Branch name: v0.38.0-release Tag: openj9-0.38.0

For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.38.0

OpenSSL 1.1.1, which is bundled in builds on Windows and Mac, is updated to 3f499b2 which includes fixes for CVE-2023-0464, CVE-2023-0465, CVE-2023-0466. The HarfBuzz update resolves CVE-2023-25193.

OpenJ9 related changes

4e060ce..629eb0c 629eb0c22ba (0.38) Revert "Add additional debug message to show contents of authentication reply message" Peter Shipton https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/651 28d562c0e55 Merge jdk-11.0.19+7 and OpenJ9 changes to 0.38 J9 Build https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/646 3aed1bf1f09 Add additional debug message to show contents of authentication reply message Kostas Tsiounis https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/641 0884e645fff Fix CVE-2023-2004 in freetype 2.12.1 Peter Shipton https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/645 9dfbc065528 Merge Create distinct openj9-licenses and openj9-notices to 0.38 Keith W. Campbell https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/644 4b8c722acfe Create distinct openj9-licenses and openj9-notices Peter Shipton https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/643 0256c2c7ef9 Merge Allow any text without whitespace for the openssl version to 0.38 Keith W. Campbell https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/642 35152ee6eb0 Allow any text without whitespace for the openssl version Peter Shipton https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/640 39805ed0b3d Merge Support For AES/GCM Cipher For FIPS Mode to 0.38 Keith W. Campbell https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/639 d89db392f75 Support For AES/GCM Cipher For FIPS Mode Tao Liu https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/638 b04e256c1cf Merge Java Restricted Security Mode to 0.38 Keith W. Campbell https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/637 225fd5ee5f2 Java Restricted Security Mode Tao Liu https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/586 8b7d179af9b Merge CPE fixes to 0.38 Keith W. Campbell https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/636 b9952cbfbe1 Backport missing Oracle CPE from jdk17 Peter Shipton https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/635 edf606b3c63 Merge Harfbuzz update to 0.38 Keith W. Campbell https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/634 451b504ac78 Port harfbuzz - Avoid O(n^2) behavior in mark-attachment Peter Shipton https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/632 29530933874 Merge tag for jdk-11.0.19+6 to 0.38 Peter Shipton https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/633 c09e2ce930d Merge latest CRIU changes to 0.38 Tobi https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/631 bd949902500 Enable CRIU by default on Linux on Z Rahil Shah https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/627 a6a55907b48 Cache security algorithms for CRIU startup Jason Katonica https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/629 9b1eaf7d5bb Merge latest OpenJ9 changes to 0.38 Keith W. Campbell https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/628 0ad692f9906 Fix memory leaks related to openssl EC pathways Jason Katonica https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/626 6a7291a42bb Add OpenJ9PropsExt properties for docker.support Jason Feng https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/625 b609e149f33 Merge jdk-11.0.19+5 to 0.38 Jenkins https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/624 23d2c3b27cb Merge jdk-11.0.19+3, +4 and OpenSSL Version granularity update to 0.38 Keith W. Campbell https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/623 8292b2178fa Expand OpenSSL Version granularity WilburZjh https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/622 e2754db2616 Update code-signing on macOS Keith W. Campbell https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/621 5648d51d282 Merge master jdk-11.0.19+2 into openj9-staging Jason Feng https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/620 f212708aec0 OpenJ9 doesn't support Perf, don't try to use it Peter Shipton https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/619 77de8f8d6e2 tokenLabel support and EC fixes for Z platform jpfurminger https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/598 7c4ecf21783 Lazily initialize native crypto libraries Jason Feng https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/617 60c88363a4d Update dependencies for running Java preprocessor Keith W. Campbell https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/618 45b8e73e18a Update export/import of plain keys in FIPS Tao Liu https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/606 7882057d92f Fix and rename compareTwoFiles method in PackTestZip64 Rahil Shah https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/615 b399e866bb9 Ensure test-image-openj9 target fails when java -version fails Devin Papineau https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/614 cd0eb5563e2 Update jszip to 3.10.1 Peter Shipton https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/611 5159ec21fdc Add JPP tags at GensrcCharsetMapping.gmk Jason Feng https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/610 3f9c8d34944 Fix problem building openssl when ccache is enabled Keith W. Campbell https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/608 7b5f51aae5c Enable CRIU on x86 Tobi Ajila https://github.com/ibmruntimes/openj9-openjdk-jdk11/pull/596