macos_x64: update JRE to 24-ea+15

macOS/x86_64/conf/jaxp-strict.properties.template

@@ -0,0 +1,123 @@
+################################################################################
+#           JAXP Strict Configuration Template
+#
+# This file, jaxp-strict.properties.template, provides a template for creating
+# custom configuration files. The settings in this file are more restrictive than
+# those in the default configuration, jaxp.properties. In particular:
+#   - JDKCatalog Resolve is on "strict" setting
+#   - Extension Functions are disabled
+#   - JAXP Limits are set to smaller numbers
+#
+# To create a configuration file, copy the template to a new file with
+# the .properties extension, that is:
+#
+#     cp $JAVA_HOME/conf/jaxp-strict.properties.template /path/to/jaxp-strict.properties
+#
+# The configuration file can then be set up using the system property
+# java.xml.config.file to override the default configuration jaxp.properties
+# and used to assess the impact of a stricter configuration, for example:
+#
+#     java -Djava.xml.config.file=/path/to/jaxp-strict.properties
+#
+# The system property java.xml.config.file is defined in the java.xml module
+# description.
+#
+################################################################################
+
+#
+# ---- Implementation Specific Properties ----
+# For a complete list of properties, refer to the Implementation Specific Properties
+# table in the java.xml/module-summary.
+#
+# Extension Functions:
+#
+# This property determines whether XSLT and XPath extension functions are allowed.
+# The value type is boolean and the default value is true (allowing
+# extension functions). The following entry overrides the default value and
+# disallows extension functions:
+#
+jdk.xml.enableExtensionFunctions=false
+#
+#
+# Overriding the default parser:
+#
+# This property allows a third party implementation to override the default
+# parser provided by the JDK. The value type is boolean and the default value is
+# false, disallowing overriding the default parser. The setting below reflects
+# the default property setting:
+#
+jdk.xml.overrideDefaultParser=false
+#
+# Implementation Specific Properties - jdkcatalog.resolve
+#
+# This property instructs the JDK default CatalogResolver to act in accordance with
+# the setting when unable to resolve an external reference with the built-in Catalog.
+# The options are:
+#     continue -- indicates that the processing should continue
+#     ignore -- indicates that the reference is skipped
+#     strict -- indicates that the resolver should throw a CatalogException
+#
+# The following setting causes the default CatalogResolver to throw a CatalogException
+# when external references are not resolved by a user-defined resolver or catalog,
+# or the built-in Catalog:
+jdk.xml.jdkcatalog.resolve=strict
+#
+# Implementation Specific Properties - DTD
+#
+# This property instructs the parsers to deny, ignore or allow DTD processing.
+# The following setting causes the parser to reject DTDs by throwing an exception.
+# jdk.xml.dtd.support=deny
+#
+# The following setting permits the processor to continue processing DTDs. Note
+# that while DTDs are allowed in this configuration, external references are
+# restricted, and limits on DTD entities are tightened:
+jdk.xml.dtd.support=allow
+#
+# Implementation Specific Properties - Limits
+#
+# Limits have a value type Integer. The values must be positive integers. Zero
+# means no limit.
+#
+# Limits the number of entity expansions
+jdk.xml.entityExpansionLimit=2500
+#
+# Limits the total size of all entities that include general and parameter entities.
+# The size is calculated as an aggregation of all entities.
+jdk.xml.totalEntitySizeLimit=100000
+#
+# Limits the maximum size of any general entities.
+jdk.xml.maxGeneralEntitySizeLimit=100000
+#
+# Limits the maximum size of any parameter entities, including the result of
+# nesting multiple parameter entities.
+jdk.xml.maxParameterEntitySizeLimit=15000
+#
+# Limits the total number of nodes in all entity references.
+jdk.xml.entityReplacementLimit=100000
+#
+# Limits the number of attributes an element can have. The default value is 10000.
+jdk.xml.elementAttributeLimit=10000
+#
+# Limits the number of content model nodes that may be created when building a
+# grammar for a W3C XML Schema that contains maxOccurs attributes with values
+# other than "unbounded". The default value is 5000.
+jdk.xml.maxOccurLimit=5000
+#
+# Limits the maximum element depth. The default value is 0.
+jdk.xml.maxElementDepth=0
+#
+# Limits the maximum size of XML names, including element name, attribute name
+# and namespace prefix and URI. The default value is 1000.
+jdk.xml.maxXMLNameLimit=1000
+#
+#
+# XPath Limits
+#
+# Limits the number of groups an XPath expression can contain. The default value is 10.
+jdk.xml.xpathExprGrpLimit=10
+#
+# Limits the number of operators an XPath expression can contain. The default value is 100.
+jdk.xml.xpathExprOpLimit=100
+#
+# Limits the total number of XPath operators in an XSL Stylesheet. The default value is 10000.
+jdk.xml.xpathTotalOpLimit=10000

macOS/x86_64/conf/jaxp.properties

@@ -31,7 +31,7 @@
 #
 # The format of an entry is key=value where the key is the fully qualified name
 # of the factory and value that of the implementation class. The following entry
-# set a DocumentBuilderFactory implementation class:
+# sets a DocumentBuilderFactory implementation class:
 #
 # javax.xml.parsers.DocumentBuilderFactory=com.sun.org.apache.xerces.internal.jaxp.DocumentBuilderFactoryImpl
 #
@@ -49,7 +49,7 @@
 #
 # For example, the RESOLVE property in CatalogFeatures has an associated system
 # property called javax.xml.catalog.resolve. An entry for the RESOLVE property in the
-# configuration file would therefore use javax.xml.catalog.resolve as the key, that
+# configuration file therefore uses javax.xml.catalog.resolve as the key, that
 # is:
 #     javax.xml.catalog.resolve=strict
 #
@@ -58,15 +58,15 @@
 #
 # This property determines whether XSLT and XPath extension functions are allowed.
 # The value type is boolean and the default value is true (allowing
-# extension functions). The following entry would override the default value and
-# disallow extension functions:
+# extension functions). The following entry overrides the default value and
+# disallows extension functions:
 #
 # jdk.xml.enableExtensionFunctions=false
 #
 #
 # Overriding the default parser:
 #
-# This property allows using a third party implementation to override the default
+# This property allows a third party implementation to override the default
 # parser provided by the JDK. The value type is boolean and the default value is
 # false, disallowing overriding the default parser. The setting below reflects
 # the default property setting:
@@ -137,16 +137,20 @@ jdk.xml.overrideDefaultParser=false
 #     ignore -- indicates that the reference is skipped
 #     strict -- indicates that the resolver should throw a CatalogException
 #
-# The following setting would cause the resolve to throw a CatalogException when
-# unable to resolve an external reference:
-# jdk.xml.jdkcatalog.resolve=strict
+# The following setting allows the resolution to continue in cases where
+# external references are not resolved by a user-defined resolver or catalog if
+# any, and the built-in Catalog:
+jdk.xml.jdkcatalog.resolve=continue
 #
 # Implementation Specific Properties - DTD
 #
-# This property instructs the parsers to: deny, ignore or allow DTD processing.
-# The following setting would cause the parser to reject DTD by throwing an exception.
+# This property instructs the parsers to deny, ignore or allow DTD processing.
+# The following setting causes the parser to reject DTDs by throwing an exception.
 # jdk.xml.dtd.support=deny
 #
+# The following setting permits the processor to continue processing DTDs
+jdk.xml.dtd.support=allow
+#
 # Implementation Specific Properties - Limits
 #
 # Limits have a value type Integer. The values must be positive integers. Zero
@@ -157,17 +161,17 @@ jdk.xml.overrideDefaultParser=false
 #
 # Limits the total size of all entities that include general and parameter entities.
 # The size is calculated as an aggregation of all entities. The default value is 5x10^7.
-# jdk.xml.totalEntitySizeLimit=5E7
+# jdk.xml.totalEntitySizeLimit=50000000
 #
 # Limits the maximum size of any general entities. The default value is 0.
 # jdk.xml.maxGeneralEntitySizeLimit=0
 #
 # Limits the maximum size of any parameter entities, including the result of
 # nesting multiple parameter entities. The default value is 10^6.
-# jdk.xml.maxParameterEntitySizeLimit=1E6
+# jdk.xml.maxParameterEntitySizeLimit=1000000
 #
 # Limits the total number of nodes in all entity references. The default value is 3x10^6.
-# jdk.xml.entityReplacementLimit=3E6
+# jdk.xml.entityReplacementLimit=3000000
 #
 # Limits the number of attributes an element can have. The default value is 10000.
 # jdk.xml.elementAttributeLimit=10000
@@ -195,4 +199,3 @@ jdk.xml.xpathExprOpLimit=100
 #
 # Limits the total number of XPath operators in an XSL Stylesheet. The default value is 10000.
 jdk.xml.xpathTotalOpLimit=10000
-

macOS/x86_64/conf/security/java.security

@@ -882,7 +882,7 @@ jdk.tls.legacyAlgorithms=NULL, anon, RC4, DES, 3DES_EDE_CBC
 #   KeyLimits:
 #       " KeyLimit { , KeyLimit } "
 #
-#   WeakKeyLimit:
+#   KeyLimit:
 #       AlgorithmName Action Length
 #
 #   AlgorithmName:
@@ -1320,6 +1320,9 @@ jdk.sasl.disabledMechanisms=
 #        A4FE7C7F15155F3F0AEF7AAA83CF6E06DEB97CA3F909DF920AC1490882D488ED
 #        Distrust after December 31, 2019.
 #
+#   ENTRUST_TLS : Distrust TLS Server certificates anchored by
+#   an Entrust root CA and issued after October 31, 2024.
+#
 # Leading and trailing whitespace surrounding each value are ignored.
 # Unknown values are ignored. If the property is commented out or set to the
 # empty String, no policies are enforced.
@@ -1331,7 +1334,7 @@ jdk.sasl.disabledMechanisms=
 # jdk.certpath.disabledAlgorithms; those restrictions are still enforced even
 # if this property is not enabled.
 #
-jdk.security.caDistrustPolicies=SYMANTEC_TLS
+jdk.security.caDistrustPolicies=SYMANTEC_TLS,ENTRUST_TLS
 
 #
 # FilePermission path canonicalization
@@ -1505,3 +1508,23 @@ jdk.tls.alpnCharset=ISO_8859_1
 #
 # [1] https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-sfu/bde93b0e-f3c9-4ddf-9f44-e1453be7af5a
 #jdk.security.krb5.s4u2proxy.acceptNonForwardableServiceTicket=false
+
+#
+# Policy for name comparison in keytab and ccache entry lookup
+#
+# When looking up a keytab or credentials cache (ccache) entry for a Kerberos
+# principal, the principal name is compared with the name in the entry.
+# The comparison is by default case-insensitive. However, many Kerberos
+# implementations consider principal names to be case-sensitive. Consequently,
+# if two principals have names that differ only in case, there is a risk that
+# an incorrect keytab or ccache entry might be selected.
+#
+# If this security property is set to "true", the comparison of principal
+# names at keytab and ccache entry lookup is case-sensitive.
+#
+# The default value is "false".
+#
+# If a system property of the same name is also specified, it supersedes the
+# security property value defined here.
+#
+#jdk.security.krb5.name.case.sensitive=false

macOS/x86_64/legal/java.base/cldr.md

@@ -1,14 +1,15 @@
-## Unicode Common Local Data Repository (CLDR) v44
+## Unicode Common Local Data Repository (CLDR) v45
 
 ### CLDR License
 
 ```
 
+
 UNICODE LICENSE V3
 
 COPYRIGHT AND PERMISSION NOTICE
 
-Copyright © 2019-2023 Unicode, Inc.
+Copyright © 1991-2024 Unicode, Inc.
 
 NOTICE TO USER: Carefully read the following legal agreement. BY
 DOWNLOADING, INSTALLING, COPYING OR OTHERWISE USING DATA FILES, AND/OR
@@ -44,4 +45,56 @@ not be used in advertising or otherwise to promote the sale, use or other
 dealings in these Data Files or Software without prior written
 authorization of the copyright holder.
 
+SPDX-License-Identifier: Unicode-3.0
+
+————————————
+
+Unicode® Copyright and Terms of Use
+For the general privacy policy governing access to this site, see the  Unicode Privacy Policy.
+
+Unicode Copyright
+Copyright © 1991-2024 Unicode, Inc. All rights reserved.
+Definitions
+Unicode Data Files ("DATA FILES") include all data files under the directories:
+https://www.unicode.org/Public/
+https://www.unicode.org/reports/
+https://www.unicode.org/ivd/data/
+
+Unicode Data Files do not include PDF online code charts under the directory:
+https://www.unicode.org/Public/
+
+Unicode Software ("SOFTWARE") includes any source code published in the Unicode Standard
+or any source code or compiled code under the directories:
+https://www.unicode.org/Public/PROGRAMS/
+https://www.unicode.org/Public/cldr/
+http://site.icu-project.org/download/
+Terms of Use
+Certain documents and files on this website contain a legend indicating that "Modification is permitted." Any person is hereby authorized, without fee, to modify such documents and files to create derivative works conforming to the Unicode® Standard, subject to Terms and Conditions herein.
+Any person is hereby authorized, without fee, to view, use, reproduce, and distribute all documents and files, subject to the Terms and Conditions herein.
+Further specifications of rights and restrictions pertaining to the use of the Unicode DATA FILES and SOFTWARE can be found in the Unicode Data Files and Software License.
+Each version of the Unicode Standard has further specifications of rights and restrictions of use. For the book editions (Unicode 5.0 and earlier), these are found on the back of the title page.
+The Unicode PDF online code charts carry specific restrictions. Those restrictions are incorporated as the first page of each PDF code chart.
+All other files, including online documentation of the core specification for Unicode 6.0 and later, are covered under these general Terms of Use.
+No license is granted to "mirror" the Unicode website where a fee is charged for access to the "mirror" site.
+Modification is not permitted with respect to this document. All copies of this document must be verbatim.
+Restricted Rights Legend
+Any technical data or software which is licensed to the United States of America, its agencies and/or instrumentalities under this Agreement is commercial technical data or commercial computer software developed exclusively at private expense as defined in FAR 2.101, or DFARS 252.227-7014 (June 1995), as applicable. For technical data, use, duplication, or disclosure by the Government is subject to restrictions as set forth in DFARS 202.227-7015 Technical Data, Commercial and Items (Nov 1995) and this Agreement. For Software, in accordance with FAR 12-212 or DFARS 227-7202, as applicable, use, duplication or disclosure by the Government is subject to the restrictions set forth in this Agreement.
+Warranties and Disclaimers
+This publication and/or website may include technical or typographical errors or other inaccuracies. Changes are periodically added to the information herein; these changes will be incorporated in new editions of the publication and/or website. Unicode, Inc. may make improvements and/or changes in the product(s) and/or program(s) described in this publication and/or website at any time.
+If this file has been purchased on magnetic or optical media from Unicode, Inc. the sole and exclusive remedy for any claim will be exchange of the defective media within ninety (90) days of original purchase.
+EXCEPT AS PROVIDED IN SECTION E.2, THIS PUBLICATION AND/OR SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND EITHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING, BUT NOT LIMITED TO, ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. UNICODE, INC. AND ITS LICENSORS ASSUME NO RESPONSIBILITY FOR ERRORS OR OMISSIONS IN THIS PUBLICATION AND/OR SOFTWARE OR OTHER DOCUMENTS WHICH ARE REFERENCED BY OR LINKED TO THIS PUBLICATION OR THE UNICODE WEBSITE.
+Waiver of Damages
+In no event shall Unicode, Inc. or its licensors be liable for any special, incidental, indirect or consequential damages of any kind, or any damages whatsoever, whether or not Unicode, Inc. was advised of the possibility of the damage, including, without limitation, those resulting from the following: loss of use, data or profits, in connection with the use, modification or distribution of this information or its derivatives.
+Trademarks & Logos
+The Unicode Word Mark and the Unicode Logo are trademarks of Unicode, Inc. “The Unicode Consortium” and “Unicode, Inc.” are trade names of Unicode, Inc. Use of the information and materials found on this website indicates your acknowledgement of Unicode, Inc.’s exclusive worldwide rights in the Unicode Word Mark, the Unicode Logo, and the Unicode trade names.
+The Unicode Consortium Name and Trademark Usage Policy (“Trademark Policy”) are incorporated herein by reference and you agree to abide by the provisions of the Trademark Policy, which may be changed from time to time in the sole discretion of Unicode, Inc.
+All third party trademarks referenced herein are the property of their respective owners.
+Miscellaneous
+Jurisdiction and Venue. This website is operated from a location in the State of California, United States of America. Unicode, Inc. makes no representation that the materials are appropriate for use in other locations. If you access this website from other locations, you are responsible for compliance with local laws. This Agreement, all use of this website and any claims and damages resulting from use of this website are governed solely by the laws of the State of California without regard to any principles which would apply the laws of a different jurisdiction. The user agrees that any disputes regarding this website shall be resolved solely in the courts located in Santa Clara County, California. The user agrees said courts have personal jurisdiction and agree to waive any right to transfer the dispute to any other forum.
+Modification by Unicode, Inc. Unicode, Inc. shall have the right to modify this Agreement at any time by posting it to this website. The user may not assign any part of this Agreement without Unicode, Inc.’s prior written consent.
+Taxes. The user agrees to pay any taxes arising from access to this website or use of the information herein, except for those based on Unicode’s net income.
+Severability.  If any provision of this Agreement is declared invalid or unenforceable, the remaining provisions of this Agreement shall remain in effect.
+Entire Agreement. This Agreement constitutes the entire agreement between the parties.
+
+
 ```

macOS/x86_64/legal/java.base/public_suffix.md

@@ -11,7 +11,7 @@ If you do not wish to use the Public Suffix List, you may remove the
 
 The Source Code of this file is available under the
 Mozilla Public License, v. 2.0 and is located at
-https://raw.githubusercontent.com/publicsuffix/list/b5bf572c52988dbe9d865b8f090ea819024a9936/public_suffix_list.dat.
+https://raw.githubusercontent.com/publicsuffix/list/1cbd6e71a9b83620b1d0b11e49d3d9ff48c27e22/public_suffix_list.dat.
 If a copy of the MPL was not distributed with this file, you can obtain one
 at https://mozilla.org/MPL/2.0/.