes jdk25u-fix-request jdk25u-fix-yes noreg-self |
| CACERT | JDK-8380376 | 2026-03-18 | P3 | jdk/security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java#teliarootcav2 test fails | security-libs | cac-issue |
| HPI | JDK-8382269 | 2026-04-15 | P3 | keytool man page references to "JKS" need to be cleaned up | security-libs | noreg-doc starter |
| HOTSPOT | JDK-8382815 | 2026-04-22 | P3 | C2: Reference intrinsics are broken by shadow "referent" field | hotspot | amazon-interest c2 jdk25u-fix-request jdk25u-fix-yes oracle-triage-27 |
| HOTSPOT | JDK-8383196 | 2026-04-24 | P3 | Shenandoah: Interpreter barriers clobber interpreter registers | hotspot | amazon-interest gc-shenandoah jdk25u-fix-request jdk25u-fix-yes |
| HOTSPOT | JDK-8383391 | 2026-04-27 | P3 | x86: Shenandoah interpreter barriers clobber interpreter registers | hotspot | amazon-interest gc-shenandoah |
| HPI | JDK-8383608 | 2026-04-29 | P3 | Make BinaryEncodable non-exhaustive | security-libs | hgupdate-sync |
| HPI | JDK-8383603 | 2026-04-29 | P3 | Provider$Service.getImplClass() Does Not Support Multi-classloader Environments and Causes Classloader Identity Split for Security Providers | security-libs | reproducer-yes |
| HPI | JDK-8384311 | 2026-05-11 | P3 | sun/security/krb5/KrbKdcRep.java throws NPE | security-libs | bugdb_39350318 findbugs noreg-trivial |
| HPI | JDK-8385854 | 2026-06-03 | P3 | Compilation failure in jdk/test/sun/security/tools/keytool/NssTest.java | security-libs | noreg-self sqebug |
| HPI | JDK-8385978 | 2026-06-04 | P3 | Test javax/net/ssl/SSLSession/TestEnabledProtocols.java failed: java.security.cert.CertificateException: Unable to initialize, java.io.IOException: Too short | security-libs | hgupdate-sync noreg-hard tier2 tier7 |
| LIBS | JDK-8386310 | 2026-06-09 | P3 | JVM SIGSEGV after JDK 25 upgrade due to startup heap/class metadata address layout issue | hotspot | Internal bugdb_39435414 regression |
| HPI | JDK-8386605 | 2026-06-10 | P3 | Missing updated Certum CAs in cacerts | security-libs | dcsrk webbug |
| HPI | JDK-8386600 | 2026-06-12 | P3 | Fix comparison checks in DHasKEM | security-libs | amazon-interest hgupdate-sync jdk25u-fix-request jdk25u-fix-yes noreg-trivial |
| HPI | JDK-8386681 | 2026-06-15 | P3 | Remove RawKeySpec | security-libs | hgupdate-sync noreg-cleanup |
| CACERT | JDK-8387283 | 2026-06-25 | P3 | CAInterop.java#certainlyroote1 and CAInterop.java#certainlyrootr1 tests are skipped because certificate is expired | security-libs | cac-issue noreg-self sqebug |
| CACERT | JDK-8387384 | 2026-06-29 | P3 | CAInterop.java#entrustrootcaec1 and CAInterop.java#entrustrootcag4 tests are skipped because websites are down | security-libs | cac-issue noreg-self sqebug |
| HOTSPOT | JDK-8387580 | 2026-07-01 | P3 | [S390x] OpenJDK build crashes with SIGSEGV in HashMap::resize() | hotspot | oraclejdk-na |
| HPI | JDK-8389911 | 2026-07-17 | P3 | SSLParameters.setNamedGroups() silently ignores unsupported named groups; no error, no detection API; persists in JDK 27-ea after JEP 527 | security-libs | dcs-processed dcsaw reproducer-yes webbug webbug_ns |
| HPI | JDK-8389153 | 2026-07-27 | P3 | MAX_CRL_DOWNLOAD_SIZE should be obtained via privilegedGetOverridable() in JDKs with a SecurityManager | security-libs | sustaining |
| HPI | JDK-8391863 | 2026-09-04 | P3 | Missed usage cases for TLSHandshakeEvent | security-libs | jfr-crypto |
| HPI | JDK-8392782 | 2026-09-21 | P3 | Integer overflow in sun/security/util/BitArray.java constructor causes NegativeArraySizeException | security-libs | findbugs |
| LIBS | JDK-8393195 | 2026-09-29 | P3 | Update Libpng to 1.6.59 | client-libs | 3rdparty CPU27_01-critical-watch jdk27u-fix-SQE-ok-next jdk27u-fix-request jdk27u-fix-yes noreg-other sn_230 |
| HPI | JDK-8393697 | 2026-10-07 | P3 | [21u] Fix issue in backport of 8368514 | security-libs | jdk21u-fix-request jdk21u-fix-yes oraclejdk-na |
| CACERT | JDK-8385585 | 2026-05-28 | P4 | EmSignRootG2CA.java test fails with: couldn't determine EE certificate status | security-libs | amazon-interest cac-external cac-issue jdk27u-fix-SQE-ok-next jdk27u-fix-request jdk27u-fix-yes noreg-self |
| CACERT | JDK-8386371 | 2026-06-10 | P4 | Remove Entrust G4 root CA | security-libs | amazon-interest cac-remv jdk21u-fix-request jdk21u-fix-yes jdk25u-fix-request jdk25u-fix-yes jdk27u-fix-SQE-ok-next jdk27u-fix-request jdk27u-fix-yes release-note=yes |
| L10N | JDK-8386800 | 2026-06-16 | P4 | Update IANA Language Subtag Registry to Version 2026-09-17 | core-libs | lsr |
| CACERT | JDK-8391918 | 2026-09-07 | P4 | Some CAInterop manual tests fail | security-libs | cac-issue noreg-self |
| Issue | Reason |
|---|---|
| JDK-8331126 | The main secondary super cache fix isn't clear to get downported to 17, let alone 11 |
| JDK-8331117 | The main secondary super cache fix isn't clear to get downported to 17, let alone 11 |
| JDK-8215318 | OpenJDK Rejected |
| JDK-8328168 | Epsilon is not important for SE |
| JDK-8328166 | Epsilon is not important for SE |
| JDK-8326705 | Test |
| JDK-8328830 | Test |
| JDK-8333754 | Test |
| JDK-8334441 | Test |
| JDK-8335344 | Test |
| JDK-8328990 | Test |
| JDK-8334105 | Test |
| JDK-8334171 | Test |
| JDK-8328825 | Test |
| JDK-8326360 | We've updated to 1.3.1 already |
| JDK-8328832 | Test |
| JDK-8318696 | Pending on RH Java Team discussion |