Liberica JDK 11.0.32+11: Release Notes

Published: July 21, 2026

1. Version information

This document provides information about Liberica JDK 11.0.32 release. The full version string for this update release is 11.0.32+11. The version number is 11.

Liberica JDK 11 is distributed as .apk, .rpm, .zip, .deb, .pkg, and .tar.gz packages. Please select the most appropriate for your purposes.

2. What’s New

This release contains the following updates and new features.

Notable Changes

This is the list of the notable issues fixed in this release.

Issue ID

Issue ID
JDK-8292177	Summary: New JFR Event: jdk.InitialSecurityProperty Description: A new Java Flight Recorder (JFR) event has been added to record details of initial security properties when loaded via the `java.security.Security` class. The new event name is `jdk.InitialSecurityProperty` and contains the following fields: key - `Security Property Key`, value - `Corresponding Security Property Value`. This new JFR event is enabled by default. The `java.security.debug=properties` system property will also now print initial security properties to the standard error stream. With this new event and the already available `jdk.SecurityPropertyModification` event (when enabled since it is not enabled by default), a JFR recording can now monitor the initial settings of all security properties and any subsequent changes.
JDK-8372351	Summary: Added WISeKey Global GB and GC Root CA Certificates Description: wisekeyglobalrootgbca and wisekeyglobalrootgcca root certificates have been added to the `cacerts` truststore.
JDK-8381551	Summary: DisabledCurve test fails on Windows after disabling SHA1 Description: sun\\security\\ssl\\CipherSuite\\DisabledCurve.java test failed on Windows with `Server failed: javax.net.ssl.SSLException: No supported signature algorithm for EC key` error. The test started to fall after disabling SHA1 algorithms in TLS handshake by JDK-8340321. Test passed if `ecdsa_sha1 usage HandshakeSignature` is removed from the `java.security` file. Without SunMSCAPI, the test server used the ecdsa_sha224 signature algorithm, but it was unavailable if the SunMSCAPI provider was enabled.

JDK-8292177

Summary: New JFR Event: jdk.InitialSecurityProperty

Description: A new Java Flight Recorder (JFR) event has been added to record details of initial security properties when loaded via the java.security.Security class. The new event name is jdk.InitialSecurityProperty and contains the following fields: key - Security Property Key, value - Corresponding Security Property Value. This new JFR event is enabled by default. The java.security.debug=properties system property will also now print initial security properties to the standard error stream. With this new event and the already available jdk.SecurityPropertyModification event (when enabled since it is not enabled by default), a JFR recording can now monitor the initial settings of all security properties and any subsequent changes.

JDK-8372351

Summary: Added WISeKey Global GB and GC Root CA Certificates

Description: wisekeyglobalrootgbca and wisekeyglobalrootgcca root certificates have been added to the cacerts truststore.

JDK-8381551

Summary: DisabledCurve test fails on Windows after disabling SHA1

Description: sun\\security\\ssl\\CipherSuite\\DisabledCurve.java test failed on Windows with Server failed: javax.net.ssl.SSLException: No supported signature algorithm for EC key error. The test started to fall after disabling SHA1 algorithms in TLS handshake by JDK-8340321. Test passed if ecdsa_sha1 usage HandshakeSignature is removed from the java.security file. Without SunMSCAPI, the test server used the ecdsa_sha224 signature algorithm, but it was unavailable if the SunMSCAPI provider was enabled.

Graal support in Liberica JDK 11

Liberica JDK continues to provide support for AOT and Graal JIT. Since in OpenJDK 11 builds these features are deemed experimental and deprecated, it is recommended to compile native executables with Liberica Native Image Kit to avoid errors.

IANA TZ Data version

This release of Liberica JDK 11.0.32 comes with the 2026b version of the in-tree copy of the IANA timezone database. The following are the key features of this version.

Briefly

British Columbia moved to permanent -07 on 2026-03-09.

Some more overflow bugs have been fixed in zic.

Changes to future timestamps

British Columbia’s 2026-03-08 spring forward was its last foreseeable clock change, as it moved to permanent -07 thereafter. (Thanks to Arthur David Olson.) Although the change to permanent -07 legally took place on 2026-03-09, temporarily model the change to occur on 2026-11-01 at 02:00 instead. This works around a limitation in CLDR v48.2 (2026-03-17). This temporary hack is planned to be removed after CLDR is fixed.

Changes to code

zic no longer mishandles a last transition to a new time type.
zic no longer overflows a buffer when generating a TZ string like "PST-167:59:58PDT-167:59:59,M11.5.6/-167:59:59,M12.5.6/-167:59:59", which can occur with adversarial input. (Thanks to Naveed Khan.)
zic no longer generates a longer TZif file than necessary when an earlier time zone abbreviation is a suffix of a later one. As a nice side effect, zic no longer overflows a buffer when given a long series of abbreviations, each a suffix of the next. (Buffer overflow reported by Arthur Chan.)
zic no longer overflows an int when processing input like ‘Zone Ouch 2147483648:00:00 - LMT’. The int overflow can lead to buffer overflow in adversarial cases. (Thanks to Naveed Khan.)
zic now checks for signals more often.

For more information, see JDK-8383175.

3. Known Issues

This release does not contain any known issues.

4. Fixed CVEs

This is the list of the security issues fixed in this release. CVSS scores are provided using the CVSS version 3.1 scoring system.

CVE ID	CVSS score	Component	Module	Attack Vector	Complexity	Privileges	User Interaction	Scope	Confidentiality	Integrity	Availability
CVE-2026-41254	7.5	client-libs	2d	network	low	none	none	unchanged	none	none	high
CVE-2026-46917	5.3	security-libs	javax.net.ssl	network	low	none	none	unchanged	none	none	low
CVE-2026-46968	5.9	security-libs	javax.net.ssl	network	high	none	none	unchanged	none	high	none
CVE-2026-47010	3.7	client-libs	javax.imageio	network	high	none	none	unchanged	none	low	none
CVE-2026-47013	5.3	javafx	graphics	network	low	none	none	unchanged	none	none	low
CVE-2026-47021	5.3	client-libs	2d	network	low	none	none	unchanged	none	none	low
CVE-2026-47027	5.3	security-libs	java.security	network	low	none	none	unchanged	none	none	low
CVE-2026-47030	3.1	javafx	web	network	high	none	required	unchanged	none	low	none
CVE-2026-47034	3.1	javafx	media	network	high	none	required	unchanged	none	low	none
CVE-2026-47035	3.1	javafx	media	network	high	none	required	unchanged	none	low	none
CVE-2026-47057	7.5	core-libs	javax.script	network	low	none	none	unchanged	none	none	high
CVE-2026-47058	7.4	core-libs	javax.script	network	high	none	none	unchanged	high	high	none
CVE-2026-47059	5.9	client-libs	2d	network	high	none	none	unchanged	none	none	low
CVE-2026-47063	7.5	security-libs	java.security	network	low	none	none	unchanged	none	high	none
CVE-2026-60147	6.5	security-libs	java.security	network	low	none	none	unchanged	low	low	none
CVE-2026-60164	3.1	javafx	web	network	high	none	required	unchanged	low	none	none
CVE-2026-60165	3.1	javafx	media	network	high	none	required	unchanged	none	low	none
CVE-2026-60166	3.1	javafx	media	network	high	none	required	unchanged	low	none	none

CVE ID

CVSS score

Component

Module

Attack Vector

Complexity

Privileges

User Interaction

Scope

Confidentiality

Integrity

Availability

CVE-2026-41254

7.5

client-libs

network

low

none

unchanged

none

high

CVE-2026-46917

5.3

security-libs

javax.net.ssl

network

low

none

unchanged

none

low

CVE-2026-46968

5.9

security-libs

javax.net.ssl

network

high

none

unchanged

none

high

none

CVE-2026-47010

3.7

client-libs

javax.imageio

network

high

none

unchanged

none

low

none

CVE-2026-47013

5.3

javafx

graphics

network

low

none

unchanged

none

low

CVE-2026-47021

5.3

client-libs

network

low

none

unchanged

none

low

CVE-2026-47027

5.3

security-libs

java.security

network

low

none

unchanged

none

low

CVE-2026-47030

3.1

javafx

web

network

high

none

required

unchanged

none

low

none

CVE-2026-47034

3.1

javafx

media

network

high

none

required

unchanged

none

low

none

CVE-2026-47035

3.1

javafx

media

network

high

none

required

unchanged

none

low

none

CVE-2026-47057

7.5

core-libs

javax.script

network

low

none

unchanged

none

high

CVE-2026-47058

7.4

core-libs

javax.script

network

high

none

unchanged

high

none

CVE-2026-47059

5.9

client-libs

network

high

none

unchanged

none

low

CVE-2026-47063

7.5

security-libs

java.security

network

low

none

unchanged

none

high

none

CVE-2026-60147

6.5

security-libs

java.security

network

low

none

unchanged

low

none

CVE-2026-60164

3.1

javafx

web

network

high

none

required

unchanged

low

none

CVE-2026-60165

3.1

javafx

media

network

high

none

required

unchanged

none

low

none

CVE-2026-60166

3.1

javafx

media

network

high

none

required

unchanged

low

none

5. Resolved Issues

JDK issues

This is the list of general JDK issues fixed in this release.

Issue ID	Summary
JDK-8200566	DistributionPointFetcher fails to fetch CRLs if the DistributionPoints field contains more than one DistributionPoint and the first one fails
JDK-8242314	use reproducible random in vmTestbase shared code
JDK-8252412	[macos11] system dynamic libraries removed from filesystem
JDK-8275405	Linking error for classes with lambda template parameters and virtual functions
JDK-8275843	Random crashes while the UI code is executed
JDK-8286562	GCC 12 reports some compiler warnings
JDK-8287491	compiler/jvmci/errors/TestInvalidDebugInfo.java fails new assert: assert((uint)t < T_CONFLICT + 1) failed: invalid type #
JDK-8292177	InitialSecurityProperty JFR event
JDK-8293691	converting a defined BasicType value to a string should not crash the VM
JDK-8298730	Refactor subsystem_file_line_contents and add docs and tests
JDK-8314555	Build with mawk fails on Windows
JDK-8323672	Suppress unwanted autoconf added flags in CC and CXX
JDK-8324243	Compilation failures in java.desktop module with gcc 14
JDK-8325766	Extend CertificateBuilder to create trust and end entity certificates programmatically
JDK-8327071	[Testbug] g-tests for cgroup leave files in /tmp on linux
JDK-8336498	[macos] [build]: install-file macro may run into permission denied error
JDK-8342858	Make target mac-jdk-bundle fails on chmod command
JDK-8343622	AesDkCrypto.stringToKey should not return null
JDK-8345578	New test in JDK-8343622 fails with a promoted build
JDK-8347740	java/io/File/createTempFile/SpecialTempFile.java failing
JDK-8347811	Container detection code for cgroups v2 should use cgroup.controllers
JDK-8349988	Change cgroup version detection logic to not depend on /proc/cgroups
JDK-8350749	Upgrade JLine to 3.29.0
JDK-8351359	OperatingSystemMXBean: values from getCpuLoad and getProcessCpuLoad are stale after 24.8 days (Windows)
JDK-8353714	[17u] Backport of 8347740 incomplete
JDK-8354878	File Leak in CgroupSubsystemFactory::determine_type of cgroupSubsystem_linux.cpp:300
JDK-8355077	Compiler error at splashscreen_gif.c due to unterminated string initialization
JDK-8363966	[GHA] Switch cross-compiling sysroots to Debian trixie
JDK-8365098	make/RunTests.gmk generates a wrong path to test artifacts on Alpine
JDK-8365660	test/jdk/sun/security/pkcs11/KeyAgreement/ tests skipped without SkipExceprion
JDK-8366159	SkippedException is treated as a pass for pkcs11/KeyStore, pkcs11/SecretKeyFactory and pkcs11/SecureRandom
JDK-8367766	[11u] src/jdk.crypto.ec/share/native/libsunec/impl/mpi.c:321:3: error: 'tmp.dp' may be used uninitialized
JDK-8368041	Enhance TLS certificate handling
JDK-8368670	Deadlock in JFR on event register + class load
JDK-8369032	Add test to ensure serialized ICC_Profile stores only necessary optional data
JDK-8369506	Bytecode rewriting causes Java heap corruption on AArch64
JDK-8371559	Intermittent timeouts in test javax/net/ssl/Stapling/HttpsUrlConnClient.java
JDK-8372351	Add 2 WISeKey roots
JDK-8373275	Improve DTLS handshaking
JDK-8374058	Enhance JPEG handling
JDK-8374888	Implement internal test cache to help UserIterCount test performance
JDK-8375065	Update LCMS to 2.18
JDK-8377158	Enhance XBM image support
JDK-8377167	javax/imageio/ReadAbortTest.java throw NPE when x11 unavailable
JDK-8377498	Improve HttpServer handling
JDK-8377833	Enhance Jar file processing
JDK-8378218	MSYS2 reports cygwin triplet causing bash configure failure
JDK-8378631	Update Zlib Data Compression Library to Version 1.3.2
JDK-8378687	Improve delegation of HttpURLConnection
JDK-8378823	AIX build fails after zlib updated by JDK-8378631
JDK-8379685	Bump update version of OpenJDK: 11.0.32
JDK-8380672	Improve certification checking
JDK-8380947	Add pull request template
JDK-8381039	Enhance AWT ImagingLib
JDK-8381049	Enhance Jar handling
JDK-8381185	Improve Nashorn index handling
JDK-8381195	Enhance Dataview Implementation
JDK-8381519	Enhance Der Value Handling
JDK-8381551	DisabledCurve test fails on Windows after disabling SHA1
JDK-8381796	Enhance Certificate parsing
JDK-8382047	Update Libpng to 1.6.57
JDK-8383175	(tz) Update Timezone Data to 2026b
JDK-8383354	Update LCMS to 2.19.1
JDK-8383473	Follow on from tzdata2026b time change to include temporary hack BC time change
JDK-8384158	[GHA] Downgrade Windows GHA runners to windows-2022 temporarily
JDK-8384495	Update Libpng to 1.6.58
JDK-8384902	Update GIFlib to 6.1.3
JDK-8386551	Windows build broken because of MSys2/Make update

Issue ID

Summary

JDK-8200566

DistributionPointFetcher fails to fetch CRLs if the DistributionPoints field contains more than one DistributionPoint and the first one fails

JDK-8242314

use reproducible random in vmTestbase shared code

JDK-8252412

[macos11] system dynamic libraries removed from filesystem

JDK-8275405

Linking error for classes with lambda template parameters and virtual functions

JDK-8275843

Random crashes while the UI code is executed

JDK-8286562

GCC 12 reports some compiler warnings

JDK-8287491

compiler/jvmci/errors/TestInvalidDebugInfo.java fails new assert: assert((uint)t < T_CONFLICT + 1) failed: invalid type #

JDK-8292177

InitialSecurityProperty JFR event

JDK-8293691

converting a defined BasicType value to a string should not crash the VM

JDK-8298730

Refactor subsystem_file_line_contents and add docs and tests

JDK-8314555

Build with mawk fails on Windows

JDK-8323672

Suppress unwanted autoconf added flags in CC and CXX

JDK-8324243

Compilation failures in java.desktop module with gcc 14

JDK-8325766

Extend CertificateBuilder to create trust and end entity certificates programmatically

JDK-8327071

[Testbug] g-tests for cgroup leave files in /tmp on linux

JDK-8336498

[macos] [build]: install-file macro may run into permission denied error

JDK-8342858

Make target mac-jdk-bundle fails on chmod command

JDK-8343622

AesDkCrypto.stringToKey should not return null

JDK-8345578

New test in JDK-8343622 fails with a promoted build

JDK-8347740

java/io/File/createTempFile/SpecialTempFile.java failing

JDK-8347811

Container detection code for cgroups v2 should use cgroup.controllers

JDK-8349988

Change cgroup version detection logic to not depend on /proc/cgroups

JDK-8350749

Upgrade JLine to 3.29.0

JDK-8351359

OperatingSystemMXBean: values from getCpuLoad and getProcessCpuLoad are stale after 24.8 days (Windows)

JDK-8353714

[17u] Backport of 8347740 incomplete

JDK-8354878

File Leak in CgroupSubsystemFactory::determine_type of cgroupSubsystem_linux.cpp:300

JDK-8355077

Compiler error at splashscreen_gif.c due to unterminated string initialization

JDK-8363966

[GHA] Switch cross-compiling sysroots to Debian trixie

JDK-8365098

make/RunTests.gmk generates a wrong path to test artifacts on Alpine

JDK-8365660

test/jdk/sun/security/pkcs11/KeyAgreement/ tests skipped without SkipExceprion

JDK-8366159

SkippedException is treated as a pass for pkcs11/KeyStore, pkcs11/SecretKeyFactory and pkcs11/SecureRandom

JDK-8367766

[11u] src/jdk.crypto.ec/share/native/libsunec/impl/mpi.c:321:3: error: 'tmp.dp' may be used uninitialized

JDK-8368041

Enhance TLS certificate handling

JDK-8368670

Deadlock in JFR on event register + class load

JDK-8369032

Add test to ensure serialized ICC_Profile stores only necessary optional data

JDK-8369506

Bytecode rewriting causes Java heap corruption on AArch64

JDK-8371559

Intermittent timeouts in test javax/net/ssl/Stapling/HttpsUrlConnClient.java

JDK-8372351

Add 2 WISeKey roots

JDK-8373275

Improve DTLS handshaking

JDK-8374058

Enhance JPEG handling

JDK-8374888

Implement internal test cache to help UserIterCount test performance

JDK-8375065

Update LCMS to 2.18

JDK-8377158

Enhance XBM image support

JDK-8377167

javax/imageio/ReadAbortTest.java throw NPE when x11 unavailable

JDK-8377498

Improve HttpServer handling

JDK-8377833

Enhance Jar file processing

JDK-8378218

MSYS2 reports cygwin triplet causing bash configure failure

JDK-8378631

Update Zlib Data Compression Library to Version 1.3.2

JDK-8378687

Improve delegation of HttpURLConnection

JDK-8378823

AIX build fails after zlib updated by JDK-8378631

JDK-8379685

Bump update version of OpenJDK: 11.0.32

JDK-8380672

Improve certification checking

JDK-8380947

Add pull request template

JDK-8381039

Enhance AWT ImagingLib

JDK-8381049

Enhance Jar handling

JDK-8381185

Improve Nashorn index handling

JDK-8381195

Enhance Dataview Implementation

JDK-8381519

Enhance Der Value Handling

JDK-8381551

DisabledCurve test fails on Windows after disabling SHA1

JDK-8381796

Enhance Certificate parsing

JDK-8382047

Update Libpng to 1.6.57

JDK-8383175

(tz) Update Timezone Data to 2026b

JDK-8383354

Update LCMS to 2.19.1

JDK-8383473

Follow on from tzdata2026b time change to include temporary hack BC time change

JDK-8384158

[GHA] Downgrade Windows GHA runners to windows-2022 temporarily

JDK-8384495

Update Libpng to 1.6.58

JDK-8384902

Update GIFlib to 6.1.3

JDK-8386551

Windows build broken because of MSys2/Make update

JFX issues

This is the list of JFX issues fixed in this release.

Issue ID	Summary
JDK-8373527	Improve Graphics playback
JDK-8375084	Update libxslt to 1.1.45
JDK-8378226	Animated GIFs do not animate after WebKit 620.1 update
JDK-8378277	Improve Editor selection
JDK-8379206	4 Null pointer dereference defect groups in 4 glib files
JDK-8379207	Improve audio conversion
JDK-8379209	Uninitialised variable in pathApplierFunctionFast of coretext.c
JDK-8379211	Uninitialised memory in Java_com_sun_javafx_font_freetype_OSFreetype_FT_1Outline_1Decompose
JDK-8379257	Update JPEG Image Decoding Software to 10
JDK-8379336	Update libxml2 to 2.15.2
JDK-8381447	Remove G_DISABLE_CHECKS compiler flag on Windows to align GLib/GStreamer compilation with macOS/Linux
JDK-8381517	GlassViewDelegate::convertNSStringToJString can return uninitialized value
JDK-8383092	Enhance WebView Resource Loading
JDK-8383143	Enhance Playlist Loading

Issue ID

Summary

JDK-8373527

Improve Graphics playback

JDK-8375084

Update libxslt to 1.1.45

JDK-8378226

Animated GIFs do not animate after WebKit 620.1 update

JDK-8378277

Improve Editor selection

JDK-8379206

4 Null pointer dereference defect groups in 4 glib files

JDK-8379207

Improve audio conversion

JDK-8379209

Uninitialised variable in pathApplierFunctionFast of coretext.c

JDK-8379211

Uninitialised memory in Java_com_sun_javafx_font_freetype_OSFreetype_FT_1Outline_1Decompose

JDK-8379257

Update JPEG Image Decoding Software to 10

JDK-8379336

Update libxml2 to 2.15.2

JDK-8381447

Remove G_DISABLE_CHECKS compiler flag on Windows to align GLib/GStreamer compilation with macOS/Linux

JDK-8381517

GlassViewDelegate::convertNSStringToJString can return uninitialized value

JDK-8383092

Enhance WebView Resource Loading

JDK-8383143

Enhance Playlist Loading

6. Updates to Third Party Libraries

This is the list of changes in the third party libraries.

Library	Full name	New Version	Module	JBS number
GIFlib	GIFlib	6.1.3	java.desktop	JDK-8384902
LCMS	LittleCMS	2.19.1	java.desktop	JDK-8383354
libjpeg	JPEG Image Decoding Software	10	javafx.web	JDK-8379257
Libpng	Libpng	1.6.58	java.awt	JDK-8384495
libxml2	libxml2	2.15.2	javafx.web	JDK-8379336
libxslt	libxslt	1.1.45	javafx.web	JDK-8375084
Zlib	Zlib	1.3.2	java.desktop	JDK-8378631

Library

Full name

New Version

Module

JBS number

GIFlib

6.1.3

java.desktop

JDK-8384902

LCMS

LittleCMS

2.19.1

java.desktop

JDK-8383354

libjpeg

JPEG Image Decoding Software

javafx.web

JDK-8379257

Libpng

1.6.58

java.awt

JDK-8384495

libxml2

2.15.2

javafx.web

JDK-8379336

libxslt

1.1.45

javafx.web

JDK-8375084

Zlib

1.3.2

java.desktop

JDK-8378631

7. Upgrading to the New Version

To keep your Liberica JDK up-to-date and secure, always upgrade to the newest available version once it is released. To upgrade, install the new version over the previous one. For the installation instructions, see Liberica JDK Installation Guide.