8u432 with Eclipse OpenJ9 v0.48.0

Branch name: v0.48.0-release
Tag: openj9-0.48.0

For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.48.0

OpenSSL 3.0, bundled in builds on Windows and Mac, is updated to 3.0.15 plus CVE-2024-9143.

OpenJ9 related changes

8f08226..3068665
81bbcf8 Disable use of zlibNX by default Peter Shipton #768
6c05e98 Allow RestrictedSecurity property extension from default values Kostas Tsiounis #767
97f56a1 Select the appropriate OpenSSL build target on AIX Keith W. Campbell #766
82f7d54 Check RestrictedSecurity profile for errors Tao Liu #765
d32abdb Remove redundant exports on Windows Keith W. Campbell #764
3f47073 Ensure static fields set during signed jar process Jason Katonica #763
dba8402 Remove unused variables in NativeCrypto.c Kostas Tsiounis #762
f983f5a Merge master jdk8u432-b03 into openj9-staging Jason Feng #761
04bc2f5 Merge master jdk8u432-b02 into openj9-staging Jason Feng #760

8u422 with Eclipse OpenJ9 v0.46.1

Branch name: v0.46.1-release
Tag: openj9-0.46.1

For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.46.1

OpenSSL 3.0, bundled in builds on Windows and Mac, is updated to 3.0.15.

OpenJ9 related changes

a75ff73..8f08226

8u422 with Eclipse OpenJ9 v0.46.0

Branch name: v0.46.0-release
Tag: openj9-0.46.0

For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.46.0

OpenSSL 3.0, bundled in builds on Windows and Mac, is updated to 3.0.14.

OpenJ9 related changes

3f438d7..a75ff73
6bfd83e Correct paths in .copyrightignore Keith W. Campbell #757
667e0c4 Support provider fully-qualified class name in Restricted Security mode Tao Liu #758
8ef2d4c Allow extension of RestrictedSecurity profiles Kostas Tsiounis #756
702bc38 Get native EC key pointer during init through ECUtil instead of key impl Kostas Tsiounis #755
d5a8e3b Add additional checks to NativeECDHKeyAgreement to match upstream Kostas Tsiounis #754
d8681e9 Throw OOM if array size exceeds int maximum Theresa Mammarella #753
4cadd32 Add support for ECDSA signatures using native OpenSSL library Kostas Tsiounis #752
9157131 Temporarily restore support for old openssl options Keith W. Campbell #751
4092cb2 Merge master jdk8u422-b01 into openj9-staging Jason Feng #750
140062d Update get_source.sh Keith W. Campbell #749
6bc6c60 Merge scripts to fetch or update source repositories Keith W. Campbell #748
9fd4871 Check setting of security property when in FIPS mode Kostas Tsiounis #747
4b56a88 Add ExtendedMasterSecret support in SunPKCS11 provider Tao Liu #744
a5e1767 Add isMD5Available to mapfile Kostas Tsiounis #746
4ac7269 Support explicit use of '--enable-jitserver' on all supported platforms Keith W. Campbell #745
cc81361 Add support for native MD5 digest Kostas Tsiounis #743

8u412 with Eclipse OpenJ9 v0.44.0

Branch name: v0.44.0-release
Tag: openj9-0.44.0

For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.44.0

OpenSSL 3.0, bundled in builds on Windows and Mac, is updated to 3.0.13 + CVE-2024-2511 + CVE-2024-4603.

OpenJ9 related changes

0fa9d9c..3f438d7
5b71de7 Remove OPENJ9_ENABLE_INLINE_TYPES which isn't relevant for Java 8 Keith W. Campbell #742
ad0169b Add JFR Flags tajila #741
a92e628 Parse jar index when using SCC Hang Shao #740
16aa7c2 Merge master jdk8u412-b05 into openj9-staging Jason Feng #738
5040204 Update FreeType to version 2.13.2 Keith W. Campbell #737
e38fde9 Fixes return value type in a JNI method jimmyk #735
399271a Merge master jdk8u412-b01 into openj9-staging Jason Feng #734
33602fc Add provider name and class name mapping in Restricted Security mode Tao Liu #732
db90e02 CRIU removes libj9criu29 Jason Feng #729

8u402 with Eclipse OpenJ9 v0.43.0

Branch name: v0.43.0-release
Tag: openj9-0.43.0

For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.43.0

OpenSSL 3.0, bundled in builds on Windows and Mac, is updated to 3.0.13.

OpenJ9 related changes

b73cbdd..0fa9d9c
0fa9d9c (0.43) Add provider name and class name mapping in Restricted Security Tao Liu #733
a42cf1a Merge jdk8u402-b06 and the latest OpenJ9 changes to 0.43 J9 Build #731
bea1885 Add OpenSSL 3.x license to openj9-openjdk-notices Peter Shipton #730
3cbb45e Use correct JNI function to call ArrayList.add() Jason Katonica #728
9284576 Merge jdk8u402-b05 to 0.43 J9 Build #727
d4f6e60 Merge "Exclude subtests for FIPS" to 0.43 Jason Feng #726
63f04d9 Exclude subtests for FIPS openjdk8_j9 Anna Babu Palathingal #725
58b9f2a Merge "Revert to Java impl when non-default SecureRandom present Peter Shipton #724
eb4eb89 Revert to Java impl when non-default SecureRandom present Kostas Tsiounis #723
14ae923 Merge latest openj9 changes to 0.43 Peter Shipton #722
2651b29 Include new "access" shared library in test-image Keith W. Campbell #720
bc749c0 Add FIPS exclude files for multiple profiles to JDK8 LongyuZhang #721
9a702f6 Match RI behaviour for MethodHandles.unrelfect with OpenJDK MHs Nathan Henderson #715
fa19bfd Merge "Avoid silencing ClassNotFoundException in FIPS mode" to 0.43 Keith W. Campbell #719
c88c4fd Avoid silencing ClassNotFoundException in FIPS mode Kostas Tsiounis #710
68dbd31 Merge latest openj9 changes to 0.43 Peter Shipton #718
dfb6c7d Update RestrictedSecurity flags, alter debug comments and profile name Kostas Tsiounis #717
6f3582a Add FIPS exclude tests for p/z linux platforms Tao Liu #716
1198d49 Add Redhat NSS FIPS support on p/z linux platforms Tao Liu #714
cfa0173 Merge jdk8u402-b04 to 0.43 J9 Build #713
eace220 Merge jdk8u402-b03 to 0.43 Keith W. Campbell #712
5a3af11 Merge master jdk8u402-b03 into openj9-staging Jason Feng #711
d4e21db Merge latest openj9 changes to 0.43 Peter Shipton #709
63b4d9b Add J9JCL to sourcepath for generating beaninfo Keith W. Campbell #708
ea6dcaf 0.43.0: Fix extensions annotation and constantpool inconsistencies Theresa Mammarella #707
4b03d79 Append cp to method annotation data to fix redefinition inconsistencies Theresa Mammarella #705
9595443 Modify jdk.crypto.ec libsunec mpi.c to avoid writes to unallocated mem Peter Shipton #706
98ed2db Merge master jdk8u392-b08 into openj9-staging Jason Feng #704

8u392 with Eclipse OpenJ9 v0.41.0

Branch name: v0.41.0-release
Tag: openj9-0.41.0

For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.41.0

OpenSSL 3.0, bundled in builds on Windows and Mac, is updated to ibmruntimes/openssl@200688f, based on 3.0.12, which includes the fix for CVE-2023-5678.

OpenJ9 related changes

c4d2c2b..b73cbdd
cdb422b Merge tag 'jdk8u392-b08' into v0.41.0-release Peter Shipton #703
6fee1ee Merge jdk8u392-b07 and the latest OpenJ9 changes to 0.41 Keith W. Campbell #702
a341bc4 Always revert to Java impl when OpenSSL fails Kostas Tsiounis #701
d145b87 (0.41) Look for -XX:[+/-]UseZlibNX on AIX Peter Shipton #700
203c698 Look for -XX:[+/-]UseZlibNX on AIX Peter Shipton #699
0248f5a Merge jdk8u392-b06 to 0.41 J9 Build #698
3fc7674 Merge jdk8u392-b05 and the latest OpenJ9 changes to 0.41 Peter Shipton #697
20e5d44 Fix link error for unpack200 Keith W. Campbell #696
caf669d In test, increase deflate buffer size for zlinux Ubuntu 20 Peter Shipton #695
a7e9de8 Modify get_source.sh to automatically fetch release branches Peter Shipton #694
dee5cb0 Output -Xmso debug info when _JAVA_LAUNCHER_DEBUG is set Peter Shipton #693
2fab540 Use the system zlib on platforms other than Windows Peter Shipton #692
cba526a Optimize AES/GCM cipher and IV initialization and improve array cleanup code Kostas Tsiounis #690
71d4a40 Parse -Xmso from more locations Peter Shipton #691
6530f59 Merge latest OpenJ9 changes to 0.41 Keith W. Campbell #689
30cfca1 Cache openssl message digest contexts Jason Katonica #688
c854cf8 Optimize AES/CBC cipher initialization Jason Katonica #687
04ddaa8 Merge latest OpenJ9 changes to 0.41 Peter Shipton #686
7c9872b Update Freetype to version 2.13.0 Keith W. Campbell #685
1281c6e Fix javadoc violations Pasam Soujanya #675
68c6e60 Parse -Xmso from OPENJ9_JAVA_OPTIONS for main thread Peter Shipton #684
bb6b016 Enable JITServer build by default on AArch64 Linux KONNO Kazuhiro #681
f908ec9 Allow loading of OpenSSL 3.x native library for Mac, Windows and AIX Jason Katonica #683
36ba274 Set a default thread name for java.util.TimerThread Peter Shipton #682
535df28 Support exporting plain SecretKey in FIPS mode WilburZjh #679

8u382 with Eclipse OpenJ9 v0.40.0

Branch name: v0.40.0-release
Tag: openj9-0.40.0

For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.40.0

OpenSSL 1.1.1, which is bundled in builds on Windows and Mac, is updated to 1.1.1v.

OpenJ9 related changes

dd0ccb1..c4d2c2b
1f8c2ec Merge jdk8u382-b05 into 0.40.0 release J9 Build #680
8d52f27 macOS: Stop using sprintf in java.desktop KONNO Kazuhiro #678
1d551ab Improve speed of cipher operations for large inputs and allow unpadding at offset of output Kostas Tsiounis #677
347f96b Merge jdk8u382-b04 to 0.40 J9 Build #676
2de6448 Merge PKCS#12 file-based Keystore support for FIPS mode to 0.40 Keith W. Campbell #674
5fb6933 PKCS#12 file-based Keystore support for FIPS mode WilburZjh #673
8d28321 Add support for EC key generation using native OpenSSL library and restructure ECDH key agreement Kostas Tsiounis #671
cd8e6bc Don't expect copyright notices in policy or security files Keith W. Campbell #670
ff602a6 Java Restricted Security Mode Tao Liu #663
adbbc28 Change crypto loading method to return OpenSSL version Kostas Tsiounis #668
a3f77a4 Show macro definitions generated in openj9_version_info.h Keith W. Campbell #669
7b32ae5 Add additional debug message to show contents of authentication reply message Kostas Tsiounis #667
2f94509 Remove useless patterns from .gitignore Keith W. Campbell #665
b4cc16f Recognize OpenJ9 flags in openjdk jcl natives Jason Feng #664

8u372 with Eclipse OpenJ9 v0.38.0

Branch name: v0.38.0-release
Tag: openj9-0.38.0

For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.38.0

OpenSSL 1.1.1, which is bundled in builds on Windows and Mac, is updated to 3f499b2 which includes fixes for CVE-2023-0464, CVE-2023-0465, CVE-2023-0466.

OpenJ9 related changes

eebde68..dd0ccb1
fbc57eb Merge jdk8u372-b07 and Fix CVE-2023-2004 in freetype 2.12.1 to 0.38 J9 Build #662
fcac2f2 Fix CVE-2023-2004 in freetype 2.12.1 Peter Shipton #661
1291ef8 Merge Create distinct openj9-licenses and openj9-notices to 0.38 Keith W. Campbell #660
b075c48 Create distinct openj9-licenses and openj9-notices Peter Shipton #659
d11d587 Merge Allow any text without whitespace for the openssl version to 0.38 Keith W. Campbell #657
5173edd Allow any text without whitespace for the openssl version Peter Shipton #656
bb6c498 Merge jdk8u372-b06 to 0.38 J9 Build #655
16b4b85 Merge latest OpenSSL changes to 0.38 Keith W. Campbell #654
e732eb1 Fix memory leaks related to openssl EC pathways Jason Katonica #653
c371702 Expand OpenSSL Version granularity WilburZjh #652
b9faae5 Merge jdk8u372-b04 and b05 to 0.38 Keith W. Campbell #651
5b0b6e8 Merge master jdk8u372-b05 into openj9-staging Jason Feng #650
ea86dbe OpenJ9 doesn't support Perf, don't try to use it Peter Shipton #649
dcf84eb Add SystemMetrics on AIX so jdk8u372-b01 can compile Peter Shipton #648
ea81a90 Merge master jdk8u372-b01 into openj9-staging Jason Feng #647
81849fb Update OpenSSL copyright Peter Shipton #646
21da581 Fail test-image-openj9 target when java -version fails Devin Papineau #639

8u362 with Eclipse OpenJ9 v0.36.0

Branch name: v0.36.0-release
Tag: openj9-0.36.0

For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.36.0

OpenJ9 related changes

b213334..eebde68
1a7f2e2 Merge jdk8u362-b09 to 0.36 J9 Build #645
1a94e30 Merge openj9 to 0.36.0 Peter Shipton #643
cd84b62 Fix problem building openssl when ccache is enabled Keith W. Campbell #642
47b9ca8 Merge jdk8u362-b07 to 0.36 J9 Build #641
e7ddec4 Merge jdk8u362-b06 to 0.36 J9 Build #640
b86d6bb Merge latest OpenJ9 change to 0.36 Keith W. Campbell #638
9d333dc Include PRODUCT_SUFFIX in J9PRODUCT_NAME Peter Shipton #637
d11c86f Merge latest OpenJ9 changes to 0.36 Peter Shipton #636
98a5c62 update exclude list for fips WilburZjh #635
d9472a8 Allow building on macOS with XCode 14 Kevin Grigorenko #634
497b11f Merge jdk8u362-b05 to 0.36 J9 Build #633
b0d50c4 Include freetype source from openjdk Keith W. Campbell #631
51ff6e1 Use the OpenSSL PKCS12 method for PBE and simplify NativeCrypto property checking Zainab Fatmi #630
c7df71e Tweak README.md Keith W. Campbell #629

8u352 with Eclipse OpenJ9 v0.35.0

Branch name: v0.35.0-release
Tag: openj9-0.35.0

For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.35.0

OpenJ9 related changes

e361c66..b213334
b213334 (0.35) Add freetype license Keith W. Campbell #632
cc86560 Merge jdk8u352-b08 to 0.35 J9 Build #628
c79b603 Merge the latest OpenJ9 change to 0.35 Peter Shipton #627
b66f514 Update the ProblemList-fips for openjdk Jinhang-Zhang #626
5ea4882 Merge the latest OpenJ9 changes to 0.35 Keith W. Campbell #625
d824d66 Add --openssl-repo option for downloading OpenSSL source Peter Shipton #624
33ee039 Update excluded list for extended.openjdk Jinhang-Zhang #619
fd94213 Merge latest OpenJ9 change to 0.35 Peter Shipton #623
65d61b6 Fix the PKCS11Exception: CKR_KEY_TYPE_INCONSISTENT in FIPS mode Jinhang-Zhang #622
430facd Merge jdk8u352-b07 to 0.35 Peter Shipton #621
d9cb757 Merge jdk8u352-b07 Keith W. Campbell #620
fa93217 Merge latest OpenJ9 change to 0.35 Peter Shipton #618
e20a915 Exclude list of sanity.openjdk and extended.openjdk for jdk8 Jinhang-Zhang #612
42f4a9d Merge latest OpenJ9 change to 0.35 Keith W. Campbell #617
df120d4 Do not use short name on Windows for vcruntime140.dll Peter Shipton #615
4782887 Merge jdk8u352-b06 to 0.35 genie-openj9 #614
330bf23 Merge latest OpenJ9 change to 0.35 Peter Shipton #610
a7b0cf7 JDK8: Backport 8240226 from JDK17 to fix DeflateIn_InflateOut.skipBytes simonis #609
d0e3108 Merge jdk8u352-b05 to 0.35 J9 Build #608
f2a9dfa Support export/import plain keys for JDK8 in FIPS Mode Jinhang-Zhang #606
f8e04d2 Fix Bug in SunEntries Jinhang-Zhang #605
b8a6f0d FIPS Support for Linux x86 RHEL Jinhang-Zhang #601
48806ae Fix the J9JDK_EXT_VERSION and remove obsolete JDK_MOD_VERSION Peter Shipton #603
fa11cc3 Fix incremental DDR builds Keith W. Campbell #602
28c0dde Revert "FIPS Support for Linux x86 RHEL" Peter Shipton #600
2a640de LUDCL refresh points Abdulrahman Alattas #591
aa2689a FIPS Support for Linux x86 RHEL Jinhang-Zhang #590
cb6e1d0 Fix race condition when creating the native pointer for an EC key Zainab Fatmi #598
9b4520b Allow building on macOS with XCode 13 Kevin Grigorenko #596