Branch name: v0.38.0-release Tag: openj9-0.38.0

For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.38.0

OpenSSL 1.1.1, which is bundled in builds on Windows and Mac, is updated to 3f499b2 which includes fixes for CVE-2023-0464, CVE-2023-0465, CVE-2023-0466. The HarfBuzz update resolves CVE-2023-25193.

OpenJ9 related changes

927b34f..9d7a231 9d7a231edbc (0.38) Revert "Add additional debug message to show contents of authentication reply message" Peter Shipton https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/207 054bee50214 Merge jdk-17.0.7+7 and OpenJ9 changes to 0.38 J9 Build https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/204 9d3222fac84 Add additional debug message to show contents of authentication reply message Kostas Tsiounis https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/197 8f9535acd5a Fix CVE-2023-2004 in freetype 2.12.1 Peter Shipton https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/203 facc368c7a4 Merge Create distinct openj9-licenses and openj9-notices to 0.38 Keith W. Campbell https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/202 b66a3368ede Create distinct openj9-licenses and openj9-notices Peter Shipton https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/201 e647e4731b0 Merge 17.0.7+6 to 0.38 J9 Build https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/200 acb3b6c17ee Merge Allow any text without whitespace for the openssl version to 0.38 Keith W. Campbell https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/199 b60da71656d Allow any text without whitespace for the openssl version Peter Shipton https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/198 2be39ca26d5 Merge Support For AES/GCM Cipher For FIPS Mode to 0.38 Keith W. Campbell https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/196 fc8b0b970a0 Support For AES/GCM Cipher For FIPS Mode Tao Liu https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/195 267a5a72c4a Merge "Java Restricted Security Mode" to 0.38 Keith W. Campbell https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/194 f019f3c82ea Java Restricted Security Mode Tao Liu https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/193 14893103d43 Merge Harfbuzz update to 0.38 Keith W. Campbell https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/192 ca36d8cdaf2 Port harfbuzz - Avoid O(n^2) behavior in mark-attachment Peter Shipton https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/191 d8badc25bac Merge latest CRIU changes to 0.38 Tobi https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/190 7c20b2891d2 Enable CRIU by default on Linux on Z Rahil Shah https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/186 f8c4e4685a5 Cache security algorithms for CRIU startup Jason Katonica https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/188 f0358847126 Merge OpenSSL memory leak fix to 0.38 Keith W. Campbell https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/187 d214bb78a25 Fix memory leaks related to openssl EC pathways Jason Katonica https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/185 842d6eed99e Merge jdk-17.0.7+3, +4 and OpenSSL Version granularity update to 0.38 Keith W. Campbell https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/184 2fa312332b6 Expand OpenSSL Version granularity WilburZjh https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/183 94a11484f02 Remove obsolete loadedProps variable from java/security/Security Peter Shipton https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/182 77e36f9113f OpenJ9 doesn't support Perf, don't try to use it Peter Shipton https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/181 f8fef7debb4 tokenLabel support and EC fixes for Z platform Bob Du https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/180 e054b7448e3 Update dependencies for running Java preprocessor Keith W. Campbell https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/179 21326ec9e18 Lazily initialize native crypto libraries Jason Feng https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/157 a70a8146350 Update export/import of plain keys in FIPS Tao Liu https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/170 807b05cb357 Add OpenJ9PropsExt properties for docker.support Jason Feng https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/178 9de294e4af7 Ensure test-image-openj9 target fails when java -version fails Devin Papineau https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/177 0035561fb22 Add JPP tags at GensrcCharsetMapping.gmk Jason Feng https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/175 ce0e2f4742b Fix problem building openssl when ccache is enabled Keith W. Campbell https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/173 e80551c2fa2 Correct padding of struct layouts Keith W. Campbell https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/171 917226c7728 Enable CRIU on x86 Tobi Ajila https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/161 971af451019 [Jtreg/FFI] Backport layout() for struct from JDK19 to JDK17 ChengJin01 https://github.com/ibmruntimes/openj9-openjdk-jdk17/pull/166