New in release OpenJDK 18.0.2 (2022-07-19)

• Full release notes can be found at https://builds.shipilev.net/backports-monitor/release-notes-18.0.2.txt

Security fixes

• JDK-8272243: Improve DER parsing
• JDK-8272249: Better properties of loaded Properties
• JDK-8277608: Address IP Addressing
• JDK-8281859, CVE-2022-21540: Improve class compilation
• JDK-8281866, CVE-2022-21541: Enhance MethodHandle invocations
• JDK-8282676: Improve subject handling
• JDK-8283190: Improve MIDI processing
• JDK-8284370: Improve zlib usage
• JDK-8285407, CVE-2022-34169: Improve Xalan supports

JDK-8288367: CPU Shares Ignored When Computing Active Processor Count

Previous JDK releases used an incorrect interpretation of the Linux cgroups parameter cpu.shares. This might cause the JVM to use fewer CPUs than available, leading to an under utilization of CPU resources when the JVM is used inside a container. Starting from this JDK release, by default, the JVM no longer considers cpu.shares when deciding the number of threads to be used by the various thread pools. The -XX:+UseContainerCpuShares command-line option can be used to revert to the previous behaviour. This option is deprecated and may be removed in a future JDK release.