Liberica JDK 11.0.27+9: Release Notes

Published: April 15, 2025

1. Version information

This document provides information about Liberica JDK 11.0.27 release.

The full version string for this update release is 11.0.27+9. The version number is 11.

Liberica JDK 11 is distributed as .apk, .rpm, .zip, .deb, and .tar.gz packages. Please select the most appropriate for your purposes.

2. What’s New

This release contains the following updates and new features.

Notable Changes

This is the list of the notable issues fixed in this release.

Issue ID

JDK-8273914

Summary: Indy string concat changes order of operations

Description: String concatenation has been changed to evaluate each argument and eagerly convert it to a string, in left-to-right order. This fixes a bug in the invokedynamic-based string concatenation strategies introduced in [JEP 280](http://openjdk.java.net/jeps/280).

JDK-8335912

Summary: Add an operation mode to the jar command when extracting to not overwriting existing files

Description: The jar tool’s extract operation has been enhanced to allow the --keep-old-files and the -k options to be used in preventing the overwriting of existing files. Examples: jar xkf foo.jar or jar --extract --keep-old-files --file foo.jar. Either of these commands will extract the contents of foo.jar. If an entry with the same name already exists in the target directory, then the existing file will not be overwritten.

JDK-8346587

Summary: Distrust TLS server certificates anchored by Camerfirma Root CAs

Description: The JDK will stop trusting TLS server certificates issued after April 15, 2025 and anchored by Camerfirma root certificates, in line with similar plans announced by Google, Mozilla, Apple, and Microsoft. TLS server certificates issued on or before April 15, 2025 will continue to be trusted until they expire. Certificates issued after that date, and anchored by any of the Certificate Authorities in the table below, will be rejected. The restrictions are enforced in the JDK implementation (the SunJSSE Provider) of the Java Secure Socket Extension (JSSE) API. A TLS session will not be negotiated if the server’s certificate chain is anchored by any of the Certificate Authorities in the table below and the certificate has been issued after April 15, 2025.

JDK-8347965

Summary: Update Timezone Data to 2025a

Description: Update Timezone Data to 2025a in which Paraguay adopts permanent -03 starting spring 2024; Improve pre-1991 data for the Philippines; Etc/Unknown is now reserved.

Graal support in Liberica JDK 11

Liberica JDK continues to provide support for AOT and Graal JIT. Since in OpenJDK 11 builds these features are deemed experimental and deprecated, it is recommended to compile native executables with Liberica Native Image Kit to avoid errors.

IANA TZ Data update

This release of Liberica JDK 11.0.27 upgrades the in-tree copy of the IANA timezone database to 2025a. This timezone update is primarily concerned with the following:

  • Paraguay adopts permanent -03 starting spring 2024.

  • Improve pre-1991 data for the Philippines.

  • Etc/Unknown is now reserved.

For more information, see JDK-8347965.

3. Known Issues

This release does not contain any known issues.

4. Fixed CVEs

This is the list of the security issues fixed in this release. CVSS scores are provided using the CVSS version 3.1 scoring system.

CVE IDCVSS scoreComponentModuleAttack VectorComplexityPrivilegesUser InteractionScopeConfidentialityIntegrityAvailability

CVE-2024-47606

7.5

javafx

media

network

high

none

required

unchanged

high

high

high

CVE-2024-54534

7.5

javafx

web

network

high

none

required

unchanged

high

high

high

CVE-2025-21587

7.4

security-libs

javax.net.ssl

network

high

none

none

unchanged

high

high

none

CVE-2025-30691

4.8

hotspot

compiler

network

high

none

none

unchanged

low

low

none

CVE-2025-30698

5.6

client-libs

2d

network

high

none

none

unchanged

low

low

low

5. Resolved Issues

JDK issues

This is the list of general JDK issues fixed in this release.

Issue IDSummary

JDK-8195675

Call to insertText with single character from custom Input Method ignored

JDK-8202926

Test java/awt/Focus/WindowUpdateFocusabilityTest/WindowUpdateFocusabilityTest.html fails

JDK-8216539

tools/jar/modularJar/Basic.java timed out

JDK-8268364

jmethod clearing should be done during unloading

JDK-8273914

Indy string concat changes order of operations

JDK-8294316

SA core file support is broken on macosx-x64 starting with macOS 12.x

JDK-8306408

Fix the format of several tables in building.md

JDK-8312049

runtime/logging/ClassLoadUnloadTest can be improved

JDK-8320916

jdk/jfr/event/gc/stacktrace/TestParallelMarkSweepAllocationPendingStackTrace.java failed with "OutOfMemoryError: GC overhead limit exceeded"

JDK-8327650

Test java/nio/channels/DatagramChannel/StressNativeSignal.java timed out

JDK-8328242

Add a log area to the PassFailJFrame

JDK-8331863

DUIterator_Fast used before it is constructed

JDK-8335912

Add an operation mode to the jar command when extracting to not overwriting existing files

JDK-8336012

Fix usages of jtreg-reserved properties

JDK-8337494

Clarify JarInputStream behavior

JDK-8337692

Better TLS connection support

JDK-8338430

Improve compiler transformations

JDK-8339560

Unaddressed comments during code review of JDK-8337664

JDK-8339931

Update problem list for WindowUpdateFocusabilityTest.java

JDK-8340387

Update OS detection code to recognize Windows Server 2025

JDK-8341424

GHA: Collect hs_errs from build time failures

JDK-8342562

Enhance Deflater operations

JDK-8342704

GHA: Report truncation is broken after JDK-8341424

JDK-8343007

Enhance Buffered Image handling

JDK-8343474

[updates] Customize README.md to specifics of update project

JDK-8343599

Kmem limit and max values swapped when printing container information

JDK-8343786

[11u] GHA: Bump macOS and Xcode versions to macos-13 and XCode 14.3.1

JDK-8344589

Update IANA Language Subtag Registry to Version 2024-11-19

JDK-8345509

Bump update version of OpenJDK: 11.0.27

JDK-8346587

Distrust TLS server certificates anchored by Camerfirma Root CAs

JDK-8347427

JTabbedPane/8134116/Bug8134116.java has no license header

JDK-8347847

Enhance jar file support

JDK-8347965

(tz) Update Timezone Data to 2025a

JDK-8349603

[21u, 17u, 11u] Update GHA JDKs after Jan/25 updates

JDK-8352097

(tz) zone.tab update missed in 2025a backport

JFX issues

This is the list of JFX issues fixed in this release.

Issue IDSummary

JDK-8340322

Update WebKit to 620.1

JDK-8346228

Update GStreamer to 1.24.10

JDK-8346229

Update Glib to 2.82.4

JDK-8349891

Not implemented function should have printf

JDK-8349924

Additional WebKit 620.1 fixes from WebKitGTK 2.46.6

6. Updates to Third Party Libraries

This release does not contain any changes in the third party libraries.

7. Upgrading to the New Version

To keep your Liberica JDK up-to-date and secure, always upgrade to the newest available version once it is released. To upgrade, install the new version over the previous one. For the installation instructions, see Liberica JDK Installation Guide.

ON THIS PAGE