11.0.25 with Eclipse OpenJ9 v0.48.0

Branch name: v0.48.0-release
Tag: openj9-0.48.0

For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.48.0

OpenSSL 3.0, bundled in builds on Windows and Mac, is updated to 3.0.15 plus CVE-2024-9143.

OpenJ9 related changes

e383b0c..edded3f
edded3f (v0.48.0) Update the platform flags JinhangZhang #839
b7462f8 Update FIPS140-3 exclusions with Windows JinhangZhang #821
ccb9a8d Disable use of zlibNX by default Peter Shipton #823
20b15c1 Add newline to end of txt file Anna Babu Palathingal #822
dd34dac Added ProblemList-FIPS140_3_OpenJCEPlusFIPS.FIPS140-3.txt file Anna Babu Palathingal #820
0e3f2a9 Allow RestrictedSecurity property extension from default values Kostas Tsiounis #819
925f3d4 Remove closed/make/copy/Copy-jdk.jfr.gmk for JFR framework Ravali Yatham #812
2b552d0 Select the appropriate OpenSSL build target on AIX Keith W. Campbell #818
6763241 Add to JPP_TAGS in alphabetical order Keith W. Campbell #817
93a38dc Add JFR_SUPPORT Flag Ravali Yatham #811
2f5f15e Check RestrictedSecurity profile for errors Tao Liu #814
0674172 keep Runnable r strongly reachable so that it is not reclaimable by GC Jason Feng #815
64bd167 Add FIPS Problem list placeholder Lan Xia #816
9d684ea Remove redundant export of PATH on Windows Keith W. Campbell #813
3d65f3f Support restore with -XX:CRaCRestoreFrom=PATH Amarpreet Singh #810
ccac145 Ensure static fields set during signed jar process Jason Katonica #809
be40db5 CRIU adds @NotCheckpointSafe for ZipFile.getEntry(String, Function) Jason Feng #808
74b60b3 Enable JFR modules when JFR is enabled Gengchen Tuo #807
2970f99 Add metadata files needed to build jdk.jfr module Gengchen Tuo #806
0600044 Remove unused variables in NativeCrypto.c Kostas Tsiounis #805
3c24a4f CRIU supports Java debugger during checkpoint and restore Mike Zhang #803
91ca6be Disable DTLSv1.0 protocol in FIPS140-3 strict JinhangZhang #802
03f8cc5 Disable more DHE related ciphersuites JinhangZhang #801
ba1856b Re-enable FIPS140-3 failures JinhangZhang #799
ba28da9 Update ignore list based on M2 build JinhangZhang #797

11.0.24 with Eclipse OpenJ9 v0.46.1

Branch name: v0.46.1-release
Tag: openj9-0.46.1

For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.46.1

OpenSSL 3.0, bundled in builds on Windows and Mac, is updated to 3.0.15.

OpenJ9 related changes

30b62e6..e383b0c

11.0.24 with Eclipse OpenJ9 v0.46.0

Branch name: v0.46.0-release
Tag: openj9-0.46.0

For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.46.0

OpenSSL 3.0, bundled in builds on Windows and Mac, is updated to 3.0.14.

OpenJ9 related changes

3d1045c..30b62e6
30b62e6 (0.46) Re-enable FIPS140-3 failures JinhangZhang #800
563ba9a Update ignore list based on M2 build JinhangZhang #798
3024b8f Add fully-qualified class names of jar verification providers Kostas Tsiounis #794
fa2af55 Update SunJSSE fully-qualified class name in Restricted Security mode Tao Liu #793
045117e Back-port changes to .copyrightignore from the head stream Keith W. Campbell #792
35dab52 Ensure jars are processed in classpath order Sruthy Jayan #787
16dbe5c Update OpenJCEPlusFIPS Strict and Weakly-Enforced profiles Tao Liu #790
224b7a7 Support provider fully-qualified class name in Restricted Security mode Tao Liu #789
94ee140 Allow extension of RestrictedSecurity profiles Kostas Tsiounis #788
720cbbf Improve interaction between CRIU and CRaC configuration options Keith W. Campbell #786
76593ed Revert "Simplify and improve module dependency management" Keith W. Campbell #785
db46be2 Simplify and improve module dependency management Keith W. Campbell #784
3a146fa Get native EC key pointer during init through ECUtil instead of key impl Kostas Tsiounis #783
b3e5f08 OpenJDK exclude tests list for FIPS 140-3 JinhangZhang #776
d22b1db Add additional checks to NativeECDHKeyAgreement to match upstream Kostas Tsiounis #781
f8e6ecb Throw OOM if array size exceeds int maximum Theresa Mammarella #782
795d069 Remove the 192-bit EC test case JinhangZhang #779
24dc1a8 Add support for ECDSA signatures using native OpenSSL library Kostas Tsiounis #778
c1df9a5 Fix typo in reference to NativeECKeyPairGenerator Keith W. Campbell #774
77f7221 Merge master jdk-11.0.24+1 into openj9-staging Jason Feng #773
d19b5c8 Temporarily restore support for old openssl options Keith W. Campbell #772
b4574cc Update get_source.sh Keith W. Campbell #771
3fc1db9 Merge scripts to fetch or update source repositories Keith W. Campbell #770
95a3a61 Check setting of security property when in FIPS mode Kostas Tsiounis #769
1824a6b Add ExtendedMasterSecret support in SunPKCS11 provider Tao Liu #767
cd17b39 Support explicit use of '--enable-jitserver' on all supported platforms Keith W. Campbell #768
93fb85f Add support for native MD5 digest Kostas Tsiounis #766

11.0.23 with Eclipse OpenJ9 v0.44.0

Branch name: v0.44.0-release
Tag: openj9-0.44.0

For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.44.0

OpenSSL 3.0, bundled in builds on Windows and Mac, is updated to 3.0.13 + CVE-2024-2511 + CVE-2024-4603.

OpenJ9 related changes

7876cac..3d1045c
3d1045c (0.44) Fix typo in reference to NativeECKeyPairGenerator Keith W. Campbell #777
0f9c69e Restore OPENJ9_CONFIGURE_OPENJDK_METHODHANDLES for configure tajila #765
0675af3 Add JFR flags Tobi Ajila #764
b59f8e5 Set property com.ibm.fips.mode based upon active profile Jason Katonica #763
0ec4a3b Parse jar index when using SCC Hang Shao #762
31a8012 Integrate OpenJCEPlus into Semeru OpenJDK JinhangZhang #761
f0a7818 Use Unsafe.compareAndExchange for writing to Stable field and array Nazim Bhuiyan #759
69eac55 Avoid overlapping buffers in native ChaCha20 Jason Katonica #758
2ee2554 Stop using preprocessor flag Sidecar19-SE Keith W. Campbell #756
f4a7aab Merge master jdk-11.0.23+1 into openj9-staging Jason Feng #755
d37a5ac CRIU removes libj9criu29 Jason Feng #749

11.0.22 with Eclipse OpenJ9 v0.43.0

Branch name: v0.43.0-release
Tag: openj9-0.43.0

For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.43.0

OpenSSL 3.0, bundled in builds on Windows and Mac, is updated to 3.0.13.

OpenJ9 related changes

0fd7a05..7876cac
4c1b2cb Merge jdk-11.0.22+7 and the latest OpenJ9 changes to 0.43 J9 Build #754
0a2c3b2 Add OpenSSL 3.x license to openj9-openjdk-notices Peter Shipton #753
7376213 Add provider name and class name mapping in Restricted Security mode Tao Liu #752
f91ddcd Add provider name and class name mapping in Restricted Security mode Tao Liu #751
a79d3c7 Add NotCheckpointSafe annotations to PhantomCleanable Amarpreet Singh #750
d89d744 Use correct JNI function to call ArrayList.add() Jason Katonica #748
77d2b0f Merge "Restore behavior on platforms where CRIU is supported but not in use" to 0.43 Peter Shipton #747
87557b8 Restore behavior on platforms where CRIU is supported but not in use WilburZjh #746
09095f6 Merge the latest openj9 changes to 0.43 Peter Shipton #745
6fd19af Excludes subtests for FIPS openjdk11_j9 Anna Babu Palathingal #742
6f6d6a5 Revert to Java impl when non-default SecureRandom present Kostas Tsiounis #744
dbdd719 Merge the latest openj9 changes to 0.43 Keith W. Campbell #743
b9a45e8 Apply an additional condition if -XX:-CRIUSecProvider is specified WilburZjh #741
e191906 Add SHA-256 and MD5 MessageDigest to CRIUSecProvider WilburZjh #740
e81be3d Merge jdk-11.0.22+6 and the latest openj9 changes to 0.43 Keith W. Campbell #739
22b3657 Enable ECDSA ciphers when running with FIPS cryptography Jason Katonica #737
9448dda Include new "access" shared library in test-image Keith W. Campbell #736
39a56a9 Add FIPS exclude files for multiple profiles to JDK11 LongyuZhang #738
91ab4bb Merge jdk-11.0.22+5 and latest openj9 changes to 0.43 Jason Feng #735
f229543 Add FIPS exclude tests for p/z linux platforms Tao Liu #734
72e4c5d Update RestrictedSecurity flags, alter debug comments and profile name Kostas Tsiounis #733
783851b Add Redhat NSS FIPS support on p/z linux platforms Tao Liu #732
68c3fb7 Merge jdk-11.0.22+4 and OpenJ9 update to 0.43 Peter Shipton #731
36736e0 Ignore verbosegc files in TestVersionedStream Peter Shipton #730
ef0e328 0.43.0: Append cp to annotation data to fix redefinition inconsistencies Theresa Mammarella #729
b0c33a9 Append cp to annotation data to fix redefinition inconsistencies Theresa Mammarella #727
335a86f Remove useless definitions of make macros Keith W. Campbell #728
5324599 Modify jdk.crypto.ec libsunec mpi.c to avoid writes to unallocated mem Peter Shipton #726
e43aa73 Merge master jdk-11.0.22+1 into openj9-staging Jason Feng #725
4d681f3 Ensures time compensation is not less than checkpointRestoreTimeDelta Jason Feng #723
d4a63e5 Conform to spec for MethodHandles::loop's with void return types Nathan Henderson #722
45b9d06 Merge master jdk-11.0.21+9 into openj9-staging Jason Feng #720
b404781 Always revert to Java impl when OpenSSL fails Kostas Tsiounis #717
18c8757 Register natives in ConstantPool init tajila #716
7da7629 Look for -XX:[+/-]UseZlibNX on AIX Peter Shipton #714
cfe6941 Rename OPENJDK_CRAC_SUPPORT to CRAC_SUPPORT Jason Feng #713
b4ea009 Fix unwanted changes introduced in PR #710 Jason Feng #711
79be905 CRIU adds OPENJ9_ENABLE_OPENJDK_CRAC_SUPPORT Jason Feng #710

11.0.21 with Eclipse OpenJ9 v0.41.0

Branch name: v0.41.0-release
Tag: openj9-0.41.0

For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.41.0

OpenSSL 3.0, bundled in builds on Windows and Mac, is updated to ibmruntimes/openssl@200688f, based on 3.0.12, which includes the fix for CVE-2023-5678.

OpenJ9 related changes

f53b132..0fd7a05
5737a18 Merge tag 'jdk-11.0.21+9' into v0.41.0-release Peter Shipton #721
9a8aed1 (0.41) Always revert to Java impl when OpenSSL fails Kostas Tsiounis #718
ab18857 (0.41) Look for -XX:[+/-]UseZlibNX on AIX Peter Shipton #715
a74ea93 Merge jdk-11.0.21+8 to 0.41 J9 Build #712
4b184d5 Merge jdk-11.0.21+7 to 0.41 J9 Build #709
efe191d Merge latest openj9 changes to 0.41 Peter Shipton #708
1d982a1 Modify get_source.sh to automatically fetch release branches Peter Shipton #707
508627f Output -Xmso debug info when _JAVA_LAUNCHER_DEBUG is set Peter Shipton #706
987a883 Set zlib default to bundled on amac Peter Shipton #705
d6d6bb6 Enable CRIU support by default on ppc64le builds Younes Manton #658
31bc73a Optimize AES/GCM cipher and IV initialization and improve array cleanup code Kostas Tsiounis #703
5e99d55 Parse -Xmso from more locations Peter Shipton #704
14080ab Merge jdk-11.0.21+6 and the latest OpenJ9 changes to 0.41 Keith W. Campbell #702
27c0f0f Cache openssl message digest contexts Jason Katonica #701
7e44d5b Optimize AES/CBC cipher initialization Jason Katonica #700
e81a7f1 Merge latest OpenJ9 changes to 0.41 Keith W. Campbell #699
a152046 Optimize ChaCha20-Poly1305 initialization WilburZjh #696
e00d499 Assert privilege accessing os.name Keith W. Campbell #698
32a4368 Merge jdk-11.0.21+5 to 0.41 Keith W. Campbell #697
f0db243 Merge master jdk-11.0.21+5 into openj9-staging Jason Feng #695
746cce7 Parse -Xmso from OPENJ9_JAVA_OPTIONS for main thread Peter Shipton #693
d18ea12 Enable JITServer build by default on AArch64 Linux KONNO Kazuhiro #687
a014b87 Fix harfbuzz for AIX Keith W. Campbell #692
6e65593 Set a default thread name for java.util.TimerThread Peter Shipton #691
7234788 Revert debug in UncaughtExceptionsTest Peter Shipton #690
b7d53f4 Merge master jdk-11.0.21+1 into openj9-staging Jason Feng #689
fd11223 Fix missing definition of harfbuzz function on AIX Keith W. Campbell #688
c405bdd Allow loading of OpenSSL 3.x native library for Mac, Windows and AIX Kostas Tsiounis #685
39844dc Back-port fix for ModuleDescriptor.hashCode() Keith W. Campbell #686

11.0.20.1 with Eclipse OpenJ9 v0.40.0

Branch name: v0.40.0-jdk11.0.20.1-release
Tag: openj9-0.40.0-jdk11.0.20.1

For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.40.0

See also https://github.com/ibmruntimes/openj9-openjdk-jdk11/releases/tag/openj9-0.40.0

OpenJ9 related changes

f53b132..0880e8d
0880e8d Merge latest changes from jdk-11.0.20.1+1 Keith W. Campbell #694

11.0.20 with Eclipse OpenJ9 v0.40.0

Branch name: v0.40.0-release
Tag: openj9-0.40.0

For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.40.0

OpenSSL 1.1.1, which is bundled in builds on Windows and Mac, is updated to 1.1.1v.

OpenJ9 related changes

629eb0c..f53b132
93bf485 Merge jdk-11.0.20+8 into 0.40.0 release J9 Build #684
1575f9f Support exporting plain SecretKey in FIPS mode WilburZjh #681
b427b85 Revert Update Harfbuzz to 7.0.1 Peter Shipton #683
dd41e63 Centralize definition of J9TOOLS_DIR and fix uses on Windows 11 Keith W. Campbell #682
18084a9 Remove IBM copyright accidently added Peter Shipton #679
0403650 macOS: Stop using sprintf in java.desktop KONNO Kazuhiro #678
20e0e53 Merge "Improve speed of cipher operations for large inputs" to 0.40 Keith W. Campbell #677
5a8a560 Improve speed of cipher operations for large inputs and allow unpadding at offset of output Kostas Tsiounis #676
bcb5eed Merge jdk-11.0.20+7 and Enable CRIU support builds for AArch64 to 0.40 Peter Shipton #674
89b7f69 Reorder CRIU platforms alphabetically Daryl Maier #673
d5f269c Enable CRIU support builds for AArch64 Daryl Maier #672
85acfa3 Merge latest OpenJ9 fixes into 0.40 J9 Build #671
85a45a2 Add back the provider argument while getting MAC instance WilburZjh #669
0f2be98 Don't test unavailable algorithms Keith W. Campbell #670
b7f1e4b Merge to 0.40 - Cloneable test in HmacCore seems questionable Keith W. Campbell #668
b33416d Cloneable test in HmacCore seems questionable WilburZjh #667
fd547bb PKCS#12 file-based Keystore support for FIPS mode WilburZjh #662
03e9f40 Remove unused method ECPublicKeyImpl.isECFieldF2m() Keith W. Campbell #666
4e0490e Use native OpenSSL library for XDH key generation and agreement Kostas Tsiounis #664
359f15b Cause a better system dump on failure of UncaughtExceptionsTest Peter Shipton #663
99f12e8 CRIU restore clears InetAddress.cache Jason Feng #661
6575a2b Fix mode of ReleasePrimitiveArrayCritical to ensure copying of data Kostas Tsiounis #659
70a7c49 Back-port harfbuzz fix for AIX Keith W. Campbell #660
b944b15 Merge master jdk-11.0.20+3 into openj9-staging Jason Feng #657
fd1b170 Show macro definitions generated in openj9_version_info.h Keith W. Campbell #656
ee54452 Cause a system dump on failure of UncaughtExceptionsTest Peter Shipton #655
b8f0eb7 Get byte array from DerValue without using InputStream Kostas Tsiounis #653
2071ecc Remove useless patterns from .gitignore Keith W. Campbell #654
c7da5e2 Add support for EC key generation using native OpenSSL library and restructure ECDH key agreement. Kostas Tsiounis #650
e637b46 Recognize OpenJ9 flags in openjdk jcl natives Jason Feng #649
0b5d73b Merge master jdk-11.0.20+1 into openj9-staging Jason Feng #652
a62020f Cause a system dump on failure of UncaughtExceptionsTest Peter Shipton #647

11.0.19 with Eclipse OpenJ9 v0.38.0

Branch name: v0.38.0-release
Tag: openj9-0.38.0

For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.38.0

OpenSSL 1.1.1, which is bundled in builds on Windows and Mac, is updated to 3f499b2 which includes fixes for CVE-2023-0464, CVE-2023-0465, CVE-2023-0466.
The HarfBuzz update resolves CVE-2023-25193.

OpenJ9 related changes

4e060ce..629eb0c
629eb0c (0.38) Revert "Add additional debug message to show contents of authentication reply message" Peter Shipton #651
28d562c Merge jdk-11.0.19+7 and OpenJ9 changes to 0.38 J9 Build #646
3aed1bf Add additional debug message to show contents of authentication reply message Kostas Tsiounis #641
0884e64 Fix CVE-2023-2004 in freetype 2.12.1 Peter Shipton #645
9dfbc06 Merge Create distinct openj9-licenses and openj9-notices to 0.38 Keith W. Campbell #644
4b8c722 Create distinct openj9-licenses and openj9-notices Peter Shipton #643
0256c2c Merge Allow any text without whitespace for the openssl version to 0.38 Keith W. Campbell #642
35152ee Allow any text without whitespace for the openssl version Peter Shipton #640
39805ed Merge Support For AES/GCM Cipher For FIPS Mode to 0.38 Keith W. Campbell #639
d89db39 Support For AES/GCM Cipher For FIPS Mode Tao Liu #638
b04e256 Merge Java Restricted Security Mode to 0.38 Keith W. Campbell #637
225fd5e Java Restricted Security Mode Tao Liu #586
8b7d179 Merge CPE fixes to 0.38 Keith W. Campbell #636
b9952cb Backport missing Oracle CPE from jdk17 Peter Shipton #635
edf606b Merge Harfbuzz update to 0.38 Keith W. Campbell #634
451b504 Port harfbuzz - Avoid O(n^2) behavior in mark-attachment Peter Shipton #632
2953093 Merge tag for jdk-11.0.19+6 to 0.38 Peter Shipton #633
c09e2ce Merge latest CRIU changes to 0.38 Tobi #631
bd94990 Enable CRIU by default on Linux on Z Rahil Shah #627
a6a5590 Cache security algorithms for CRIU startup Jason Katonica #629
9b1eaf7 Merge latest OpenJ9 changes to 0.38 Keith W. Campbell #628
0ad692f Fix memory leaks related to openssl EC pathways Jason Katonica #626
6a7291a Add OpenJ9PropsExt properties for docker.support Jason Feng #625
b609e14 Merge jdk-11.0.19+5 to 0.38 Jenkins #624
23d2c3b Merge jdk-11.0.19+3, +4 and OpenSSL Version granularity update to 0.38 Keith W. Campbell #623
8292b21 Expand OpenSSL Version granularity WilburZjh #622
e2754db Update code-signing on macOS Keith W. Campbell #621
5648d51 Merge master jdk-11.0.19+2 into openj9-staging Jason Feng #620
f212708 OpenJ9 doesn't support Perf, don't try to use it Peter Shipton #619
77de8f8 tokenLabel support and EC fixes for Z platform jpfurminger #598
7c4ecf2 Lazily initialize native crypto libraries Jason Feng #617
60c8836 Update dependencies for running Java preprocessor Keith W. Campbell #618
45b8e73 Update export/import of plain keys in FIPS Tao Liu #606
7882057 Fix and rename compareTwoFiles method in PackTestZip64 Rahil Shah #615
b399e86 Ensure test-image-openj9 target fails when java -version fails Devin Papineau #614
cd0eb55 Update jszip to 3.10.1 Peter Shipton #611
5159ec2 Add JPP tags at GensrcCharsetMapping.gmk Jason Feng #610
3f9c8d3 Fix problem building openssl when ccache is enabled Keith W. Campbell #608
7b5f51a Enable CRIU on x86 Tobi Ajila #596

11.0.18 with Eclipse OpenJ9 v0.36.1

Branch name: v0.36.1-release
Tag: openj9-0.36.1

For the list of OpenJ9 changes see https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.36.1

OpenJ9 related changes

a94c231..4e060ce
27dc68a Merge jdk-11.0.18+10 to 0.36 J9 Build #613
e596d1e (0.36.0) Update jszip to 3.10.1 Peter Shipton #612
5ec3def (0.36.0) Fix problem building openssl when ccache is enabled Keith W. Campbell #609
e2fa5ed Merge jdk-11.0.18+8 and jdk-11.0.18+9 to 0.36 J9 Build #607
47411d2 Merge jdk-11.0.18+7 to 0.36 J9 Build #604
0839f3f Merge latest OpenJ9 change to 0.36 Keith W. Campbell #603
c277aa4 Include PRODUCT_SUFFIX in J9PRODUCT_NAME Peter Shipton #602
2451aad Merge jdk-11.0.18+5 and jdk-11.0.18+6 to 0.36 J9 Build #601
2f0ebd8 Merge jdk-11.0.18+6 to 0.36 J9 Build #600
19f7b1b Merge 11.0.18+5 changes from openj9-staging branch Peter Shipton #599
93d4f8e Merge latest OpenJ9 change to 0.36 Peter Shipton #597
9b4c6d8 Remove <nav role="navigation"/> bottom navigation from API docs Pasam Soujanya #595
d344b87 Adapt to upstream changes for Windows Keith W. Campbell #594
260117a OpenJDK test HugeCapacity needs to run with -XX:+CompactStrings Peter Shipton #590
ef434cb Merge master jdk-11.0.18+1 into openj9-staging Jason Feng #589
b1f758b Use the OpenSSL PKCS12 method for PBE and simplify NativeCrypto property checking Zainab Fatmi #585
321d55b Tweak README.md Keith W. Campbell #588