--- a/ChangeLog	Wed Jul 17 22:15:32 2019 +0100
+++ b/ChangeLog	Thu Jul 18 02:38:52 2019 +0100
@@ -1,3 +1,28 @@
+2019-07-17  Andrew John Hughes  <gnu_andrew@member.fsf.org>
+
+	Bump to icedtea-3.13.0.
+	* Makefile.am:
+	(CORBA_CHANGESET): Update to icedtea-3.13.0 tag.
+	(JAXP_CHANGESET): Likewise.
+	(JAXWS_CHANGESET): Likewise.
+	(JDK_CHANGESET): Likewise.
+	(LANGTOOLS_CHANGESET): Likewise.
+	(OPENJDK_CHANGESET): Likewise.
+	(NASHORN_CHANGESET): Likewise.
+	(CORBA_SHA256SUM): Likewise.
+	(JAXP_SHA256SUM): Likewise.
+	(JAXWS_SHA256SUM): Likewise.
+	(JDK_SHA256SUM): Likewise.
+	(LANGTOOLS_SHA256SUM): Likewise.
+	(OPENJDK_SHA256SUM): Likewise.
+	(NASHORN_SHA256SUM): Likewise.
+	* NEWS: Updated.
+	* acinclude.m4:
+	(IT_DETERMINE_VERSION): Set BUILD_VERSION to b10
+	and MILESTONE to fcs.
+	* configure.ac: Bump to 3.13.0.
+	* hotspot.map.in: Update to icedtea-3.13.0 tag.
+
 2019-07-16  Andrew John Hughes  <gnu_andrew@member.fsf.org>
 
 	PR3743: Support EA builds

--- a/Makefile.am	Wed Jul 17 22:15:32 2019 +0100
+++ b/Makefile.am	Thu Jul 18 02:38:52 2019 +0100
@@ -1,20 +1,20 @@
 # Dependencies
 
-CORBA_CHANGESET = 1c3cdc66dde5
-JAXP_CHANGESET = 9862aa380ee4
-JAXWS_CHANGESET = 4677dd9c02e9
-JDK_CHANGESET = 5e1641ac146b
-LANGTOOLS_CHANGESET = 78399e0f6ae4
-OPENJDK_CHANGESET = abf5011267ae
-NASHORN_CHANGESET = a4ff0302c55d
-
-CORBA_SHA256SUM = e5caa3a60669afaab23a9ef4d77bea4f63c8f711f55f9e1343ae3b0ecb71e33c
-JAXP_SHA256SUM = 81a99546a810cf5955a1bc80207a524facdc7b2fa0e586fbab68a6ca647260ed
-JAXWS_SHA256SUM = eda322bf7de10bde80e771e4a452a20ddf0dbab35ec601dba5a3e4ddb3b5ee5e
-JDK_SHA256SUM = 04f89d6d0927e7034b642b51569947c3a8090ee79de01c208ae23bde4eb50fc0
-LANGTOOLS_SHA256SUM = 652e3412ee64491614dc2c6765e35999010b8f3e1635b9d5298e1946487e6fbc
-OPENJDK_SHA256SUM = b115085d6bd2c042ad55f31a127bf524d883997d906ce07e1c32cf0183542236
-NASHORN_SHA256SUM = f0eae99912b46a1021e705b5705cd5bf8a2dba590cdebb7c73d844e06b7f1e13
+CORBA_CHANGESET = 24a4cc7d7de6
+JAXP_CHANGESET = 7f4569c121d6
+JAXWS_CHANGESET = 1c6f4ebde697
+JDK_CHANGESET = 51afcf17e031
+LANGTOOLS_CHANGESET = 2008b12a91d1
+OPENJDK_CHANGESET = c8f86954855a
+NASHORN_CHANGESET = 69b1da223d93
+
+CORBA_SHA256SUM = 552827f8c7b78e442bffa58989821949d8ab07dba5436420b5a53b5a25624e6b
+JAXP_SHA256SUM = bca5bcaada48e24e1cc968682bf953e4ea4c54a116155e36c9176534e6bc9e38
+JAXWS_SHA256SUM = 70982e8eaa599be615d7464ea619f5d8f02651c55445bca9ff15b96aecc941c5
+JDK_SHA256SUM = 77508213af438f96a92a1764d1dcff3ce2d8b96dc90962b34ae372a9ed3154cf
+LANGTOOLS_SHA256SUM = f1b3cb9a28fbd9c90819370f4ee00863feb02ecce064d429c4a9d6565f78faab
+OPENJDK_SHA256SUM = 8509e143bb996b9cab1b3fb06a8a490215d9418d3c1a3abef56f900532584ccd
+NASHORN_SHA256SUM = 5ca970b7408e8b42f1bdd43a6a22564cbb46a083e022ca2a0598a0f879553138
 
 HS_TYPE = "`$(AWK) 'version==$$1 {print $$2}' version=$(HSBUILD) $(abs_top_builddir)/hotspot.map`"
 HS_URL = "`$(AWK) 'version==$$1 {print $$3}' version=$(HSBUILD) $(abs_top_builddir)/hotspot.map`"

--- a/NEWS	Wed Jul 17 22:15:32 2019 +0100
+++ b/NEWS	Thu Jul 18 02:38:52 2019 +0100
@@ -12,6 +12,24 @@
 
 New in release 3.13.0 (2019-07-XX):
 
+* Security fixes
+  - S8191073: JpegImageReader throws IndexOutOfBoundsException when trying to read image data from tables-only image
+  - S8208698, CVE-2019-2745: Improved ECC Implementation
+  - S8212328, CVE-2019-2745: Exceptional throw cases
+  - S8213431, CVE-2019-2766: Improve file protocol handling
+  - S8213432, CVE-2019-2769: Better copies of CopiesList
+  - S8216381, CVE-2019-2786: More limited privilege usage
+  - S8217563: Improve realm maintenance
+  - S8218863: Better endpoint checks
+  - S8218873: Improve JSSE endpoint checking
+  - S8218876, CVE-2019-2745: Improve PNG support options
+  - S8219018: Adjust positions of glyphs
+  - S8219020: Table alternate substitutions
+  - S8219775: Certificate validation improvements
+  - S8220192: Better outlook for SecureRandom
+  - S8220517: Enhanced GIF support
+  - S8221518, CVE-2019-2816: Normalize normalization
+  - S8223511, CVE-2019-2842: Extended AES support
 * New features
   - PR3743: Support EA builds
 * Import of OpenJDK 8 u222 build 01
@@ -55,6 +73,113 @@
   - S8221789: make reconfigure broken (jdk8u only)
   - S8222965: Backport of JDK-8129988 broke the build
   - S8222975: Fix 'release' file to reflect actual repo checkin used to compile JDK
+* Import of OpenJDK 8 u222 build 02
+  - S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to verify the dump
+  - S8151539: Remove duplicate AlwaysTrueClosures
+  - S8176100: [REDO][REDO] G1 Needs pre barrier on dereference of weak JNI handles
+  - S8210416: [linux] Poor StrictMath performance due to non-optimized compilation
+  - S8217315: Proper units should print more significant digits
+  - S8218674: HTML Tooltip with "img=src" on component doesn't show
+* Import of OpenJDK 8 u222 build 03
+  - S7100957: SOCKS proxying does not work with IPv6 connections
+  - S7102541: RFE: os::set_native_thread_name() cleanups
+  - S8144332: HSDB could not terminate when close button is pushed.
+  - S8151322: Implement os::set_native_thread_name() on Solaris
+  - S8154387: Parallel unordered Stream.limit() tries to collect 128 elements even if limit is less
+  - S8189131: Open-source the Oracle JDK Root Certificates
+  - S8189949: Remove Baltimore Cybertrust Code Signing CA
+  - S8191031: Remove several Symantec Root CAs
+  - S8191844: Remove SECOM root (secomevrootca1)
+  - S8195774: Add Entrust root certificates
+  - S8195793: Remove GTE CyberTrust Global Root
+  - S8196141: Add GoDaddy root certificates
+  - S8199779: Add T-Systems, GlobalSign and Starfield services root certificates
+  - S8204923: Restore Symantec root verisignclass2g2ca
+  - S8209506: Add Google Trust Services GlobalSign root certificates
+  - S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled without optimization
+  - S8210432: Add additional TeliaSonera root certificate
+  - S8213213: Remove src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
+  - S8214770: java/time/test/java/time/format/TestNonIsoFormatter.java failed in non-english locales.
+  - S8216577: Add GlobalSign's R6 Root certificate
+  - S8218152: [javac] fails and exits with no error if a bad annotation processor provided
+  - S8222136: Remove two Comodo root CA certificates that are expiring
+  - S8222137: Remove T-Systems root CA certificate
+  - S8223555: Cleanups in cacerts tests
+  - S8223664: Add jtreg tests for 8223528, backport to jdk8u of 8176100
+* Import of OpenJDK 8 u222 build 04
+  - S8158232: PPC64: improve byte, int and long array copy stubs by using VSX instructions
+  - S8190974: Parallel stream execution within a custom ForkJoinPool should obey the parallelism
+  - S8203190: SessionId.hashCode generates too many collisions
+  - S8223499: Remove two DocuSign root certificates that are expiring
+  - S8223883: Fix jni.cpp copyright date after 8223528
+* Import of OpenJDK 8 u222 build 05
+  - S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/DashZeroWidth.java not on EDT
+  - S8044289: In ImageIO.write() and ImageIO.read() null stream is not handled properly.
+  - S8055705: Rename UnixPrintServiceLookup and Win32PrintServiceLookup as a platform neutral class name
+  - S8059575: JEP-JDK-8043304: Test task: Tiered Compilation level transition tests
+  - S8075939: Stream.flatMap() causes breaking of short-circuiting of terminal operations
+  - S8143097: java/net/ipv6tests/UdpTest.java fails intermittently with "checkTime failed: got 1998 expected 4000"
+  - S8151226: Mark UdpTest.java as intermittently failing
+  - S8166684: PPC64: implement intrinsic code with vector instructions for Unsafe.copyMemory()
+  - S8185969: PPC64: Improve VSR support to use up to 64 registers
+  - S8193830: Xalan Update: Xalan Java 2.7.2
+  - S8196775: java/net/Socket/asyncClose/Race.java failed intermittently on Windows with ConnectException: Connection refused
+  - S8202414: Unsafe write after primitive array creation may result in array length change
+  - S8202651: Test ComodoCA.java fails
+  - S8204929: Fonts with embedded bitmaps are not always rotated
+  - S8210886: Remove references in xwindows.md to non-existent files.
+  - S8210985: Update the default SSL session cache size to 20480
+  - S8213183: InputMethod cannot be used after its restarting
+  - S8214765: All TrayIcon MessageType icons does not show up with gtk3 option set
+  - S8218020: Back out accidental changes that belong elsewhere
+  - S8218020: Fix version number in mesa.md 3rd party legal file
+  - S8220495: Update GIFlib library to the 5.1.8
+  - S8222670: pathological case of JIT recompilation and code cache bloat
+  - S8223537: testlibrary_tests/ctw/ClassesListTest.java fails with Agent timeout frequently
+  - S8224727: Problem list test security/infra/java/security/cert/CertPathValidator/certification/ActalisCA.java
+  - S8225065: Revert 8221166 (8u backport of 8048782)
+* Import of OpenJDK 8 u222 build 06
+  - S8173910: (fs) java/nio/file/FileSystem/Basic.java should conditionally check FileStores
+  - S8176237: (fs) java/nio/file/FileStore/Basic.java should conditionally check FileStores
+  - S8202884: SA: Attach/detach might fail on Linux if debugee application create/destroy threads during attaching
+* Import of OpenJDK 8 u222 build 07
+  - S8153732: Windows remote printer changes do not reflect in lookupPrintServices()
+  - S8212202: [Windows] Exception if no printers are installed.
+  - S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard to use
+  - S8221412: lookupPrintServices() does not always update the list of Windows remote printers
+  - S8225716: G1 GC: Undefined behaviour in G1BlockOffsetTablePart::block_at_or_preceding
+* Import of OpenJDK 8 u222 build 08
+  - S8040211: Update LSR datafile for BCP 47
+  - S8177472: Remove hard-coded IANA Subtag Registry map in LocaleEquivalentMap.java
+  - S8181594: Efficient and constant-time modular arithmetic
+  - S8182999: SunEC throws ProviderException on invalid curves
+  - S8187946: Support ISO 4217 Amendments 163 and 164
+  - S8191404: Upgrading JDK with latest available LSR data from IANA.
+  - S8193552: ISO 4217 amendment 165
+  - S8195478: sun/text/resources/LocaleDataTest.java fails with java.lang.Exception
+  - S8201317: X25519/X448 code improvements
+  - S8202026: ISO 4217 amendment 166
+  - S8203228: Branch-free output conversion for X25519 and X448
+  - S8203872: Upgrading JDK with latest available LSR data from IANA.
+  - S8204269: ISO 4217 amendment 167
+  - S8208648: ECC Field Arithmetic Enhancements
+  - S8208746: ISO 4217 Amendment #168 update
+  - S8209775: ISO 4217 Amendment #169 update
+  - S8210153: localized currency symbol of VES
+  - S8213294: Upgrade IANA LSR data
+  - S8214935: Upgrade IANA LSR data
+  - S8219781: Localized names for Japanese era Reiwa in COMPAT provider
+* Import of OpenJDK 8 u222 build 09
+  - S8135248: Add utility methods to check indexes and ranges
+  - S8142493: Utility methods to check indexes and ranges doesn't specify behavior when function produces null
+  - S8146458: Improve exception reporting for Objects.checkIndex/checkFromToIndex/checkFromIndexSize
+  - S8155794: Move Objects.checkIndex BiFunction accepting methods to an internal package
+  - S8179098: Crypto AES/ECB encryption/decryption performance regression (introduced in jdk9b73)
+* Import of OpenJDK 8 u222 build 10
+  - S8157792: After Integrating tzdata2016d the test/sun/util/calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and "Asia/Qyzylorda" Timezones
+  - S8215982: (tz) Upgrade time-zone data to tzdata2018i
+  - S8224560: (tz) Upgrade time-zone data to tzdata2019a
+  - S8225580: tzdata2018i integration causes test failures on jdk-13
 * Shenandoah
   - [backport] 8210879: ClassLoaderStatsClosure does raw oop comparison
   - [backport] 8216973: Kick up cleanup phases in the right places
@@ -229,6 +354,12 @@
   - JDK8u-only: Use WB-based acmp barrier
   - Prettify Shenandoah JDK 8 logging
   - ShenandoahSATBBufferSize cannot be size_t in 8u
+* AArch64 port
+  - S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre barrier on dereference of weak JNI handles
+  - S8186325, PR3745: AArch64: jtreg test hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
+  - S8224671, PR3745: AArch64: mauve System.arraycopy test failure
+  - S8224828, PR3745: aarch64: rflags is not correct after safepoint poll
+  - S8224880, PR3745: AArch64: java/javac error with AllocatePrefetchDistance
 
 New in release 3.12.0 (2019-05-01):
 

--- a/acinclude.m4	Wed Jul 17 22:15:32 2019 +0100
+++ b/acinclude.m4	Thu Jul 18 02:38:52 2019 +0100
@@ -2090,8 +2090,8 @@
   JAVA_VER=1.8.0
   JAVA_VENDOR=openjdk
   JDK_UPDATE_VERSION=222
-  BUILD_VERSION=b01
-  MILESTONE=ea
+  BUILD_VERSION=b10
+  MILESTONE=fcs
   if test "x${MILESTONE}" = "xfcs"; then
     COMBINED_VERSION=${JDK_UPDATE_VERSION}-${BUILD_VERSION}
   else

--- a/configure.ac	Wed Jul 17 22:15:32 2019 +0100
+++ b/configure.ac	Thu Jul 18 02:38:52 2019 +0100
@@ -1,4 +1,4 @@
-AC_INIT([icedtea], [3.13.0pre01], [distro-pkg-dev@openjdk.java.net])
+AC_INIT([icedtea], [3.13.0], [distro-pkg-dev@openjdk.java.net])
 AC_CANONICAL_HOST
 AC_CANONICAL_TARGET
 AM_INIT_AUTOMAKE([1.9 tar-pax foreign])

--- a/hotspot.map.in	Wed Jul 17 22:15:32 2019 +0100
+++ b/hotspot.map.in	Thu Jul 18 02:38:52 2019 +0100
@@ -1,4 +1,4 @@
 # version type(drop/hg) url changeset sha256sum
-default drop https://icedtea.classpath.org/download/drops/icedtea8/@ICEDTEA_RELEASE@ d861794ddc0f 08e64cc3a8b7066c0846883462fd0f680d35abfc811b65cb75df4d1a0d08dec6
+default drop https://icedtea.classpath.org/download/drops/icedtea8/@ICEDTEA_RELEASE@ 3ffd5d889945 2bfdf42cd972f5f7acfc4ca6fa70790d0659da97ffb8f8526c1b741c0cd55dbd
 shenandoah drop https://icedtea.classpath.org/download/drops/icedtea8/@ICEDTEA_RELEASE@ a33c11783e6b a9a12280e16c9a84c8315aeb8d67a3843f2f3110509cb10292af5cf63b78fb7e
 aarch32 drop https://icedtea.classpath.org/download/drops/icedtea8/@ICEDTEA_RELEASE@ 57f4048a925b 921202baed30726dc833c94817e07a4baa7d3b1e9129af032b09bd7f0e3bcfd1