TestNG updates have historically brought new system properties and they may require adjusting security policy files in some tests.

For example some JAXP tests seem to require

    addPermission(new PropertyPermission("testng.thread.affinity" "read"));

in JAXPPolicyManager.java with jtreg 7.