Bryan I couldn't rebuild 2.2.7 and I saw 2.2.8 was there but it also failed to build. The errors were linked to gss-api because of kerberos ( 8eb73defba72 ). Since it's now in system.base, I think it's better adding it as a dependency rather than disabling gss-api, is that fine ?
I also back-ported a couple of upstream patches.
Please let me know if you agree with these changes since I made them post-approval.