Update to jdk-17.0.8+7 (GA)

Update release notes to 17.0.8+7
Switch to GA mode for final release.

* This tarball is embargoed until 2023-07-18 @ 1pm PT. *

NEWS

@@ -8,6 +8,28 @@ New in release OpenJDK 17.0.8 (2023-07-18):
 Live versions of these release notes can be found at:
   * https://bit.ly/openjdk1708
 
+* CVEs
+  - CVE-2023-22006
+  - CVE-2023-22036
+  - CVE-2023-22041
+  - CVE-2023-22044
+  - CVE-2023-22045
+  - CVE-2023-22049
+  - CVE-2023-25193
+* Security fixes
+  - JDK-8294323: Improve Shared Class Data
+  - JDK-8296565: Enhanced archival support
+  - JDK-8298676, JDK-8300891: Enhanced Look and Feel
+  - JDK-8300285: Enhance TLS data handling
+  - JDK-8300596: Enhance Jar Signature validation
+  - JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
+  - JDK-8302475: Enhance HTTP client file downloading
+  - JDK-8302483: Enhance ZIP performance
+  - JDK-8303376: Better launching of JDI
+  - JDK-8304460: Improve array usages
+  - JDK-8304468: Better array usages
+  - JDK-8305312: Enhanced path handling
+  - JDK-8308682: Enhance AES performance
 * Other changes
   - JDK-8178806: Better exception logging in crypto code
   - JDK-8201516: DebugNonSafepoints generates incorrect information
@@ -123,7 +145,6 @@ Live versions of these release notes can be found at:
   - JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic called with negative character argument
   - JDK-8301637: ThreadLocalRandom.current().doubles().parallel() contention
   - JDK-8301661: Enhance os::pd_print_cpu_info on macOS and Windows
-  - JDK-8301998: Update HarfBuzz to 7.0.1
   - JDK-8302151: BMPImageReader throws an exception reading BMP images
   - JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined must respect ForceInline
   - JDK-8302320: AsyncGetCallTrace obtains too few frames in sanity test
@@ -248,6 +269,22 @@ releases of OpenJDK 11. To use the previous version of the character
 set, the new system property `jdk.charset.GB18030` should be set to
 `2000`.
 
+core-libs/java.util.jar:
+
+JDK-8300596: Enhance Jar Signature validation
+=============================================
+A System property "jdk.jar.maxSignatureFileSize" is introduced to
+configure the maximum number of bytes allowed for the
+signature-related files in a JAR file during verification. The default
+value is 8000000 bytes (8 MB).
+
+JDK-8302483: Enhance ZIP performance
+====================================
+This release of OpenJDK includes stronger checks on the Zip64 fields
+of zip files. In the event that these checks cause failures on trusted
+zip files, the checks can be disabled by setting the new system
+property, `jdk.util.zip.disableZip64ExtraFieldValidation` to `true`.
+
 security-libs/java.security:
 
 JDK-8307134: Added 4 GTS Root CA Certificates