Key:

JDK-X  - https://bugs.openjdk.java.net/browse/JDK-X

CVE-XXXX-YYYY: https://cve.mitre.org/cgi-bin/cvename.cgi?name=XXXX-YYYY

New in release OpenJDK 17.0.6 (2023-01-17):

===========================================

Live versions of these release notes can be found at:

  * https://bitly.com/openjdk1706

  * https://builds.shipilev.net/backports-monitor/release-notes-17.0.6.html

* CVEs

  - CVE-2023-21835

  - CVE-2023-21843

* Security fixes

  - JDK-8286070: Improve UTF8 representation

  - JDK-8286496: Improve Thread labels

  - JDK-8287411: Enhance DTLS performance

  - JDK-8288516: Enhance font creation

  - JDK-8289350: Better media supports

  - JDK-8293554: Enhanced DH Key Exchanges

  - JDK-8293598: Enhance InetAddress address handling

  - JDK-8293717: Objective view of ObjectView

  - JDK-8293734: Improve BMP image handling

  - JDK-8293742: Better Banking of Sounds

  - JDK-8295687: Better BMP bounds

* Other changes

  - JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails in Windows

  - JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails

  - JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/Receiver/bug6186488.java fails

  - JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java fails

  - JDK-8029633: Raw inner class constructor ref should not perform diamond inference

  - JDK-8030121: java/awt/dnd/MissingDragExitEventTest/MissingDragExitEventTest.java fails

  - JDK-8065422: Trailing dot in hostname causes TLS handshake to fail with SNI disabled

  - JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/RobotWheelTest.java fails

  - JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/ModalInternalFrameTest.java

  - JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/MultiresolutionIconTest.java

  - JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java failed with timeout

  - JDK-8202836: [macosx] test java/awt/Graphics/TextAAHintsTest.java fails

  - JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails to find '^\s+- waiting to lock <0x[0-9a-f]+> \(a java\.lang\.Class ...'

  - JDK-8222323: ChildAlwaysOnTopTest.java fails with "RuntimeException: Failed to unset alwaysOnTop"

  - JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on macOs

  - JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java fails on macos

  - JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on macos

  - JDK-8244670: convert clhsdb "whatis" command from javascript to java

  - JDK-8251466: test/java/io/File/GetXSpace.java fails on Windows with mapped network drives.

  - JDK-8255439: System Tray icons get corrupted when Windows scaling changes

  - JDK-8256811: Delayed/missed jdwp class unloading events

  - JDK-8257722: Improve "keytool -printcert -jarfile" output

  - JDK-8262721: Add Tests to verify single iteration loops are properly optimized

  - JDK-8265489: Stress test times out because of long ObjectSynchronizer::monitors_iterate(...) operation

  - JDK-8266082: AssertionError in Annotate.fromAnnotations with -Xdoclint

  - JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al

  - JDK-8267138: Stray suffix when starting gtests via GTestWrapper.java

  - JDK-8268033: compiler/intrinsics/bmi/verifycode/BzhiTestI2L.java fails with "fatal error: Not compilable at tier 3: CodeBuffer overflow"

  - JDK-8268276: Base64 Decoding optimization for x86 using AVX-512

  - JDK-8268297: jdk/jfr/api/consumer/streaming/TestLatestEvent.java times out

  - JDK-8268779: ZGC: runtime/InternalApi/ThreadCpuTimesDeadlock.java#id1 failed with "OutOfMemoryError: Java heap space"

  - JDK-8269029: compiler/codegen/TestCharVect2.java fails for client VMs

  - JDK-8269404: Base64 Encoding optimization enhancements for x86 using AVX-512

  - JDK-8269571: NMT should print total malloc bytes and invocation count

  - JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/stress/jni/nativeAndMH/Test.java crash with small heap (-Xmx50m)

  - JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using the condy helper methods in the interpreter

  - JDK-8270155: ARM32: Improve register dump in hs_err

  - JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java does not show instruction

  - JDK-8270848: Redundant unsafe opmask register allocation in some instruction patterns.

  - JDK-8270947: AArch64: C1: use zero_words to initialize all objects

  - JDK-8271015: Split cds/SharedBaseAddress.java test into smaller parts

  - JDK-8271834: TestStringDeduplicationAgeThreshold intermittent failures on Shenandoah

  - JDK-8271956: AArch64: C1 build failed after JDK-8270947

  - JDK-8272094: compiler/codecache/TestStressCodeBuffers.java crashes with "failed to allocate space for trampoline"

  - JDK-8272123: Problem list 4 jtreg tests which regularly fail on macos-aarch64

  - JDK-8272608: java_lang_System::allow_security_manager() doesn't set its initialization flag

  - JDK-8272776: NullPointerException not reported

  - JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after 8270947

  - JDK-8272809: JFR thread sampler SI_KERNEL SEGV in metaspace::VirtualSpaceList::contains

  - JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java

  - JDK-8273108: RunThese24H crashes with SEGV in markWord::displaced_mark_helper() after JDK-8268276

  - JDK-8273236: keytool does not accurately warn about algorithms that are disabled but have additional constraints

  - JDK-8273380: ARM32: Default to {ldrexd,strexd} in StubRoutines::atomic_{load|store}_long

  - JDK-8273459: Update code segment alignment to 64 bytes

  - JDK-8273497: building.md should link to both md and html

  - JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also has similar error of JDK-8253368

  - JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails on macOS 12

  - JDK-8273685: Remove jtreg tag manual=yesno for  java/awt/Graphics/LCDTextAndGraphicsState.java & show test instruction

  - JDK-8273880: Zero: Print warnings when unsupported intrinsics are enabled

  - JDK-8273881: Metaspace: test repeated deallocations

  - JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/print/Dialog/DialogOrient.java

  - JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/PrinterJob/ImagePrinting/ImageTypes.java & show test UI

  - JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/Common.java delay is too high

  - JDK-8274296: Update or Problem List tests which may fail with uiScale=2 on macOS

  - JDK-8274456: Remove jtreg tag manual=yesno  java/awt/print/PrinterJob/PageDialogTest.java

  - JDK-8274527: Minimal VM build fails after JDK-8273459

  - JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java fails when GC cycles are not happening

  - JDK-8274903: Zero: Support AsyncGetCallTrace

  - JDK-8275170: Some jtreg sound tests should be marked with sound keyword

  - JDK-8275234: java/awt/GraphicsDevice/DisplayModes/CycleDMImage.java is entered twice in ProblemList

  - JDK-8275535: Retrying a failed authentication on multiple LDAP servers can lead to users blocked

  - JDK-8275569: Add linux-aarch64 to test-make profiles

  - JDK-8276108: Wrong instruction generation in aarch64 backend

  - JDK-8276904: Optional.toString() is unnecessarily expensive

  - JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default fails with "RuntimeException: Committed seems high: NNNN expected at most MMMM"

  - JDK-8277346: ProblemList 7 serviceability/sa tests on macosx-x64

  - JDK-8277351: ProblemList runtime/jni/checked/TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64

  - JDK-8277358: Accelerate CRC32-C

  - JDK-8277411: C2 fast_unlock intrinsic on AArch64 has unnecessary ownership check

  - JDK-8277576: ProblemList runtime/ErrorHandling/CreateCoredumpOnCrash.java on macosx-X64

  - JDK-8277577: ProblemList compiler/onSpinWait/TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64

  - JDK-8277578: ProblemList applications/jcstress/acqrel.java on linux-aarch64

  - JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with wrong initial heap size

  - JDK-8277881: Missing SessionID in TLS1.3 resumption in compatibility mode

  - JDK-8277928: Fix compilation on macosx-aarch64 after 8276108

  - JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/NoInvalidateSocketException.java fails with "tag mismatch"

  - JDK-8278826: Print error if Shenandoah flags are empty (instead of crashing)

  - JDK-8279066: entries.remove(entry) is useless in PKCS12KeyStore

  - JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java failed with "RuntimeException: getStopTime() > afterStop"

  - JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed out

  - JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail due to unexpected GC

  - JDK-8279941: sun/security/pkcs11/Signature/TestDSAKeyLength.java fails when NSS version detection fails

  - JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on large machines

  - JDK-8280124: Reduce branches decoding latin-1 chars from UTF-8 encoded bytes

  - JDK-8280234: AArch64 "core" variant does not build after JDK-8270947

  - JDK-8280391: NMT: Correct NMT tag on CollectedHeap

  - JDK-8280511: AArch64: Combine shift and negate to a single instruction

  - JDK-8280554: resourcehogs/serviceability/sa/ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is triggered

  - JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java is failing due to ObjectMonitor referencing a null Object

  - JDK-8280872: Reorder code cache segments to improve code density

  - JDK-8280890: Cannot use '-Djava.system.class.loader' with class loader in signed JAR

  - JDK-8280948: Write a regression test for JDK-4659800

  - JDK-8281296: Create a regression test for JDK-4515999

  - JDK-8281744: x86: Use short jumps in TIG::set_vtos_entry_points

  - JDK-8282049: AArch64: Use ZR for integer zero immediate volatile stores

  - JDK-8282276: Problem list failing two Robot Screen Capture tests

  - JDK-8282347: AARCH64: Untaken branch in has_negatives stub

  - JDK-8282398: EndingDotHostname.java test fails because SSL cert expired

  - JDK-8282402: Create a regression test for JDK-4666101

  - JDK-8282511: Use fixed certificate validation date in SSLExampleCert template

  - JDK-8282528: AArch64: Incorrect replicate2L_zero rule

  - JDK-8282600: SSLSocketImpl should not use user_canceled workaround when not necessary

  - JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/LoadUnloadGC2.java fails intermittently with exit code 1

  - JDK-8282730: LdapLoginModule throw NPE from logout method after login failure

  - JDK-8282777: Create a Regression test for JDK-4515031

  - JDK-8282857: Create a regression test for JDK-4702690

  - JDK-8283059: Uninitialized warning in check_code.c with GCC 11.2

  - JDK-8283199: Linux os::cpu_microcode_revision() stalls cold startup

  - JDK-8283298: Make CodeCacheSegmentSize a product flag

  - JDK-8283337: Posix signal handler modification warning triggering incorrectly

  - JDK-8283353: compiler/c2/cr6865031/Test.java and compiler/runtime/Test6826736.java fails on x86_32

  - JDK-8283383: [macos] a11y : Screen magnifier shows extra characters (0) at the end JButton accessibility name

  - JDK-8283999: Update JMH devkit to 1.35

  - JDK-8284533: Improve InterpreterCodelet data footprint

  - JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with "RuntimeException: for CodeHeap < 250MB the far jump is expected to be encoded with a single branch instruction"

  - JDK-8284690: [macos] VoiceOver : Getting java.lang.IllegalArgumentException: Invalid location on Editable JComboBox

  - JDK-8284732: FFI_GO_CLOSURES macro not defined but required for zero build on Mac OS X

  - JDK-8284752: Zero does not build on Mac OS X due to missing os::current_thread_enable_wx implementation

  - JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java failed with "AssertionError: Expected IOException to be thrown, but nothing was thrown"

  - JDK-8284892: java/net/httpclient/http2/TLSConnection.java fails intermittently

  - JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java times out with -Xcomp  -XX:+DeoptimizeALot

  - JDK-8285093: Introduce UTIL_ARG_WITH

  - JDK-8285305: Create an automated test for JDK-4495286

  - JDK-8285373: Create an automated test for JDK-4702233

  - JDK-8285604: closed sun/java2d/GdiRendering/ClipShapeRendering.java failed with "Incorrect color ffeeeeee instead of ff0000ff in pixel (100, 100)"

  - JDK-8285612: Remove jtreg tag manual=yesno for java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java

  - JDK-8285687: Remove jtreg tag manual=yesno for java/awt/print/PrinterJob/PageRangesDlgTest.java

  - JDK-8285698: Create a test to check the focus stealing of JPopupMenu from JComboBox

  - JDK-8285794: AsyncGetCallTrace might acquire a lock via JavaThread::thread_from_jni_environment

  - JDK-8285836: sun/net/www/http/KeepAliveCache/KeepAliveProperty.java failed with "RuntimeException: Failed in server"

  - JDK-8286172: Create an automated test for JDK-4516019

  - JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed with "RuntimeException: testCurrentTimeMillis failed with -3"

  - JDK-8286313: [macos] Voice over reads the boolean value as null in the JTable

  - JDK-8286452: The array length of testSmallConstArray should be small and const

  - JDK-8286460: Remove dependence on JAR filename in CDS tests

  - JDK-8286551: JDK-8286460 causes tests to fail to compile in Tier2

  - JDK-8286624: Regression Test CoordinateTruncationBug.java fails on OL8.3

  - JDK-8286663: Resolve IDE warnings in WTrayIconPeer and SystemTray

  - JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/DropTargetInInternalFrameTest.html times out and fails in Windows

  - JDK-8286872: Refactor add/modify notification icon (TrayIcon)

  - JDK-8287011: Improve container information

  - JDK-8287076: Document.normalizeDocument() produces different results

  - JDK-8287349: AArch64: Merge LDR instructions to improve C1 OSR performance

  - JDK-8287425: Remove unnecessary register push for MacroAssembler::check_klass_subtype_slow_path

  - JDK-8287609: macOS: SIGSEGV at [CoreFoundation] CFArrayGetCount / sun.font.CFont.getTableBytesNative

  - JDK-8287740: NSAccessibilityShowMenuAction not working for text editors

  - JDK-8287826: javax/accessibility/4702233/AccessiblePropertiesTest.java fails to compile

  - JDK-8288132: Update test artifacts in QuoVadis CA interop tests

  - JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit compiling xerces

  - JDK-8288377: [REDO] DST not applying properly with zone id offset set with TZ env variable

  - JDK-8288445: AArch64: C2 compilation fails with guarantee(!true || (true && (shift != 0))) failed: impossible encoding

  - JDK-8288651: CDS test HelloUnload.java should not use literal string as ClassLoader name

  - JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata type support

  - JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java fails on linux ppc64le machine with missing Memory and Swap Limit output

  - JDK-8289257: Some custom loader tests failed due to symbol refcount not decremented

  - JDK-8289301: P11Cipher should not throw out of bounds exception during padding

  - JDK-8289524: Add JFR JIT restart event

  - JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test fails with java.lang.NullPointerException

  - JDK-8289562: Change bugs.java.com and bugreport.java.com URL's to https

  - JDK-8290207: Missing notice in dom.md

  - JDK-8290209: jcup.md missing additional text

  - JDK-8290374: Shenandoah: Remove inaccurate comment on SBS::load_reference_barrier()

  - JDK-8290451: Incorrect result when switching to C2 OSR compilation from C1

  - JDK-8290529: C2: assert(BoolTest(btest).is_canonical()) failure

  - JDK-8290532: Adjust PKCS11Exception and handle more PKCS11 error codes

  - JDK-8290687: serviceability/sa/TestClassDump.java could leave files owned by root on macOS

  - JDK-8290705: StringConcat::validate_mem_flow asserts with "unexpected user: StoreI"

  - JDK-8290711: assert(false) failed: infinite loop in PhaseIterGVN::optimize

  - JDK-8290781: Segfault at PhaseIdealLoop::clone_loop_handle_data_uses

  - JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java failed with "RuntimeException: No JIT restart event found: expected true, was false"

  - JDK-8290908: misc tests fail: assert(!thread->owns_locks()) failed: must release all locks when leaving VM

  - JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is false

  - JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed with: Wrong number of class unload events: expected 10 got 4

  - JDK-8291459: JVM crash with GenerateOopMap::error_work(char const*, __va_list_tag*)

  - JDK-8291599: Assertion in PhaseIdealLoop::skeleton_predicate_has_opaque after JDK-8289127

  - JDK-8291650: Add delay to ClassUnloadEventTest before exiting to give time for JVM to send all events before VMDeath

  - JDK-8291775: C2: assert(r != __null && r->is_Region()) failed: this phi must have a region

  - JDK-8292083: Detected container memory limit may exceed physical machine memory

  - JDK-8292158: AES-CTR cipher state corruption with AVX-512

  - JDK-8292385: assert(ctrl == kit.control()) failed: Control flow was added although the intrinsic bailed out

  - JDK-8292541: [Metrics] Reported memory limit may exceed physical machine memory

  - JDK-8292586: simplify cleanups in NTLMAuthSequence getCredentialsHandle

  - JDK-8292682: Code change of JDK-8282730 not updated to reflect CSR update

  - JDK-8292695: SIGQUIT and jcmd attaching mechanism does not work with signal chaining library

  - JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString wrong placing of free

  - JDK-8292816: GPL Classpath exception missing from assemblyprefix.h

  - JDK-8292866: Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check MultiByteToWideChar return value for failures

  - JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due to classes not unloading

  - JDK-8292880: Improve debuggee logging for com/sun/jdi/ClassUnloadEventTest.java

  - JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6

  - JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX platform

  - JDK-8292903: enhance round_up_power_of_2 assertion output

  - JDK-8293010: JDI ObjectReference/referringObjects/referringObjects001 fails: assert(env->is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed: checking

  - JDK-8293044: C1: Missing access check on non-accessible class

  - JDK-8293232: Fix race condition in pkcs11 SessionManager

  - JDK-8293319: [C2 cleanup] Remove unused other_path arg in Parse::adjust_map_after_if

  - JDK-8293472: Incorrect container resource limit detection if manual cgroup fs mounts present

  - JDK-8293489: Accept CAs with BasicConstraints without pathLenConstraint

  - JDK-8293535: jdk/javadoc/doclet/testJavaFX/TestJavaFxMode.java fail with jfx

  - JDK-8293540: [Metrics] Incorrectly detected resource limits with additional cgroup fs mounts

  - JDK-8293550: Optionally add get-task-allow entitlement to macos binaries

  - JDK-8293578: Duplicate ldc generated by javac

  - JDK-8293657: sun/management/jmxremote/bootstrap/RmiBootstrapTest.java#id1 failed with "SSLHandshakeException: Remote host terminated the handshake"

  - JDK-8293659: Improve UnsatisfiedLinkError error message to include dlopen error details

  - JDK-8293672: Update freetype md file

  - JDK-8293701: jdeps InverseDepsAnalyzer runs into NoSuchElementException: No value present

  - JDK-8293808: mscapi destroyKeyContainer enhance KeyStoreException: Access is denied exception

  - JDK-8293815: P11PSSSignature.engineUpdate should not print debug messages during normal operation

  - JDK-8293816: CI: ciBytecodeStream::get_klass() is not consistent

  - JDK-8293826: Closed test fails after JDK-8276108 on aarch64

  - JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java still fails when GC cycles are not happening

  - JDK-8293834: Update CLDR data following tzdata 2022c update

  - JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java (still) assumes that GCs take 1ms minimum

  - JDK-8293965: Code signing warnings after JDK-8293550

  - JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr) failed: must have PC

  - JDK-8294307: ISO 4217 Amendment 173 Update

  - JDK-8294310: compare.sh fails on macos after JDK-8293550

  - JDK-8294357: (tz) Update Timezone Data to 2022d

  - JDK-8294578: [PPC64] C2: Missing is_oop information when using disjoint compressed oops mode

  - JDK-8294740: Add cgroups keyword to TestDockerBasic.java

  - JDK-8294837: unify Windows 2019 version check in os_windows and java_props_md

  - JDK-8294840: langtools OptionalDependencyTest.java use File.pathSeparator

  - JDK-8295173: (tz) Update Timezone Data to 2022e

  - JDK-8295288: Some vm_flags tests associate with a wrong BugID

  - JDK-8295405: Add cause in a couple of IllegalArgumentException and InvalidParameterException shown by sun/security/pkcs11 tests

  - JDK-8295412: support latest VS2022 MSC_VER in abstract_vm_version.cpp

  - JDK-8295419: JFR: Change name of jdk.JitRestart

  - JDK-8295429: Update harfbuzz md file

  - JDK-8295469: S390X: Optimized builds are broken

  - JDK-8295554: Move the "sizecalc.h" to the correct location

  - JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev

  - JDK-8295714: GHA ::set-output is deprecated and will be removed

  - JDK-8295723: security/infra/wycheproof/RunWycheproof.java fails with Assertion Error

  - JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr check before frame constructor

  - JDK-8295952: Problemlist existing compiler/rtm tests also on x86

  - JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails intermittently on a VM

  - JDK-8296108: (tz) Update Timezone Data to 2022f

  - JDK-8296239: ISO 4217 Amendment 174 Update

  - JDK-8296480: java/security/cert/pkix/policyChanges/TestPolicy.java is failing

  - JDK-8296485: BuildEEBasicConstraints.java test fails with SunCertPathBuilderException

  - JDK-8296496: Overzealous check in sizecalc.h prevents large memory allocation

  - JDK-8296632: Write a test to verify the content change of TextArea sends TextEvent

  - JDK-8296715: CLDR v42 update for tzdata 2022f

  - JDK-8296733: JFR: File Read event for RandomAccessFile::write(byte[]) is incorrect

  - JDK-8296945: PublicMethodsTest is slow due to dependency verification with debug builds

  - JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex returns wrong value

  - JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2

  - JDK-8296958: [JVMCI] add API for retrieving ConstantValue attributes

  - JDK-8296960: [JVMCI] list HotSpotConstantPool.loadReferencedType to ConstantPool

  - JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field for ResolvedJavaMethod/ResolvedJavaField

  - JDK-8296967: [JVMCI] rationalize relationship between getCodeSize and getCode in ResolvedJavaMethod

  - JDK-8297147: UnexpectedSourceImageSize test times out on slow machines when fastdebug is used

  - JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java fails again

  - JDK-8297241: Update sun/java2d/DirectX/OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java

  - JDK-8297309: Memory leak in ShenandoahFullGC

  - JDK-8297481: Create a regression test for JDK-4424517

  - JDK-8297530: java.lang.IllegalArgumentException: Negative length on strings concatenation

  - JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not run

  - JDK-8297656: AArch64: Enable AES/GCM Intrinsics

  - JDK-8297804: (tz) Update Timezone Data to 2022g

  - JDK-8299392: [17u] Remove designator DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6

  - JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java fails for hr_HR

  - JDK-8299483: ProblemList java/text/Format/NumberFormat/CurrencyFormat.java

Notes on individual issues:

===========================

client-libs/javax.imageio:

JDK-8295687: Better BMP bounds

==============================

Loading a linked ICC profile within a BMP image is now disabled by

default. To re-enable it, set the new system property

`sun.imageio.bmp.enabledLinkedProfiles` to `true`.  This new property

replaces the old property,

`sun.imageio.plugins.bmp.disableLinkedProfiles`.

client-libs/javax.sound:

JDK-8293742: Better Banking of Sounds

=====================================

Previously, the SoundbankReader implementation,

`com.sun.media.sound.JARSoundbankReader`, would download a JAR

soundbank from a URL.  This behaviour is now disabled by default. To

re-enable it, set the new system property `jdk.sound.jarsoundbank` to

`true`.

security-libs/java.security:

JDK-8282730: New Implementation Note for LoginModule on Removing Null from a Principals or Credentials Set

==========================================================================================================

Back in OpenJDK 9, JDK-8015081 changed the Set implementation used to

hold principals and credentials so that it rejected null

values. Attempts to call add(null), contains(null) or remove(null)

were changed to throw a NullPointerException.

However, the logout() methods in the LoginModule implementations

within the JDK were not updated to check for null values, which may

occur in the event of a failed login. As a result, a logout() call may

throw a NullPointerException.

The LoginModule implementations have now been updated with such checks

and an implementation note added to the specification to suggest that

the same change is made in third party modules.  Developers of third

party modules are advised to verify that their logout() method does not

throw a NullPointerException.

security-libs/javax.net.ssl:

JDK-8287411: Enhance DTLS performance

=====================================

The JDK now exchanges DTLS cookies for all handshakes, new and

resumed. The previous behaviour can be re-enabled by setting the new

system property `jdk.tls.enableDtlsResumeCookie` to `false`.

New in release OpenJDK 17.0.5 (2022-10-18):

===========================================

Live versions of these release notes can be found at:

  * https://bitly.com/openjdk1705

  * https://builds.shipilev.net/backports-monitor/release-notes-17.0.5.html

* Security fixes

  - JDK-8282252: Improve BigInteger/Decimal validation

  - JDK-8285662: Better permission resolution

  - JDK-8286077, CVE-2022-21618: Wider MultiByte conversions

  - JDK-8286511: Improve macro allocation

  - JDK-8286519: Better memory handling

  - JDK-8286526, CVE-2022-21619: Improve NTLM support

  - JDK-8286910, CVE-2022-21624: Improve JNDI lookups

  - JDK-8286918, CVE-2022-21628: Better HttpServer service

  - JDK-8287446: Enhance icon presentations

  - JDK-8288508: Enhance ECDSA usage

  - JDK-8289366, CVE-2022-39399: Improve HTTP/2 client usage

  - JDK-8289853: Update HarfBuzz to 4.4.1

  - JDK-8290334: Update FreeType to 2.12.1

* Other changes

  - JDK-6782021: It is not possible to read local computer certificates with the SunMSCAPI provider

  - JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14 & jdk7

  - JDK-7131823: bug in GIFImageReader

  - JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/bug4634626.java sometimes failed on mac

  - JDK-8028265: Add legacy tz tests to OpenJDK

  - JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java failed

  - JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/RepaintTest.java fails

  - JDK-8159694: HiDPI, Unity, java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java

  - JDK-8169468: NoResizeEventOnDMChangeTest.java fails because FS Window didn't receive all resizes!

  - JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The selected index should be "aad"

  - JDK-8178969: [TESTBUG] Wrong reporting of gc/g1/humongousObjects/TestHeapCounters test.

  - JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips testing for non-corner-case values

  - JDK-8212096: javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java failed intermittently due to SSLException: Tag mismatch

  - JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/DrawString/LCDTextSrcEa.java has issues

  - JDK-8225122: Test AncestorResized.java fails when Windows desktop is scaled.

  - JDK-8227651: Tests fail with SSLProtocolException: Input record too big

  - JDK-8240903: Add test to check that jmod hashes are reproducible

  - JDK-8254318: Remove .hgtags

  - JDK-8255724: [XRender] the BlitRotateClippedArea test fails on Linux in the XR pipeline

  - JDK-8256844: Make NMT late-initializable

  - JDK-8257534: misc tests failed with "NoClassDefFoundError: Could not initialize class java.util.concurrent.ThreadLocalRandom"

  - JDK-8264666: Change implementation of safeAdd/safeMult in the LCMSImageLayout class

  - JDK-8264792: The NumberFormat for locale sq_XK formats price incorrectly.

  - JDK-8265360: several compiler/whitebox tests fail with "private compiler.whitebox.SimpleTestCaseHelper(int) must be compiled"

  - JDK-8269039: Disable SHA-1 Signed JARs

  - JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails with RuntimeException 'JShellToolProvider' missing from stdout/stderr

  - JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over projections

  - JDK-8270312: Error: Not a test or directory containing tests: java/awt/print/PrinterJob/XparColor.java

  - JDK-8271078: jdk/incubator/vector/Float128VectorTests.java failed a subtest

  - JDK-8271344: Windows product version issue

  - JDK-8272352: Java launcher can not parse Chinese character when system locale is set to UTF-8

  - JDK-8272417: ZGC: fastdebug build crashes when printing ClassLoaderData

  - JDK-8272736: [JVMCI] Add API for reading and writing JVMCI thread locals

  - JDK-8272815: jpackage --type rpm produces an error: Invalid or unsupported type: [null]

  - JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)

  - JDK-8273115: CountedLoopEndNode::stride_con crash in debug build with -XX:+TraceLoopOpts

  - JDK-8273506: java Robot API did the 'm' keypress and caused /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out on macOS 12

  - JDK-8274434: move os::get_default_process_handle and os::dll_lookup to os_posix for POSIX platforms

  - JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java fails with expected [true] but found [false]

  - JDK-8274597: Some of the dnd tests time out and fail intermittently

  - JDK-8274856: Failing jpackage tests with fastdebug/release build

  - JDK-8275689: [TESTBUG] Use color tolerance only for XRender in BlitRotateClippedArea test

  - JDK-8275887: jarsigner prints invalid digest/signature algorithm warnings if keysize is weak/disabled

  - JDK-8276546: [IR Framework] Whitelist and ignore CompileThreshold

  - JDK-8276837: [macos]: Error when signing the additional launcher

  - JDK-8277429: Conflicting jpackage static library name

  - JDK-8277493: [REDO] Quarantined jpackage apps are labeled as "damaged"

  - JDK-8278067: Make HttpURLConnection default keep alive timeout configurable

  - JDK-8278233: [macos] tools/jpackage tests timeout due to /usr/bin/osascript

  - JDK-8278311: Debian packaging doesn't work

  - JDK-8278609: [macos] accessibility frame is misplaced on a secondary monitor on macOS

  - JDK-8278612: [macos] test/jdk/java/awt/dnd/RemoveDropTargetCrashTest crashes with VoiceOver on macOS

  - JDK-8279032: compiler/loopopts/TestSkeletonPredicateNegation.java times out with -XX:TieredStopAtLevel < 4

  - JDK-8279370: jdk.jpackage/share/native/applauncher/JvmLauncher.cpp fails to build with GCC 6.3.0

  - JDK-8279622: C2: miscompilation of map pattern as a vector reduction

  - JDK-8280233: Temporarily disable Unix domain sockets in Windows PipeImpl

  - JDK-8280550: SplittableRandom#nextDouble(double,double) can return result >= bound

  - JDK-8280696: C2 compilation hits assert(is_dominator(c, n_ctrl)) failed

  - JDK-8280863: Update build README to reflect that MSYS2 is supported

  - JDK-8280913: Create a regression test for JRootPane.setDefaultButton() method

  - JDK-8280944: Enable Unix domain sockets in Windows Selector notification mechanism

  - JDK-8280950: RandomGenerator:NextDouble() default behavior non conformant after JDK-8280550 fix

  - JDK-8281181: Do not use CPU Shares to compute active processor count

  - JDK-8281183: RandomGenerator:NextDouble() default behavior partially fixed by JDK-8280950

  - JDK-8281297: TestStressG1Humongous fails with guarantee(is_range_uncommitted)

  - JDK-8281535: Create a regression test for JDK-4670051

  - JDK-8281569: Create tests for Frame.setMinimumSize() method

  - JDK-8281628: KeyAgreement : generateSecret intermittently not resetting

  - JDK-8281738: Create a regression test for checking the 'Space' key activation of focused Button

  - JDK-8281745: Create a regression test for JDK-4514331

  - JDK-8281988: Create a regression test for JDK-4618767

  - JDK-8282007: Assorted enhancements to jpackage testing framework

  - JDK-8282046: Create a regression test for JDK-8000326

  - JDK-8282214: Upgrade JQuery to version 3.6.0

  - JDK-8282234: Create a regression test for JDK-4532513

  - JDK-8282280: Update Xerces to Version 2.12.2

  - JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid link access

  - JDK-8282343: Create a regression test for JDK-4518432

  - JDK-8282351: jpackage does not work if class file has `$$` in the name on windows

  - JDK-8282407: Missing ')' in MacResources.properties

  - JDK-8282467: add extra diagnostics for JDK-8268184

  - JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL, "already walkable"); fails with async profiler

  - JDK-8282538: PKCS11 tests fail on CentOS Stream 9

  - JDK-8282548: Create a regression test for JDK-4330998

  - JDK-8282555: Missing memory edge when spilling MoveF2I, MoveD2L etc

  - JDK-8282640: Create a test for JDK-4740761

  - JDK-8282778: Create a regression test for JDK-4699544

  - JDK-8282789: Create a regression test for the JTree usecase of JDK-4618767

  - JDK-8282860: Write a regression test for JDK-4164779

  - JDK-8282933: Create a test for JDK-4529616

  - JDK-8282936: Write a regression test for JDK-4615365

  - JDK-8282937: Write a regression test for JDK-4820080

  - JDK-8282947: JFR: Dump on shutdown live-locks in some conditions

  - JDK-8283015: Create a test for JDK-4715496

  - JDK-8283087: Create a test or JDK-4715503

  - JDK-8283245: Create a test for JDK-4670319

  - JDK-8283277: ISO 4217 Amendment 171 Update

  - JDK-8283441: C2: segmentation fault in ciMethodBlocks::make_block_at(int)

  - JDK-8283457: [macos] libpng build failures with Xcode13.3

  - JDK-8283493: Create an automated regression test for RFE 4231298

  - JDK-8283507: Create a regression test for RFE 4287690

  - JDK-8283562: JDK-8282306 breaks gtests on zero

  - JDK-8283597: [REDO] Invalid generic signature for redefined classes

  - JDK-8283621: Write a regression test for CCC4400728

  - JDK-8283623: Create an automated regression test for JDK-4525475

  - JDK-8283624: Create an automated regression test for RFE-4390885

  - JDK-8283712: Create a manual test framework class

  - JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for Oracle builds on Windows

  - JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix test

  - JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee

  - JDK-8283903: GetContainerCpuLoad does not return the correct result in share mode

  - JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea' for jdk-17.0.4

  - JDK-8284014: Menu items with submenus in JPopupMenu are not spoken on macOS

  - JDK-8284067: jpackage'd launcher reports non-zero exit codes with error prompt

  - JDK-8284077: Create an automated test for JDK-4170173

  - JDK-8284294: Create an automated regression test for RFE 4138746

  - JDK-8284358: Unreachable loop is not removed from C2 IR, leading to a broken graph

  - JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1

  - JDK-8284521: Write an automated regression test for RFE 4371575

  - JDK-8284535: Fix PrintLatinCJKTest.java test that is failing with Parse Exception

  - JDK-8284675: "jpackage.exe" creates application launcher without Windows Application Manfiest

  - JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks charset

  - JDK-8284686: Interval of < 1 ms disables ExecutionSample events

  - JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice

  - JDK-8284883: JVM crash: guarantee(sect->end() <= sect->limit()) failed: sanity on AVX512

  - JDK-8284898: Enhance PassFailJFrame

  - JDK-8284944: assert(cnt++ < 40) failed: infinite cycle in loop optimization

  - JDK-8284950: CgroupV1 detection code should consider memory.swappiness

  - JDK-8284956: Potential leak awtImageData/color_data when initializes X11GraphicsEnvironment

  - JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile fails when named value doesn't exist

  - JDK-8285081: Improve XPath operators count accuracy

  - JDK-8285097: Duplicate XML keys in XPATHErrorResources.java and XSLTErrorResources.java

  - JDK-8285301: C2: assert(!requires_atomic_access) failed: can't ensure atomicity

  - JDK-8285380: Fix typos in security

  - JDK-8285398: Cache the results of constraint checks

  - JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/PrintARGBImage.java manual test

  - JDK-8285693: Create an automated test for JDK-4702199

  - JDK-8285696: AlgorithmConstraints:permits not throwing IllegalArgumentException when 'alg'  is null

  - JDK-8285730: unify _WIN32_WINNT settings

  - JDK-8285820: C2: LCM prioritizes locally dependent CreateEx nodes over projections after 8270090

  - JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle offsets in MacroAssembler as 64-bit quantities

  - JDK-8286114: [test] show real exception in bomb call in sun/rmi/runtime/Log/checkLogging/CheckLogging.java

  - JDK-8286122: [macos]: App bundle cannot upload to Mac App Store due to info.plist embedded in java exe

  - JDK-8286177: C2: "failed: non-reduction loop contains reduction nodes" assert failure

  - JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5

  - JDK-8286266: [macos] Voice over moving JTable column to be the first column JVM crashes

  - JDK-8286277: CDS VerifyError when calling clone() on object array

  - JDK-8286314: Trampoline not created for far runtime targets outside small CodeCache

  - JDK-8286429: jpackageapplauncher build fails intermittently in Tier[45]

  - JDK-8286573: Remove the unnecessary method Attr#attribTopLevel and its usage

  - JDK-8286582: Build fails on macos aarch64 when using --with-zlib=bundled

  - JDK-8286625: C2 fails with assert(!n->is_Store() && !n->is_LoadStore()) failed: no node with a side effect

  - JDK-8286638: C2: CmpU needs to do more precise over/underflow analysis

  - JDK-8286869: unify os::dir_is_empty across posix platforms

  - JDK-8286870: Memory leak with RepeatCompilation

  - JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5

  - JDK-8287073: NPE from CgroupV2Subsystem.getInstance()

  - JDK-8287091: aarch64 : guarantee(val < (1ULL << nbits)) failed: Field too big for insn

  - JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts with freezer controller

  - JDK-8287113: JFR: Periodic task thread uses period for method sampling events

  - JDK-8287125: [macos] Multiple jpackage tests fail/timeout on same host

  - JDK-8287202: GHA: Add macOS aarch64 to the list of default platforms for workflow_dispatch event

  - JDK-8287223: C1: Inlining attempt through MH::invokeBasic() with null receiver

  - JDK-8287366: Improve test failure reporting in GHA

  - JDK-8287396: LIR_Opr::vreg_number() and data() can return negative number

  - JDK-8287432: C2: assert(tn->in(0) != __null) failed: must have live top node

  - JDK-8287463: JFR: Disable TestDevNull.java on Windows

  - JDK-8287663: Add a regression test for JDK-8287073

  - JDK-8287672: jtreg test com/sun/jndi/ldap/LdapPoolTimeoutTest.java fails intermittently in nightly run

  - JDK-8287724: Fix various issues with msys2

  - JDK-8287735: Provide separate event category for dll operations

  - JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer controller) was incomplete

  - JDK-8287824: The MTPerLineTransformValidation tests has a typo in the @run tag

  - JDK-8287895: Some langtools tests fail on msys2

  - JDK-8287896: PropertiesTest.sh fail on msys2

  - JDK-8287902: UnreadableRB case in MissingResourceCauseTest is not working reliably on Windows

  - JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests

  - JDK-8287917: System.loadLibrary does not work on Big Sur if JDK is built with macOS SDK 10.15 and earlier

  - JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails with release VMs

  - JDK-8288003: log events for os::dll_unload

  - JDK-8288303: C1: Miscompilation due to broken Class.getModifiers intrinsic

  - JDK-8288360: CI: ciInstanceKlass::implementor() is not consistent for well-known classes

  - JDK-8288399: MacOS debug symbol files not always deterministic in reproducible builds

  - JDK-8288467: remove memory_operand assert for spilled instructions

  - JDK-8288499: Restore cancel-in-progress in GHA

  - JDK-8288599: com/sun/management/OperatingSystemMXBean/TestTotalSwap.java: Expected total swap size ... but getTotalSwapSpaceSize returned ...

  - JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp

  - JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too small

  - JDK-8288985: P11TlsKeyMaterialGenerator should work with ChaCha20-Poly1305

  - JDK-8288992: AArch64: CMN should be handled the same way as CMP

  - JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE: duplicated predicate failed which is impossible

  - JDK-8289147: unify os::infinite_sleep on posix platforms

  - JDK-8289197: [17u] Push of backport of 8286177 did not remove assertion

  - JDK-8289471: Issue in Initialization of keys in ErrorMsg.java and XPATHErrorResources.java

  - JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on muslc

  - JDK-8289486: Improve XSLT XPath operators count efficiency

  - JDK-8289549: ISO 4217 Amendment 172 Update

  - JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails on Alpine/musl

  - JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on cgroups v2 and crun

  - JDK-8289697: buffer overflow in MTLVertexCache.m: MTLVertexCache_AddGlyphQuad

  - JDK-8289799: Build warning in methodData.cpp memset zero-length parameter

  - JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime() after JDK-8289060

  - JDK-8289910: unify os::message_box across posix platforms

  - JDK-8290000: Bump macOS GitHub actions to macOS 11

  - JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr) failed: must have PC

  - JDK-8290020: Deadlock in leakprofiler::emit_events during shutdown

  - JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to preserve vector registers

  - JDK-8290246: test fails "assert(init != __null) failed: initialization not found"

  - JDK-8290417: CDS cannot archive lamda proxy with useImplMethodHandle

  - JDK-8290456: remove os::print_statistics()

  - JDK-8291595: [17u] Delete files missed in backport of 8269039

  - JDK-8291633: Build failures with GCC 11, Alpine 3 due to incompatible casts from nullptr

  - JDK-8292579: (tz) Update Timezone Data to 2022c

  - JDK-8295056: [17u] Remove designator DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5

Notes on individual issues:

===========================

core-libs/java.net:

JDK-8278067: Make HttpURLConnection Default Keep Alive Timeout Configurable

===========================================================================

Two system properties have been added which control the keep alive

behavior of HttpURLConnection in the case where the server does not

specify a keep alive time. Two properties are defined for controlling

connections to servers and proxies separately. They are:

* `http.keepAlive.time.server`

* `http.keepAlive.time.proxy`

respectively. More information about them can be found on the

Networking Properties page:

https://docs.oracle.com/en/java/javase/19/docs/api/java.base/java/net/doc-files/net-properties.html.

security-libs/javax.crypto:

JDK-6782021: Windows KeyStore Updated to Include Access to the Local Machine Location

=====================================================================================

The Windows KeyStore support in the SunMSCAPI provider has been

expanded to include access to the local machine location. The new

keystore types are:

* "Windows-MY-LOCALMACHINE"

* "Windows-ROOT-LOCALMACHINE"

The following keystore types were also added, allowing developers to

make it clear they map to the current user:

* "Windows-MY-CURRENTUSER" (same as "Windows-MY")

* "Windows-ROOT-CURRENTUSER" (same as "Windows-ROOT")

JDK-8286918: Better HttpServer service

======================================

The HttpServer can be optionally configured with a maximum connection

limit by setting the jdk.httpserver.maxConnections system property. A

value of 0 or a negative integer is ignored and considered to

represent no connection limit. In the case of a positive integer

value, any newly accepted connections will be first checked against

the current count of established connections and, if the configured

limit has been reached, then the newly accepted connection will be

closed immediately.

hotspot/runtime:

JDK-8281181: CPU Shares Ignored When Computing Active Processor Count

=====================================================================

Previous JDK releases used an incorrect interpretation of the Linux

cgroups parameter "cpu.shares". This might cause the JVM to use fewer

CPUs than available, leading to an under utilization of CPU resources

when the JVM is used inside a container.

Starting from this JDK release, by default, the JVM no longer

considers "cpu.shares" when deciding the number of threads to be used

by the various thread pools. The `-XX:+UseContainerCpuShares`

command-line option can be used to revert to the previous

behavior. This option is deprecated and may be removed in a future JDK

release.

security-libs/java.security:

JDK-8269039: Disabled SHA-1 Signed JARs

=======================================

JARs signed with SHA-1 algorithms are now restricted by default and

treated as if they were unsigned. This applies to the algorithms used

to digest, sign, and optionally timestamp the JAR. It also applies to

the signature and digest algorithms of the certificates in the

certificate chain of the code signer and the Timestamp Authority, and

any CRLs or OCSP responses that are used to verify if those

certificates have been revoked. These restrictions also apply to

signed JCE providers.

To reduce the compatibility risk for JARs that have been previously

timestamped, there is one exception to this policy:

- Any JAR signed with SHA-1 algorithms and timestamped prior to

  January 01, 2019 will not be restricted.

This exception may be removed in a future JDK release. To determine if

your signed JARs are affected by this change, run:

$ jarsigner -verify -verbose -certs`

on the signed JAR, and look for instances of "SHA1" or "SHA-1" and

"disabled" and a warning that the JAR will be treated as unsigned in

the output.

For example:

   Signed by "CN="Signer""

   Digest algorithm: SHA-1 (disabled)

   Signature algorithm: SHA1withRSA (disabled), 2048-bit key

   WARNING: The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled by the security property:

   jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, DSA keySize < 1024, SHA1 denyAfter 2019-01-01

JARs affected by these new restrictions should be replaced or

re-signed with stronger algorithms.

Users can, *at their own risk*, remove these restrictions by modifying

the `java.security` configuration file (or override it by using the

`java.security.properties` system property) and removing "SHA1 usage

SignedJAR & denyAfter 2019-01-01" from the

`jdk.certpath.disabledAlgorithms` security property and "SHA1

denyAfter 2019-01-01" from the `jdk.jar.disabledAlgorithms` security

property.

New in release OpenJDK 17.0.4.1 (2022-08-16):

===========================================

Live versions of these release notes can be found at:

  * https://bit.ly/openjdk17041

  * https://builds.shipilev.net/backports-monitor/release-notes-17.0.4.1.txt

* Other changes

  - JDK-8292258: Bump update version for OpenJDK: jdk-17.0.4.1

  - JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when allocating array of size too large

Notes on individual issues:

===========================

hotspot/compiler:

JDK-8292396: C2 Compilation Errors Unpredictably Crashes JVM

============================================================

Fixes a regression in the C2 JIT compiler which caused the Java

Runtime to crash unpredictably.