--- a/ChangeLog	Wed Dec 05 19:32:37 2018 +0000
+++ b/ChangeLog	Thu Dec 20 04:39:13 2018 +0000
@@ -1,3 +1,28 @@
+2018-12-19  Andrew John Hughes  <gnu_andrew@member.fsf.org>
+
+	Bump to icedtea-3.10.0.
+	* Makefile.am:
+	(CORBA_CHANGESET): Update to icedtea-3.10.0 tag.
+	(JAXP_CHANGESET): Likewise.
+	(JAXWS_CHANGESET): Likewise.
+	(JDK_CHANGESET): Likewise.
+	(LANGTOOLS_CHANGESET): Likewise.
+	(OPENJDK_CHANGESET): Likewise.
+	(NASHORN_CHANGESET): Likewise.
+	(CORBA_SHA256SUM): Likewise.
+	(JAXP_SHA256SUM): Likewise.
+	(JAXWS_SHA256SUM): Likewise.
+	(JDK_SHA256SUM): Likewise.
+	(LANGTOOLS_SHA256SUM): Likewise.
+	(OPENJDK_SHA256SUM): Likewise.
+	(NASHORN_SHA256SUM): Likewise.
+	* NEWS: Updated.
+	* acinclude.m4,
+	(IT_DETERMINE_VERSION): Update JDK_UPDATE_VERSION
+	to 191 and BUILD_VERSION to b12.
+	* configure.ac: Bump to 3.10.0.
+	* hotspot.map.in: Update to icedtea-3.10.0 tag.
+
 2018-11-20  Andrew John Hughes  <gnu_andrew@member.fsf.org>
 
 	PR3625: arc_priority representation creates an

--- a/Makefile.am	Wed Dec 05 19:32:37 2018 +0000
+++ b/Makefile.am	Thu Dec 20 04:39:13 2018 +0000
@@ -1,20 +1,20 @@
 # Dependencies
 
-CORBA_CHANGESET = 73302d4aecc4
-JAXP_CHANGESET = 163ce6497051
-JAXWS_CHANGESET = c4193b79652e
-JDK_CHANGESET = 48f9c0c9d8c4
-LANGTOOLS_CHANGESET = c9f44385be7e
-OPENJDK_CHANGESET = 2e8a34249a2d
-NASHORN_CHANGESET = 568538a9f1d8
-
-CORBA_SHA256SUM = 19f2647be9ba58f6936622618e0b7489a3dff64c8789a593ff0478bfc50927ed
-JAXP_SHA256SUM = bfee726fe2f5298324e610d7278a5a8da3756bd827aa885136c207db0e162c4b
-JAXWS_SHA256SUM = e7dd755385099e11f25a6cfc5697203cad9f54be601a1213f6383eb698112863
-JDK_SHA256SUM = afaa7798835a8f5cfccde971e3c32c8052893ff2d9711330962b894c58488dd3
-LANGTOOLS_SHA256SUM = 143d9b614fc3b6bb876ffc25b99d06fa6300b041b027fd6c384b2003d652eb0f
-OPENJDK_SHA256SUM = 4d432def4044e8d952ac1e61a1643ca345b0a4dd43908cda10ecf2c287032826
-NASHORN_SHA256SUM = a4ea1ddc9f8b665187de74e7cac9d83009d6ec34d7b73dc5c46645b69b428170
+CORBA_CHANGESET = 8249f00d6619
+JAXP_CHANGESET = a1b060ef4f06
+JAXWS_CHANGESET = c0f01861a7fd
+JDK_CHANGESET = 6e67500d0ed8
+LANGTOOLS_CHANGESET = 7036a6fa432e
+OPENJDK_CHANGESET = 90de74e82bfb
+NASHORN_CHANGESET = 6cf21321f367
+
+CORBA_SHA256SUM = 69200a5f46b917f5ffcdb64729e6871cdbe152d767a569e18be3725b45536a32
+JAXP_SHA256SUM = 79277071c09112f9383de9b0fd813a5e135e4525562890c17ed44ca0d90dbcfb
+JAXWS_SHA256SUM = 92f3cb8a4f615e962fcb6dd40e81dc3134741dbb0dba1556527604d15d765786
+JDK_SHA256SUM = c29b268f08c5615904098126458c5ccc32d9d31457482b97d2ed70b94b79cab5
+LANGTOOLS_SHA256SUM = f2786cd6963696cb989fcd27054505ec74c0f2e31a485f5550ddbe3ad065a917
+OPENJDK_SHA256SUM = fc760130ce1c6dc2379f5b219615344ee25d6380ea24813da53fe034eeb4d156
+NASHORN_SHA256SUM = 9ed937e497e30344a2ee4a938cdec81b5b79642f3c7106f3abf911318fdda99d
 
 HS_TYPE = "`$(AWK) 'version==$$1 {print $$2}' version=$(HSBUILD) $(abs_top_builddir)/hotspot.map`"
 HS_URL = "`$(AWK) 'version==$$1 {print $$3}' version=$(HSBUILD) $(abs_top_builddir)/hotspot.map`"

--- a/NEWS	Wed Dec 05 19:32:37 2018 +0000
+++ b/NEWS	Thu Dec 20 04:39:13 2018 +0000
@@ -13,13 +13,67 @@
 New in release 3.10.0 (2018-10-XX):
 
 * Security fixes
+  - S8194534, CVE-2018-3136: Manifest better support
+  - S8194546: Choosier FileManagers
+  - S8195868: Address Internet Addresses
+  - S8195874: Improve jar specification adherence
+  - S8196897: Improve PRNG support
+  - S8196902, CVE-2018-3139: Better HTTP redirection support
+  - S8199177, CVE-2018-3149: Enhance JNDI lookups
+  - S8199226, CVE-2018-3169: Improve field accesses
+  - S8201756: Improve cipher inputs
+  - S8202613, CVE-2018-3180: Improve TLS connections stability
+  - S8202936, CVE-2018-3183: Improve script engine support
+  - S8203654: Improve cypher state updates
+  - S8204497: Better formatting of decimals
+  - S8205361, CVE-2018-3214: Better RIFF reading support
+  - S8208353, CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35
   - PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile
+* New features
+  - PR3655: Allow use of system crypto policy to be disabled by the user
+* Import of OpenJDK 8 u191 build 12
+  - S8033251: Use DWARF debug symbols for Linux 32-bit as default
+  - S8049834: Two security tools tests do not run with only JRE
+  - S8074462: Handshake messages can be strictly ordered
+  - S8130132: jarsigner should emit warning if weak algorithms or keysizes are used
+  - S8142927: Feed some text to STDIN in ProcessTools.executeProcess()
+  - S8146377: test/sun/security/tools/jarsigner/concise_jarsigner.sh failing
+  - S8152974: AWT hang occurrs when sequenced events arrive out of sequence
+  - S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh timed out
+  - S8164480: Crash with assert(handler_address == SharedRuntime::compute_compiled_exc_handler(..) failed: Must be the same
+  - S8168628: (fc) SIGBUS when extending file size to map it
+  - S8171452: (ch) linux io_util_md: Operation not supported exception after 8168628
+  - S8172529: Use PKIXValidator in jarsigner
+  - S8180289: jarsigner treats timestamped signed jar invalid after the signer cert expires
+  - S8189762: [TESTBUG] Create tests for JDK-8146115 container awareness and resource configuration
+  - S8190674: sun/security/tools/jarsigner/TimestampCheck.java failed with java.nio.file.NoSuchFileException: ts2.cert
+  - S8193892: Impact of noncloneable MessageDigest implementation
+  - S8196663: [TESTBUG] test/compiler/loopopts/TestCMovSplitThruPhi.java fails on 32 bit Java
+  - S8197518: Kerberos krb5 authentication: AuthList's put method leads to performance issue
+  - S8202478: Backout JDK-8152974
+  - S8204667: Resources not freed on exception
+  - S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
+  - S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
+  - S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
+  - S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
+  - S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
+  - S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
+  - S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
+  - S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
+  - S8207336: Build failure in JDK8u on Windows after fix 8207260
+  - S8208350: Disable all DES cipher suites
+  - S8208660: JDK 8u191 l10n resource file update
+  - S8208754: The fix for JDK-8194534 needs updates
+  - S8210431: Complete backport of libpng 1.6.35 TPRM
+  - S8211107: LDAPS communication failure with jdk 1.8.0_181
+  - S8211731: Reconsider default option for ClassPathURLCheck change done in JDK-8195874
 * Backports
   - PR3646: Backed out changeset 6e3f4784affc (S4890063/PR2304/RH1214835)
   - S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in SunPKCS11 provider
   - S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
   - S8164920, PR3574, RH1498936: ppc: enhancement of CRC32 intrinsic
   - S8172850, PR3643, RH1640127: Anti-dependency on membar causes crash in register allocator due to invalid instruction scheduling
+  - S8202261, PR3638: (fc) FileChannel.map and RandomAccessFile.setLength should not preallocate space
   - S8209639, PR3643, RH1640127: assert failure in coalesce.cpp: attempted to spill a non-spillable item
 * SystemTap
   - PR3625: arc_priority representation creates an implicit limit on character sequence within regexp
@@ -171,6 +225,11 @@
   - Fix x86_32 build
   - JDK8u: Silence compilation warnings on implicit type conversion
   - Move JNI Weak References workaround to Shenandoah-specific root processor
+* AArch64 port
+  - S8155627, PR3651: Enable SA on AArch64
+  - S8207838, PR3666: AArch64: Float registers incorrectly restored in JNI call
+  - S8209415, PR3666: Fix JVMTI test failure HS202
+  - S8211064, PR3666: [AArch64] Interpreter and c1 don't correctly handle jboolean results in native calls
 
 New in release 3.9.0 (2018-09-27):
 

--- a/acinclude.m4	Wed Dec 05 19:32:37 2018 +0000
+++ b/acinclude.m4	Thu Dec 20 04:39:13 2018 +0000
@@ -2089,8 +2089,8 @@
   AC_MSG_CHECKING([which branch and release of IcedTea is being built])
   JAVA_VER=1.8.0
   JAVA_VENDOR=openjdk
-  JDK_UPDATE_VERSION=181
-  BUILD_VERSION=b13
+  JDK_UPDATE_VERSION=191
+  BUILD_VERSION=b12
   COMBINED_VERSION=${JDK_UPDATE_VERSION}-${BUILD_VERSION}
   OPENJDK_VER=${JAVA_VER}_${COMBINED_VERSION}
   ICEDTEA_RELEASE=$(echo ${PACKAGE_VERSION} | sed 's#pre.*##')

--- a/configure.ac	Wed Dec 05 19:32:37 2018 +0000
+++ b/configure.ac	Thu Dec 20 04:39:13 2018 +0000
@@ -1,4 +1,4 @@
-AC_INIT([icedtea], [3.10.0pre01], [distro-pkg-dev@openjdk.java.net])
+AC_INIT([icedtea], [3.10.0], [distro-pkg-dev@openjdk.java.net])
 AC_CANONICAL_HOST
 AC_CANONICAL_TARGET
 AM_INIT_AUTOMAKE([1.9 tar-pax foreign])

--- a/hotspot.map.in	Wed Dec 05 19:32:37 2018 +0000
+++ b/hotspot.map.in	Thu Dec 20 04:39:13 2018 +0000
@@ -1,4 +1,4 @@
 # version type(drop/hg) url changeset sha256sum
-default drop http://icedtea.classpath.org/download/drops/icedtea8/@ICEDTEA_RELEASE@ ccf1620f18d3 4536e32430d74d4c34d9b0852f27ee65753cd2c9c7b1f30deeb706f9c61122c9
+default drop http://icedtea.classpath.org/download/drops/icedtea8/@ICEDTEA_RELEASE@ 4e4ead43a282 ce71e125b3ac598f8a46bcbdd2c9e5727beeee15c1e081b06d49aa5346afb897
 shenandoah drop http://icedtea.classpath.org/download/drops/icedtea8/@ICEDTEA_RELEASE@ dba8871f90b6 1e8332cdb76ecd56d43b62ca1296a55219377c76d18874ab1eeb04644499ca5d
 aarch32 drop http://icedtea.classpath.org/download/drops/icedtea8/@ICEDTEA_RELEASE@ 891d70e93fb0 af4e52f9ce43d9b5856465bb2f20a3c20d9a8dad26630858641b34be4ecb0af9