17.0.7 with Eclipse OpenJ9 v0.38.0
Branch name: v0.38.0-release
Tag: openj9-0.38.0
For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.38.0
OpenSSL 1.1.1, which is bundled in builds on Windows and Mac, is updated to 3f499b2 which includes fixes for CVE-2023-0464, CVE-2023-0465, CVE-2023-0466.
The HarfBuzz update resolves CVE-2023-25193.
OpenJ9 related changes
927b34f..9d7a231
9d7a231 (0.38) Revert "Add additional debug message to show contents of authentication reply message" Peter Shipton #207
054bee5 Merge jdk-17.0.7+7 and OpenJ9 changes to 0.38 J9 Build #204
9d3222f Add additional debug message to show contents of authentication reply message Kostas Tsiounis #197
8f9535a Fix CVE-2023-2004 in freetype 2.12.1 Peter Shipton #203
facc368 Merge Create distinct openj9-licenses and openj9-notices to 0.38 Keith W. Campbell #202
b66a336 Create distinct openj9-licenses and openj9-notices Peter Shipton #201
e647e47 Merge 17.0.7+6 to 0.38 J9 Build #200
acb3b6c Merge Allow any text without whitespace for the openssl version to 0.38 Keith W. Campbell #199
b60da71 Allow any text without whitespace for the openssl version Peter Shipton #198
2be39ca Merge Support For AES/GCM Cipher For FIPS Mode to 0.38 Keith W. Campbell #196
fc8b0b9 Support For AES/GCM Cipher For FIPS Mode Tao Liu #195
267a5a7 Merge "Java Restricted Security Mode" to 0.38 Keith W. Campbell #194
f019f3c Java Restricted Security Mode Tao Liu #193
1489310 Merge Harfbuzz update to 0.38 Keith W. Campbell #192
ca36d8c Port harfbuzz - Avoid O(n^2) behavior in mark-attachment Peter Shipton #191
d8badc2 Merge latest CRIU changes to 0.38 Tobi #190
7c20b28 Enable CRIU by default on Linux on Z Rahil Shah #186
f8c4e46 Cache security algorithms for CRIU startup Jason Katonica #188
f035884 Merge OpenSSL memory leak fix to 0.38 Keith W. Campbell #187
d214bb7 Fix memory leaks related to openssl EC pathways Jason Katonica #185
842d6ee Merge jdk-17.0.7+3, +4 and OpenSSL Version granularity update to 0.38 Keith W. Campbell #184
2fa3123 Expand OpenSSL Version granularity WilburZjh #183
94a1148 Remove obsolete loadedProps variable from java/security/Security Peter Shipton #182
77e36f9 OpenJ9 doesn't support Perf, don't try to use it Peter Shipton #181
f8fef7d tokenLabel support and EC fixes for Z platform Bob Du #180
e054b74 Update dependencies for running Java preprocessor Keith W. Campbell #179
21326ec Lazily initialize native crypto libraries Jason Feng #157
a70a814 Update export/import of plain keys in FIPS Tao Liu #170
807b05c Add OpenJ9PropsExt properties for docker.support Jason Feng #178
9de294e Ensure test-image-openj9 target fails when java -version fails Devin Papineau #177
0035561 Add JPP tags at GensrcCharsetMapping.gmk Jason Feng #175
ce0e2f4 Fix problem building openssl when ccache is enabled Keith W. Campbell #173
e80551c Correct padding of struct layouts Keith W. Campbell #171
917226c Enable CRIU on x86 Tobi Ajila #161
971af45 [Jtreg/FFI] Backport layout() for struct from JDK19 to JDK17 ChengJin01 #166