Releases: ibmruntimes/openj9-openjdk-jdk17
17.0.17 with Eclipse OpenJ9 v0.56.0
Branch name: v0.56.0-release
Tag: openj9-0.56.0
For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.56.0
OpenSSL 3.5.4 is bundled in builds for all platforms.
FYI eclipse-openj9/openj9#22541
OpenJ9 related changes
34b4be0..7c916e0
a2ed854 Exclude tests for RestrictedSecurity profiles Kostas Tsiounis #550
c10bbb5 (0.56.0) Enable building bootcycle-images Keith W. Campbell #546
827d95d Update FIPS exclusion list for 0.56 release Tao Liu #542
9a9ffac (0.56) Exclude SSLEngineExplorerWithCli on all platforms Jason Katonica #544
2ea556a Remove categories and sort FIPS 140-3 excludes Jason Katonica #541
b2719eb Additional FIPS exclusions for .56 release Jason Katonica #538
7ee505e (0.56) Add thread safety for generateKeyPair in NativeXDHKeyPairGenerator Dev Agarwal #535
f42e41e Add OPENJDK_VERSION_STRING to openj9_version_info.h Peter Shipton #531
3e5b9fe Fix for LockedMonitors Darshan N #530
0283173 Add RAM_CLASS_CACHE_SUPPORT JPP flag Lige Zhou #527
a961e04 Remove passing tests and add additional tests to the exclusion list Dev Agarwal #529
3ad6957 Tolerate RSA-PSS in OpenJCEPlus signature Amulya Mallola #528
8452e39 Remove unnecessary condition in IncludeCustomExtension definition Keith W. Campbell #526
e762311 Exclude additional openjdk tests Kostas Tsiounis #525
064771d Add AESWrap allowances to FIPS strict profile Jason Katonica #524
0e41ff8 Exclude SetClientMode test in FIPS 140-3 excludes Jason Katonica #523
992ef66 Check if service is allowed in RestrictedSecurity mode Kostas Tsiounis #522
a332754 Revert "Add thread safety for generateKeyPair in NativeXDHKeyPairGenerator" Keith W. Campbell #521
c3739f5 Add thread safety for generateKeyPair in NativeXDHKeyPairGenerator Dev Agarwal #520
87ba567 Support a list of java.security property files JinhangZhang #519
8590ea0 Update the RestrictedSecurity property test case Tao Liu #518
851d4c5 Update the exclusion list for the FIPS tests Tao Liu #517
bdc0699 Add compatibility for a key from a different provider Dev Agarwal #516
2575450 Update the exclusion list for the FIPS 140-3 Strict profile Tao Liu #514
3e66751 Additonal excludes for FIPS 140-3 Jason Katonica #515
ddc85d6 Exclude additional tests for FIPS mode Jason Katonica #513
a5c06dd Populate excludes list for OpenJCEPlusFIPS.FIPS140-3-Strongly-Enforced profile Kostas Tsiounis #512
95650a3 Allow OpenJCEPlus ciphers to pass decryption tests Sabrina Lee #507
5df45dd Add placeholder ProblemList file for OpenJCEPlusFIPS.FIPS140-3-Strongly-Enforced Lan Xia #511
7ee0d90 Add and fix debug messages in RestrictedSecurity Kostas Tsiounis #509
3e0e807 Add new Strongly-Enforced FIPS 140-3 profile Jason Katonica #508
2f9d5c1 Allow FIPS mode on all Semeru platforms Jason Katonica #506
1a149a9 Preprocess HKDF.java so OPENJCEPLUS_SUPPORT is considered Keith W. Campbell #505
b07efa2 Set AIX loadLibraryOnlyIfPresent to false Keith W. Campbell #504
2afa16f Remove the keystore property in Restricted profile JinhangZhang #503
854fdf3 Update the exclusion lists for OpenJCEPlus and OpenJCEPlusFIPS tests Tao Liu #502
17.0.16 with Eclipse OpenJ9 v0.53.0
Branch name: v0.53.0-release
Tag: openj9-0.53.0
For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.53.0
OpenSSL 3.5.1 is bundled in builds for all platforms.
OpenJ9 related changes
d3deabf..34b4be0
398403e Add filter when copying OCK libraries Tao Liu #501
c07503c Update SignatureLength test Dev Agarwal #500
4d95cf2 Update test exclusion list for weak FIPS140-3 JinhangZhang #499
f16bd0b Allow additional characters in RestrictedSecurity profile constraints Kostas Tsiounis #498
cdd66ef Update test exclusion list for FIPS140-3 JinhangZhang #497
0dae3d0 Rename CLOSEDJ9 variables to be called VENDOR Peter Shipton #496
d78a065 Increase Deadlock test timeout for FIPS Jason Feng #495
492e201 Avoid building unused OpenSSL tests Keith W. Campbell #494
325cd53 Improve building OpenSSL on Windows Keith W. Campbell #493
526b752 Remove unnecessary export of OPENJ9_BUILD=true Keith W. Campbell #492
161d7ce Add support to build with closedj9 when present Peter Shipton #491
173c7cb Improve OpenSSL build integration Keith W. Campbell #490
db072c7 Update test exclusion list for FIPS 140-2 and FIPS 140-3 Tao Liu #489
c670536 Add key algorithm check for native CBC JinhangZhang #488
845a8dd Enable native PBKDF2 as default JinhangZhang #487
50edd2f Add sharedClasses shared library to test-image Anna Babu Palathingal #485
40fac6d Enable the use of OpenJCEPlusFIPS for HKDF operations Kostas Tsiounis #486
e3f897d Backport 8289706 from JDK21 that has shown performance improvement Andrey Turbanov #484
6938d1c Properly check if jdk.native.openssl.lib property is set Kostas Tsiounis #483
3b98104 Use CXX_VERSION_STRING instead of COMPILER_VERSION_STRING Peter Shipton #482
3eebfb5 Tolerate RSASSA-PSS in OpenJCEPlus signature JinhangZhang #481
8c4fd26 Fix cmake warnings related to unused variables Keith W. Campbell #480
184b956 Exclude additional OpenJCEPlus testcases Jason Katonica #479
b4d9c84 Target z10 architecture for OpenSSL Linux on z Jason Katonica #478
ac13056 Tolerate RSA-PSS in OpenJCEPlus signature JinhangZhang #465
ac289dd Merge master jdk-17.0.16+1 into openj9-staging Jason Feng #477
5b98e3e Prevent AES/CBC native buffer overflow Jason Katonica #475
b1f3df6 Add flag to skip loading the library bundled with the JDK Kostas Tsiounis #474
b2d4d1d CRIU calls isTimeCompensationEnabled() to enable time compensation Jason Feng #473
6bc4501 Update the ProblemList-OpenJCEPlus test exclusion list Tao Liu #469
238c47e Rename bundled openssl libraries Jason Katonica #463
3951aeb Enable CRaC for all Linux platforms Jason Feng #468
c8734e6 OpenJCEPlus KeyDestructionTest Toleration Jason Katonica #462
17.0.15 with Eclipse OpenJ9 v0.51.0
Branch name: v0.51.0-release
Tag: openj9-0.51.0
For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.51.0
OpenSSL 3.0, bundled in builds on Windows and Mac, is updated to 3.0.16
OpenJ9 related changes
cbbc8b9..d3deabf
8e75428 (0.51) Prevent AES/CBC native buffer overflow Jason Katonica #476
6ec11ef (0.51) Enable CRaC for all Linux platforms Jason Feng #470
a203b77 Update the ProblemList-OpenJCEPlus test exclusion list Tao Liu #471
f115257 Check RestrictedSecurity profile hash after Providers init Kostas Tsiounis #467
49b7af8 Use PrivilegedAction to use StackWalker with RETAIN_CLASS_REFERENCE option Kostas Tsiounis #466
6ae95a7 Backport test exclusions from jdk next Jason Katonica #464
b642b20 Add ProblemList-OpenJCEPlus.txt as placeholder for JDK17 LongyuZhang #461
7b3f7dc Backport TimestampCheck.java test fix Peter Shipton #460
e52db2f Update test exclusion list for FIPS140-3 strict profile and FIPS140-2 Tao Liu #459
2c861ee Support native MessageDigest SHA512-224/256 JinhangZhang #458
1f61c72 Avoid loading general symlinks first Kostas Tsiounis #457
f3a4a58 Avoid checking RestrictedSecurity profile hash during jar verification Kostas Tsiounis #456
8aba051 Allow PBKDF2 acceleration on OpenSSL version 1.1.1 Jason Katonica #455
eccd019 Add error visibility for SunPKCS11 provider configuration failures Sarwat Shaheen #454
37d6b7f Update PBKDF2 property parsing logic Jason Katonica #452
2de9a84 Support native PBKDF2 JinhangZhang #451
247b88e Only check and set FIPS mode in FIPS profiles Kostas Tsiounis #450
1e24402 Exclude failed cases for OpenJCEPlusFIPS JinhangZhang #449
04e4f00 Allow multiple constraints for each algorithm Kostas Tsiounis #448
886f542 Prohibit the insertion of 3rd-party provider JinhangZhang #446
b8682ba Enable PBKDF2 within strict FIPS 140-3 profile Jason Katonica #447
5aefb3b Include System.c natives to make use of SystemProps$Raw Peter Shipton #445
dbad5b7 Extend RestrictedSecurity constraints Kostas Tsiounis #443
c6eb972 Remove --with-mixedrefs configuration option Keith W. Campbell #444
823b7ef Update the FIPS140-3 strict profile test exclude list Tao Liu #442
34bfba7 Copy the verbose gc schema.xsd into the build Peter Shipton #441
b439856 Enable JFR on all platforms Tobi Ajila #440
2848994 Delete obsolete code from SpecialTempFile.java test Peter Shipton #439
eea846d Enforce a more strict FIPS 140-3 JSSE profile definition Jason Katonica #438
366408f Disable ConfigFileTest Jason Katonica #437
560d9e0 Replace uses of
f08edfc Copy ibm_gpu_thresholds.properties in openj9.gpu/Copy.gmk Keith W. Campbell #435
5a77837 Merge master jdk-17.0.15+1 into openj9-staging Keith W. Campbell #434
d480927 Allow use of conditional code in DDR tools Keith W. Campbell #433
e2b5d04 Add selected tracepoints for OpenJ9 -Xtrace Peter Shipton #432
ac1ec63 Remove --without-cmake support Peter Shipton #431
49a6d91 Consistently load OpenSSL libraries among different platforms Paritosh Kumar #429
17.0.14 with Eclipse OpenJ9 v0.49.0
Branch name: v0.49.0-release
Tag: openj9-0.49.0
For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.49.0
OpenSSL 3.0, bundled in builds on Windows and Mac, is updated to 3.0.15 plus CVE-2024-9143, CVE-2024-13176.
OpenJ9 related changes
d17dd58..cbbc8b9
dadab05 Use generic rather than release specific link in exclude lists Kostas Tsiounis #430
d629e9d Remove unused local variable Keith W. Campbell #428
2c1f166 Exclude ExtensiblePolicyWithJarTest FIPS Strict Anna Babu Palathingal #427
1d4e478 Exclude jdk17 test for FIPS strict profile Anna Babu Palathingal #426
060fdb1 Apply the patch for CVE-2024-56732 Peter Shipton #425
9694206 Reorder the way contents of healthcenter jars are extracted Ravali Yatham #424
f2d3af9 Exclude more tests in FIPS140-3 JinhangZhang #422
b9e7446 CRIU adds @NotCheckpointSafe for MethodAccessorGenerator.generateName() Jason Feng #423
f7e111d Exclude list for FIPS140-3 strict profile JinhangZhang #400
d690e8d Add dependency module java.management.rmi for ibm.healthcenter Sharanabasava #421
99c15ce Bundle OpenJCEPlus on Mac/Linux JinhangZhang #420
ea9d52c Fix profiles with same name beginnings being treated as one Tao Liu #419
60f6ee9 Modify JSR166TestCase to gather more error information Theresa Mammarella #418
06278a0 Merge master jdk-17.0.14+4 into openj9-staging Jason Feng #417
6dd0f9c Set test flag vm.opt.final.ClassUnloading Peter Shipton #416
a494a31 Add the error message when the profile does not exist Tao Liu #413
f18b070 Propagate DEBUG_LEVEL to OpenJ9 VM Keith W. Campbell #415
5744714 Add the test cases for Restricted Security Mode Tao Liu #412
8a27fc2 Add Xdump to diagnose intermittent JSR166TestCase failures Theresa Mammarella #414
b841f37 Enable JFR on Aarch64 linux tajila #411
99dfb8b Check if OpenSSL is in FIPS mode and use Java for some algorithms Kostas Tsiounis #410
d4aa505 Block all properties that can be set by profile Kostas Tsiounis #409
53e0100 Replace sprintf with snprintf in networking Peter Shipton #406
3ee7a6f Update the platform flags JinhangZhang #403
e03930b Avoid rebuilding native code headers for OpenJCEPlus Kostas Tsiounis #405
3a65100 Fix names of algorithms printed in debug trace Kostas Tsiounis #407
e01b9c6 Add FIPS problem list placeholder for jdk17 LongyuZhang #408
4ff1022 Set AIX executables to have exempt SED status Julian #402
58faf7a Add configure support to enable RAM class persistence Nathan Henderson #404
03240eb JFR copy "$(OPENJ9_TOPDIR)/runtime/metadata.blob" to "$(LIB_DST_DIR)" Jason Feng #401
9119953 Add more granular digest flags Kostas Tsiounis #399
17.0.13 with Eclipse OpenJ9 v0.48.0
Branch name: v0.48.0-release
Tag: openj9-0.48.0
For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.48.0
OpenSSL 3.0, bundled in builds on Windows and Mac, is updated to 3.0.15 plus CVE-2024-9143.
OpenJ9 related changes
e70fd1f..d17dd58
9f0107b Ignore RSA_KEM.java for FIPS 140-3 Jason Katonica #398
e4ecba1 Disable use of zlibNX by default Peter Shipton #396
2aacbe5 Add newline to end of txt file Anna Babu Palathingal #395
ac99258 Update FIPS140-3 exclusions for Windows JinhangZhang #376
fceb8a1 Added ProblemList-FIPS140_3_OpenJCEPlusFIPS.FIPS140-3.txt file Anna Babu Palathingal #394
f5719fc Allow RestrictedSecurity property extension from default values Kostas Tsiounis #393
8e2f053 Select the appropriate OpenSSL build target on AIX Keith W. Campbell #391
427222d Add JFR JPP Flag Ravali Yatham #390
4dc08dc Check RestrictedSecurity profile for errors Tao Liu #388
fa36855 keep Runnable r strongly reachable so that it is not reclaimable by GC Jason Feng #389
d3956a6 Avoid hang in preClose method during dup2 system call Shruthi #386
94ec587 Add DebugOptions test into OpenJCEPlusFIPS ProblemList Tao Liu #384
5b60a16 Remove redundant export of PATH on Windows Keith W. Campbell #387
764b725 Support restore with -XX:CRaCRestoreFrom=PATH Amarpreet Singh #385
b3b8db9 Ensure static fields set during signed jar process Jason Katonica #383
48be99a CRIU adds @NotCheckpointSafe for ZipFile.getEntry(String) Jason Feng #382
4f6e1bf Enable JFR modules when JFR is enabled Gengchen Tuo #381
a9c3b9a Add metadata files needed to build jdk.jfr module Gengchen Tuo #379
81ec611 Remove unused variables in NativeCrypto.c Kostas Tsiounis #378
5f9204b CRIU supports Java debugger during checkpoint and restore Mike Zhang #377
19c050f Tolerate OpenJCEPlus FIPS binaries with jlink Jason Katonica #375
b5d1ec3 Support brainpoolP512r1 TLS 1.3 RFC 8734 Jason Katonica #371
4de544b Disable DTLSv1.0 protocol in FIPS140-3 strict JinhangZhang #374
e7d543e Disable more DHE related ciphersuites JinhangZhang #364
85e52e8 JDK17 adds OpenJ9 properties vm.flagless Jason Feng #372
68c5891 Re-enable FIPS140-3 failures JinhangZhang #369
d497b5b Update ignore list based on M2 build JinhangZhang #367
17.0.12 with Eclipse OpenJ9 v0.46.1
Branch name: v0.46.1-release
Tag: openj9-0.46.1
For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.46.1
OpenSSL 3.0, bundled in builds on Windows and Mac, is updated to 3.0.15.
OpenJ9 related changes
17.0.12 with Eclipse OpenJ9 v0.46.0
Branch name: v0.46.0-release
Tag: openj9-0.46.0
For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.46.0
OpenSSL 3.0, bundled in builds on Windows and Mac, is updated to 3.0.14.
OpenJ9 related changes
5d7d758..784bd66
784bd66 Re-enable FIPS140-3 failures JinhangZhang #370
193cb12 Update ignore list based on M2 build JinhangZhang #368
85d4362 Add fully-qualified class names of jar verification providers Kostas Tsiounis #363
0424dfc Back-port changes to .copyrightignore from the head stream Keith W. Campbell #362
09f5f32 Update OpenJCEPlusFIPS Strict and Weakly-Enforced profiles Tao Liu #361
23d6aaf Support provider fully-qualified class name in Restricted Security mode Tao Liu #360
a3d9ec5 Allow extension of RestrictedSecurity profiles Kostas Tsiounis #359
8dadc9e Improve interaction between CRIU and CRaC configuration options Keith W. Campbell #357
7d002c3 Revert "Simplify and improve module dependency management" Keith W. Campbell #356
47e14b2 Simplify and improve module dependency management Keith W. Campbell #355
249fed7 Get native EC key pointer during init through ECUtil instead of key impl Kostas Tsiounis #354
7f763ae Exclude list for FIPS140-3 JinhangZhang #350
6c29721 Always set COMPATIBLE_CDS_ALIGNMENT_DEFAULT to false for OpenJ9 Peter Shipton #353
efa0b7d Add additional checks to NativeECDHKeyAgreement to match upstream Kostas Tsiounis #351
e583cf9 Throw OOM if array size exceeds int maximum Theresa Mammarella #352
cd7617b Add support for ECDSA signatures using native OpenSSL library Kostas Tsiounis #349
7bf5336 Fix typo in reference to NativeECKeyPairGenerator Keith W. Campbell #346
1c40cb7 Merge master jdk-17.0.12+1 into openj9-staging Jason Feng #345
0b6d3d7 Temporarily restore support for old openssl options Keith W. Campbell #344
24d6868 Update get_source.sh Keith W. Campbell #343
cc9389f Merge scripts to fetch or update source repositories Keith W. Campbell #342
0b31165 Remove redundant disabling of CDS feature Keith W. Campbell #341
bfbf1a2 Remove the unneeded Hotspot features for building OpenJ9 Peter Shipton #340
1a277dd Check setting of security property when in FIPS mode Kostas Tsiounis #339
96769c3 Add ExtendedMasterSecret support in SunPKCS11 provider Tao Liu #336
1ba0966 Support explicit use of '--enable-jitserver' on all supported platforms Keith W. Campbell #338
a6e436f Add support for native MD5 digest Kostas Tsiounis #337
17.0.11 with Eclipse OpenJ9 v0.44.0
Branch name: v0.44.0-release
Tag: openj9-0.44.0
For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.44.0
OpenSSL 3.0, bundled in builds on Windows and Mac, is updated to 3.0.13 + CVE-2024-2511 + CVE-2024-4603.
OpenJ9 related changes
2aad089..5d7d758
5d7d758 (0.44) Fix typo in reference to NativeECKeyPairGenerator Keith W. Campbell #348
fe21ca8 Add missing call to initCompressionFlag() Theresa Mammarella #335
24aa06a Add JFR flags Tobi Ajila #334
42b3c9d Add MemberName finalizer to mark clazz for MemberName list pruning Devin Papineau #333
1ce0727 Set property com.ibm.fips.mode based upon active profile Jason Katonica #332
c86cd88 Parse jar index when using SCC Hang Shao #331
1ee356f 8325254: CKA_TOKEN private and secret keys are not necessarily sensitive Bob Du #329
76b191b Use Unsafe.compareAndSwap for writing to Stable field and array Nazim Bhuiyan #325
bf83787 FIPS excludes java/util/jar/JarFile/SignedJarPendingBlock.java Jason Feng #328
970b092 Add s390x-linux to platforms bundling OpenJCEPlus Kostas Tsiounis #324
006bbe8 Avoid overlapping buffers in native ChaCha20 Jason Katonica #323
45c524b Add vm.debug (false) jtreg test property Peter Shipton #320
3b4480c Stop using preprocessor flag Sidecar19-SE Keith W. Campbell #319
a973c8a Merge master jdk-17.0.11+1 into openj9-staging Jason Feng #318
61f7d22 Add OpenJCEPlus SHA hash to release info file Kostas Tsiounis #316
2d3dff1 Update Java Restricted Security Mode comment in java.security Tao Liu #314
3816a25 Include legal files when bundling OpenJCEPlus Kostas Tsiounis #312
e7ef92a Account for different NSS error code in s390x Kostas Tsiounis #311
589cc87 CRIU removes libj9criu29 Jason Feng #306
17.0.10 with Eclipse OpenJ9 v0.43.0
Branch name: v0.43.0-release
Tag: openj9-0.43.0
For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.43.0
OpenSSL 3.0, bundled in builds on Windows and Mac, is updated to 3.0.13.
OpenJ9 related changes
3699725..2aad089
2aad089 (0.43) Add OpenJCEPlus SHA to release info Kostas Tsiounis #317
60fef7e (0.43) Include legal files when bundling OpenJCEPlus Kostas Tsiounis #315
1b0310f (0.43) Account for different NSS error code in s390x Kostas Tsiounis #313
9d6a32f Merge jdk-17.0.10+7 and the last OpenJ9 changes to 0.43 J9 Build #310
a47af77 Add OpenSSL 3.x license to openj9-openjdk-notices Peter Shipton #309
091e7a2 Add provider name and class name mapping in Restricted Security mode Tao Liu #308
ddeca97 Add provider name and class name mapping in Restricted Security mode Tao Liu #307
2808eb5 Specify OpenJCEPlusFIPS profile for supported platforms Kostas Tsiounis #302
1bb44a4 Use correct JNI function to call ArrayList.add() Jason Katonica #305
d5a1196 Merge "Restore behavior on platforms where CRIU is supported but not in use" to 0.43 Peter Shipton #304
f1246cf Restore behavior on platforms where CRIU is supported but not in use WilburZjh #303
6b8a752 Merge the latest openj9 changes to 0.43 Peter Shipton #301
d15a14e Excludes subtests for FIPS openjdk17_j9 Anna Babu Palathingal #298
2cb2951 Revert to Java impl when non-default SecureRandom present Kostas Tsiounis #300
cdb8749 Merge "Integrate OpenJCEPlus into Semeru OpenJDK" to 0.43 Peter Shipton #299
5b2f439 Integrate OpenJCEPlus into Semeru OpenJDK Tao Liu #238
5487409 Merge the latest openj9 changes to 0.43 Keith W. Campbell #297
b62222a Apply an additional condition if -XX:-CRIUSecProvider is specified WilburZjh #296
7719deb Add SHA-256 and MD5 MessageDigest to CRIUSecProvider Jason Katonica #295
1ca15a6 Merge jdk-17.0.10+6 and the latest openj9 changes to 0.43 Keith W. Campbell #294
5495408 Enable ECDSA ciphers when running with FIPS cryptography Jason Katonica #292
4f9224a Include new "access" shared library in test-image Keith W. Campbell #291
dd800dd Add FIPS exclude files for multiple profiles to JDK17 LongyuZhang #293
988f297 Merge FIPS excludes for p/z linux platforms to 0.43 Jason Feng #290
a27f00c Add FIPS exclude tests for p/z linux platforms Tao Liu #289
10ccdce Merge jdk-17.0.10+5 and openj9 FIPS changes to 0.43 Peter Shipton #288
f64da97 Update RestrictedSecurity flags, alter debug comments and profile name Kostas Tsiounis #287
8da2f7e Merge master jdk-17.0.10+5 into openj9-staging Jason Feng #285
4b72172 Add Redhat NSS FIPS support on p/z linux platforms Tao Liu #286
6874a7a Merge "Add NotCheckpointSafe annotations to PhantomCleanable" to 0.43 Tobi #284
7b49cd4 Add NotCheckpointSafe annotations to PhantomCleanable Amarpreet Singh #283
bf5bcad Merge jdk-17.0.10+4 and OpenJ9 update to 0.43 Peter Shipton #282
54edd74 Ignore verbosegc files in TestVersionedStream Peter Shipton #280
83b321b 0.43.0: Append cp to annotation data to fix redefinition inconsistencies Theresa Mammarella #279
eab1b92 Append cp to annotation data to fix redefinition inconsistencies Theresa Mammarella #276
fa90845 Remove definitions of unused make macros Keith W. Campbell #277
3dfae78 Zero out previous key in native ChaCha20 cipher init Kostas Tsiounis #274
aa764da Ensures time compensation is not less than checkpointRestoreTimeDelta Jason Feng #275
f215a7e Merge master jdk-17.0.9+9 into openj9-staging Jason Feng #272
e8b09b9 Revert "8307603: [AIX] Broken build after JDK-8307301" Keith W. Campbell #270
d8e0f4d Always revert to Java impl when OpenSSL fails Kostas Tsiounis #268
a2a7584 Register natives in ConstantPool init tajila #267
ae65ab9 Look for -XX:[+/-]UseZlibNX on AIX Peter Shipton #265
eda5e2c Rename OPENJDK_CRAC_SUPPORT to CRAC_SUPPORT Jason Feng #264
68c22ab CRIU adds OPENJ9_ENABLE_OPENJDK_CRAC_SUPPORT Jason Feng #262
17.0.9 with Eclipse OpenJ9 v0.41.0
Branch name: v0.41.0-release
Tag: openj9-0.41.0
For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.41.0
OpenSSL 3.0, bundled in builds on Windows and Mac, is updated to ibmruntimes/openssl@200688f, based on 3.0.12, which includes the fix for CVE-2023-5678.
OpenJ9 related changes
77b0f75..3699725
83ba13c Merge tag 'jdk-17.0.9+9' into v0.41.0-release Peter Shipton #273
7d08dd0 Revert "8307603: [AIX] Broken build after JDK-8307301" Keith W. Campbell #271
4024096 (0.41) Always revert to Java impl when OpenSSL fails Kostas Tsiounis #269
07c8dd8 (0.41) Look for -XX:[+/-]UseZlibNX on AIX Peter Shipton #266
2a71b4c Merge jdk-17.0.9+7 to 0.41 J9 Build #263
3525368 Merge latest OpenJ9 changes to 0.41 Peter Shipton #261
a6f4e9d Enable CRIU support by default on ppc64le builds Younes Manton #214
a077bc8 Modify get_source.sh to automatically fetch release branches Peter Shipton #259
e3ef5f3 Output -Xmso debug info when _JAVA_LAUNCHER_DEBUG is set Peter Shipton #258
4ebcfe4 Optimize AES/GCM cipher and IV initialization and improve array cleanup code Kostas Tsiounis #257
fdaefd4 Parse -Xmso from more locations Peter Shipton #256
3efcafc Merge jdk-17.0.9+6 and the latest OpenJ9 changes to 0.41 Keith W. Campbell #255
dd9eed6 Cache openssl message digest contexts Jason Katonica #254
c23d417 Optimize AES/CBC cipher initialization Jason Katonica #253
7e7cdc3 Merge latest OpenJ9 changes to 0.41 Keith W. Campbell #252
31de43f Optimize ChaCha20-Poly1305 initialization WilburZjh #249
4c42ec3 Assert privilege accessing os.name Keith W. Campbell #251
2101e68 Merge jdk-17.0.9+5 to 0.41 J9 Build #250
830d95b Add OpenJ9PropsExt properties Jason Feng #247
b1b735c Parse -Xmso from OPENJ9_JAVA_OPTIONS for main thread Peter Shipton #246
161c7f9 Enable JITServer build by default on AArch64 Linux KONNO Kazuhiro #242
97d9928 Set a default thread name for java.util.TimerThread Peter Shipton #245
d428364 Fix compile error in harfbuzz on AIX Keith W. Campbell #244
afec503 Merge master jdk-17.0.9+1 into openj9-staging Jason Feng #243
31bcd9f Fix missing definition of harfbuzz function on AIX Keith W. Campbell #235
1325590 Allow loading of OpenSSL 3.x native library for Mac, Windows and AIX Kostas Tsiounis #240
7511966 Back-port fix for ModuleDescriptor.hashCode() Keith W. Campbell #241