--- a/ChangeLog	Fri Sep 30 17:15:52 2016 +0100
+++ b/ChangeLog	Thu Oct 27 05:40:14 2016 +0100
@@ -1,3 +1,25 @@
+2016-10-26  Andrew John Hughes  <gnu.andrew@member.fsf.org>
+
+	Bump to icedtea-2.7.0pre08.
+	* Makefile.am:
+	(CORBA_CHANGESET): Update to icedtea-2.7.0pre08.
+	(JAXP_CHANGESET): Likewise.
+	(JAXWS_CHANGESET): Likewise.
+	(JDK_CHANGESET): Likewise.
+	(LANGTOOLS_CHANGESET): Likewise.
+	(OPENJDK_CHANGESET): Likewise.
+	(CORBA_SHA256SUM): Likewise.
+	(JAXP_SHA256SUM): Likewise.
+	(JAXWS_SHA256SUM): Likewise.
+	(JDK_SHA256SUM): Likewise.
+	(LANGTOOLS_SHA256SUM): Likewise.
+	(OPENJDK_SHA256SUM): Likewise.
+	* NEWS: Updated.
+	* configure.ac: Bump to 2.7.0pre08.
+	* hotspot.map.in: Update to icedtea-2.7.0pre08.
+	* patches/boot/ecj-diamond.patch:
+	Add new case in com.sun.jndi.ldap.LdapClient.
+
 2016-09-24  Andrew John Hughes  <gnu.andrew@member.fsf.org>
 
 	Bump to icedtea-2.7.0pre07.

--- a/Makefile.am	Fri Sep 30 17:15:52 2016 +0100
+++ b/Makefile.am	Thu Oct 27 05:40:14 2016 +0100
@@ -4,19 +4,19 @@
 BUILD_VERSION = b01
 COMBINED_VERSION = $(JDK_UPDATE_VERSION)-$(BUILD_VERSION)
 
-CORBA_CHANGESET = 205f6d4b66fe
-JAXP_CHANGESET = 80897e67a1b3
-JAXWS_CHANGESET = cee876f061b3
-JDK_CHANGESET = 5e3d7e2b2a00
-LANGTOOLS_CHANGESET = e5b9f24eecf6
-OPENJDK_CHANGESET = 0c642b015379
-
-CORBA_SHA256SUM = f0c395f05fc5134044596ce6953fb95c27cef19d3c42acbd8ffa42355f983567
-JAXP_SHA256SUM = 7d357b8815f6f6371db0ea9d6aae1ff0f973a4befaf8ce27dd89533b8291e3fb
-JAXWS_SHA256SUM = 266133740e9b018edb7b004d8923c1f9f3fe8bf778e597d561614d194ba6c98b
-JDK_SHA256SUM = 6122cde4d043c89b6de5333e0b7aeff605dd350fd2ba7e9bc95a1aca25af7051
-LANGTOOLS_SHA256SUM = 37a84be24c950dcfc95c52e4949c1ac2ef67e375022104ee48aa412bc4c8fffd
-OPENJDK_SHA256SUM = 509256e03441e832791589717947af3e9b6d35baeb4dc75a78af79e22534f9fe
+CORBA_CHANGESET = 257b4ab13740
+JAXP_CHANGESET = 36695a562f29
+JAXWS_CHANGESET = 1c02daf6ea6b
+JDK_CHANGESET = 15b47679f447
+LANGTOOLS_CHANGESET = 5f91109e8834
+OPENJDK_CHANGESET = e95e10d502c6
+
+CORBA_SHA256SUM = 8beb63234213c72c8ab47e663439c8e34bf60ffb422cc5150fa181dd4a137dcc
+JAXP_SHA256SUM = 7150afa874f4ca40f2d533313aecfedb1f1b7be4efae34f82142d13f31406bdf
+JAXWS_SHA256SUM = f82d397e25678e40c9b791f9125bfa7906d5d21a3e44f47b2679b4f0de94c36f
+JDK_SHA256SUM = 2e46a9415ff866108ce45ed7080ace6701f39214ff817426b6fd7f61d6343511
+LANGTOOLS_SHA256SUM = 57ab591d78e7d40c539ad18b915f802810d6fb73e02a07423b3852cb0d0ca31d
+OPENJDK_SHA256SUM = 3978c2e61ef8ecb7b1b1d903d2858334b7fe8f3d6f3370907308a62ca2d22938
 
 DROP_URL = http://icedtea.classpath.org/download/drops
 

--- a/NEWS	Fri Sep 30 17:15:52 2016 +0100
+++ b/NEWS	Thu Oct 27 05:40:14 2016 +0100
@@ -14,14 +14,52 @@
 
 New in release 2.7.0 (201X-XX-XX):
 
+* Security fixes
+  - PR3207, RH1367357: lcms2: Out-of-bounds read in Type_MLU_Read()
 * Backports
+  - S6604109, PR3162: javax.print.PrintServiceLookup.lookupPrintServices fails SOMETIMES for Cups
+  - S6907252, PR3162: ZipFileInputStream Not Thread-Safe
+  - S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh failed on 7u45 Embedded linux-ppc*
+  - S8028479, PR3162: runNameEquals still cannot precisely detect if a usable native krb5 is available
+  - S8034057, PR3162: Files.getFileStore and Files.isWritable do not work with SUBST'ed drives (win)
+  - S8038491, PR3162: Improve synchronization in ZipFile.read()
+  - S8038502, PR3162: Deflater.needsInput() should use synchronization
+  - S8059411, PR3162: RowSetWarning does not correctly chain warnings
+  - S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column range validation to isdefinitlyWritable
+  - S8066188, PR3162: BaseRowSet returns the wrong default value for escape processing
+  - S8072466, PR3162: Deadlock when initializing MulticastSocket and DatagramSocket
+  - S8075118, PR3162: JVM stuck in infinite loop during verification
   - S8076221, PR2809, RH1302385: Disable RC4 cipher suites
+  - S8076579, PR3162: Popping a stack frame after exception breakpoint sets last method param to exception
+  - S8078495, PR3162: End time checking for native TGT is wrong
+  - S8078668, PR3162: jar usage string mentions unsupported option '-n'
+  - S8080115, PR3162: (fs) Crash in libgio when calling Files.probeContentType(path) from parallel threads
+  - S8081794, PR3162: ParsePosition getErrorIndex returns 0 for TimeZone parsing problem
+  - S8129957, PR3162: Deadlock in JNDI LDAP implementation when closing the LDAP context
+  - S8130136, PR3162: Swing window sometimes fails to repaint partially when it becomes exposed
+  - S8130274, PR3162: java/nio/file/FileStore/Basic.java fails when two successive stores in an iteration are determined to be equal
+  - S8132551, PR3162: Initialize local variables before returning them in p11_convert.c
+  - S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails after changes for JDK-8080115
+  - S8133666, PR3162: OperatingSystemMXBean reports abnormally high machine CPU consumption on Linux
+  - S8135002, PR3162: Fix or remove broken links in objectMonitor.cpp comments
+  - S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
+  - S8137230, PR3162: TEST_BUG: java/nio/channels/FileChannel/LoopingTruncate.java timed out
+  - S8139373, PR3162: [TEST_BUG] java/net/MulticastSocket/MultiDead.java failed with timeout
+  - S8140249, PR3162: JVM Crashing During startUp If Flight Recording is enabled
+  - S8141491, PR3160, G592292: Unaligned memory access in Bits.c
+  - S8144483, PR3162: One long Safepoint pause directly after each GC log rotation
+  - S8149611, PR3160, G592292: Add tests for Unsafe.copySwapMemory
 * Bug fixes
+  - S8078628, PR3151: Zero build fails with pre-compiled headers disabled
   - PR3128: pax-mark-vm script calls "exit -1" which is invalid in dash
   - PR3131: PaX marking fails on filesystems which don't support extended attributes
   - PR3135: Makefile.am rule stamps/add/tzdata-support-debug.stamp has a typo in add-tzdata dependency
   - PR3141: Pass $(CC) and $(CXX) to OpenJDK build
+  - PR3162: Remove reference to AbstractPlainDatagramSocketImpl.c, removed in 8072466
   - PR3166: invalid zip timestamp handling leads to error building bootstrap-javac
+* AArch64 port
+  - S8157306, PR3209: Random infrequent null pointer exceptions in javac
+  - S8167200: AArch64: Broken stack pointer adjustment in interpreter
 
 New in release 2.6.7 (2016-07-28):
 

--- a/configure.ac	Fri Sep 30 17:15:52 2016 +0100
+++ b/configure.ac	Thu Oct 27 05:40:14 2016 +0100
@@ -1,4 +1,4 @@
-AC_INIT([icedtea], [2.7.0pre07], [distro-pkg-dev@openjdk.java.net])
+AC_INIT([icedtea], [2.7.0pre08], [distro-pkg-dev@openjdk.java.net])
 AM_INIT_AUTOMAKE([1.9 tar-pax foreign])
 AM_MAINTAINER_MODE([enable])
 AC_CONFIG_FILES([Makefile])

--- a/hotspot.map.in	Fri Sep 30 17:15:52 2016 +0100
+++ b/hotspot.map.in	Thu Oct 27 05:40:14 2016 +0100
@@ -1,2 +1,2 @@
 # version type(drop/hg) url changeset sha256sum
-default drop http://icedtea.classpath.org/download/drops/icedtea7/@ICEDTEA_RELEASE@ b6971126dc0f 01f6d8f58e2eb729038f313a0e07c482d85a9cdb093c1aadd3624397a9ee28cb
+default drop http://icedtea.classpath.org/download/drops/icedtea7/@ICEDTEA_RELEASE@ c2a745174c84 1864dbc8106ee30156b5be3a11e7cd6035f26853aff4490c096ef105036c92b0

--- a/patches/boot/ecj-diamond.patch	Fri Sep 30 17:15:52 2016 +0100
+++ b/patches/boot/ecj-diamond.patch	Thu Oct 27 05:40:14 2016 +0100
@@ -9374,3 +9374,15 @@
          List<Thread> threads = new ArrayList<Thread>();
          for (int i = 0; i < threadCount; i++) {
              RandomCollector r = new RandomCollector();
+diff -Nru openjdk-boot.orig/jdk/src/share/classes/com/sun/jndi/ldap/LdapClient.java openjdk-boot/jdk/src/share/classes/com/sun/jndi/ldap/LdapClient.java
+--- openjdk-boot.orig/jdk/src/share/classes/com/sun/jndi/ldap/LdapClient.java	2016-10-27 04:53:38.758268589 +0100
++++ openjdk-boot/jdk/src/share/classes/com/sun/jndi/ldap/LdapClient.java	2016-10-27 04:53:54.718000231 +0100
+@@ -1571,7 +1571,7 @@
+     private void notifyUnsolicited(Object e) {
+         Vector<LdapCtx> unsolicitedCopy;
+         synchronized (unsolicited) {
+-            unsolicitedCopy = new Vector<>(unsolicited);
++            unsolicitedCopy = new Vector<LdapCtx>(unsolicited);
+             if (e instanceof NamingException) {
+                 unsolicited.setSize(0);  // no more listeners after exception
+             }