The RMI Registry built-in serial filter has been modified to check only the array size and not the component type. The maximum array size has been increased to 1,000,000. The override filter can be used to decrease the limit. Array sizes greater than the maxarray limit will be rejected. Sizes less than the maxarray limit will be allowed.
The `java.security` file contains more information about the `sun.rmi.registry.registryFilter` property and the `conf/security/java.security` configuration file has been updated to better describe the default behavior and how to override it.