Liberica JDK 17.0.8+7 Release Notes

The full version string for this update release is 17.0.8+7. The version number is 17.

Liberica JDK 17.0.8+7

Liberica is a certified, Java SE 17-compliant distribution of OpenJDK 17 which works on server (Linux x86_64, Linux ARM64, Windows 64), desktop (Windows 64, Windows 32, Mac, Linux x86_64), and embedded devices (Linux ARM64, Linux ARMv7, including Raspberry Pi 2 & 3 (ARMv6 hardfloat)). It has the following notable additions:

  • Linux x86_64 version contains experimental support for ZGC.
  • Linux x86_64, ARMv8 and ARMv7 distributions include a choice of Client VM, Server VM and Minimal VM.
  • Alpine Linux x86_64 version is build with musl support.
  • Windows x86_64, Windows x86, Windows ARMv8, Mac, Linux x86_64, Linux x86 and Linux ARMv7 distributions contain OpenJFX 17.
  • Linux ARMv7 distribution contains Device IO API compiled for Raspberry Pi.

Please refer to the Oracle JDK 17.0.8 release notes for further information on JDK 17 features. This document further outlines the peculiarities of Liberica distribution as compared to Oracle JDK 17 distribution.

Supported Server and Desktop configurations

Liberica is supported on the following OSes:

  • Ubuntu Linux 16.04, 18.04, 20.04 (x86, x86_64, ARMv7, ARMv8)
  • Debian Linux 8, 9, 10 (x86, x86_64, ARMv7, ARMv8)
  • Red Hat, Oracle Linux and CentOS 8x, 6.x, 7.x (x86, x86_64, ARMv7, ARMv8)
  • Alpine Linux 3.7+ (x86_64, ARMv8)
  • SUSE Linux Enterprise 12, 15 and tumbleweed (x86_64, ARMv8)
  • Apple macOS 10.11+ (x86_64, ARMv8)
  • Microsoft Windows 2019, Windows 2016, Windows 2012 R2, Windows 10, Windows 8, Windows 7 (x86, x86_64, ARMv8)

It is also known to work on other Linux distributions and Windows versions.

Note: The minimum supported Linux kernel version is 2.6.18 and GLIBC version 2.6. LibericaFX works on all supported Ubuntu versions, Red Hat Linux family starting from 7.x and SUSE versions with GTK3 backend.

Supported Embedded configurations

Liberica is tested and certified on Raspberry Pi 2, 3 and 4 running the following OSes:

  • Raspbian OS (armhf)
  • OpenSUSE (armv8)

It is also known to work with Debian (armhf) and Ubuntu (armhf).

Liberica JDK 17 distribution

Liberica JDK 17 are distributed as .rpm, .zip, .deb and .tar.gz packages. Please select the one which is most appropriate for your purposes.

Liberica JDK 17 introduced all new features supported by OpenJDK 17.

With the introduction of the Jigsaw feature in JDK 9 and Minimal VM it is now possible to create a Runtime that is sufficient to run your application and trim down the size of the Runtime. To generate a Runtime with just the Minimal VM, add --vm=minimal to jlink options.

Liberica JDK continues to provide support for AOT and Graal JIT. Since in OpenJDK 17 builds these features are deemed experimental and deprecated, it is recommended to compile native executables with Liberica Native Image Kit to avoid errors.

By default, the Liberica uses Server VM. Server VM and Client VM can be enabled with -server and -client command line options, respectively. In case the deployment requires to minimize the footprint, it may be beneficial to use Minimal VM, which emphasises on a minimal footprint. It has C1 JIT compiler only, Serial GC and no serviceability features.

LibericaFX for the Raspberry Pi

Liberica JDK 17 come with a bundled LibericaFX implementation, which is based on OpenJFX. The following tables lists Java FX modules status of Liberica distribution

  • Java FX Graphics - works.
  • Java FX Controls - works.
  • Java FX Media - does not work.
  • Java FX Webkit - does not work.

The following pipelines are known to work: EGL, SW (direct framebuffer) and GTK. By default, Liberica tries to use the accelerated EGL pipeline, which requires the presence of EGL libraries. If they are not found, the implementation falls back to software rendering.

Use the following command line options to specify the rendering pipeline:

  • -Dprism.order=sw forces the use of software rendering pipeline. *
  • -Dprism.order=es2 forces the use of EGL pipeline and hardware acceleration. *
  • -Djavafx.platform=gtk if you would like to launch a LibericaFX application using Liberica from X11.

* Not supported on Raspberry Pi 4.

Please refer to the following wiki for more information.

Device IO API for the Raspberry Pi

Liberica JDK 17 comes with a bundled OpenJDK Device I/O (DIO) API implementation module. DIO provides a Java API for accessing Raspberry PI GPIO pins and for communicating with peripheral devices:

  • General Purpose Input/Output (GPIO).
  • Inter-Integrated Circuit Bus (I2C), Serial Peripheral Interface (SPI).
  • Universal Asynchronous Receiver/Transmitter (UART).

Please refer to the following wiki for more information.

Security Baselines

BellSoft Liberica follows the security baselines for Oracle Java SE. Please refer to the Oracle documentation for a list of issues fixed in a given release.

Known Issues

LibericaFX and EGL on Raspbian

As of 2017, the default location of Broadcom and has changed in Raspbian OS. If you'd like to leverage hardware EGL acceleration available from Broadcom video drivers in LibericaFX while running a recent Raspbian OS, run the following command:

cd /opt/vc/lib
sudo ln -s
sudo ln -s


This is the list of the security issues fixed in this release. CVSS scores are provided using the CVSS version 3.1 scoring system.

CVE ID Score Component Module Attack vector Complexity Privileges User interaction Scope Confidentiality Integrity Availability
CVE-2023-22043 5.9 javafx graphics network high none none unchanged none high none
CVE-2023-22041 5.1 hotspot compiler local high none none unchanged high none none
CVE-2023-25193 3.7 client-libs 2d network high none none unchanged none none low
CVE-2023-22044 3.7 hotspot compiler network high none none unchanged low none none
CVE-2023-22045 3.7 hotspot compiler network high none none unchanged low none none
CVE-2023-22049 3.7 core-libs network high none none unchanged none low none
CVE-2023-22036 3.7 core-libs java.util network high none none unchanged none none low
CVE-2023-22006 3.1 core-libs network high none required unchanged none low none

Issues fixed

Issue Description
JDK-8308682 Enhance AES performance
JDK-8305312 Enhanced path handling
JDK-8304468 Better array usages
JDK-8304460 Improve array usages
JDK-8303376 Better launching of JDI
JDK-8302483 Enhance ZIP performance
JDK-8302475 Enhance HTTP client file downloading
JDK-8300596 Enhance Jar Signature validation
JDK-8300285 Enhance TLS data handling
JDK-8298676 Enhanced Look and Feel
JDK-8296565 Enhanced archival support
JDK-8294323 Improve Shared Class Data
JDK-8311467 [17u] Remove designator DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8
JDK-8303465 KeyStore of type KeychainStore, provider Apple does not show all trusted certificates
JDK-8308884 [17u/11u] Backout JDK-8297951
JDK-8287876 The recently de-problemlisted TestTitledBorderLeak test is unstable
JDK-8308880 [17u] micro bench ZoneStrings missed in backport of 8278434
JDK-8293492 ShenandoahControlThread missing from hs-err log and thread dump
JDK-8301637 ThreadLocalRandom.current().doubles().parallel() contention
JDK-8293295 Add type check asserts to java_lang_ref_Reference accessors
JDK-8294183 AArch64: Wrong macro check in SharedRuntime::generate_deopt_blob
JDK-8274243 Implement fast-path for ASCII-compatible CharsetEncoders on aarch64
JDK-8303809 Dispose context in SPNEGO NegotiatorImpl
JDK-8301119 Support for GB18030-2022
JDK-8286331 jni_GetStringUTFChars() uses wrong heap allocator
JDK-8286346 3-parameter version of AllocateHeap should not ignore AllocFailType
JDK-8301661 Enhance os::pd_print_cpu_info on macOS and Windows
JDK-8292713 Unsafe.allocateInstance should be intrinsified without UseUnalignedAccesses
JDK-8283520 JFR: Memory leak in dcmd_arena
JDK-8307128 Open source some drag and drop tests 4
JDK-8307799 Newly added java/awt/dnd/ has invalid jtreg `@requires` clause
JDK-8294717 (bf) DirectByteBuffer constructor will leak if allocating Deallocator or Cleaner fails with OOME
JDK-8300939 sun/security/provider/certpath/OCSP/ fails due to network errors
JDK-8275287 Relax memory ordering constraints on updating instance class and array class counters
JDK-8307347 serviceability/sa/ could leave files owned by root on macOS
JDK-8274615 Support relaxed atomic add for linux-aarch64
JDK-8307135 java/awt/dnd/NotReallySerializableTest/ failed
JDK-8227060 Optimize safepoint cleanup subtask order
JDK-8306640 Open source several AWT TextArea related tests
JDK-8308554 [17u] Fix commit of 8286191. vm.musl was not removed from ExternalEditorTest
JDK-8306752 Open source several container and component AWT tests
JDK-8306755 Open source few Swing JComponent and AbstractButton tests
JDK-8306683 Open source several clipboard and color AWT tests
JDK-8306652 Open source AWT MenuItem related tests
JDK-8306409 Open source AWT KeyBoardFocusManger, LightWeightComponent related tests
JDK-8306850 Open source AWT Modal related tests
JDK-8306072 Open source several AWT MouseInfo related tests
JDK-8307080 Open source some more JComboBox jtreg tests
JDK-8306133 Open source few AWT Drag & Drop related tests
JDK-8306466 Open source more AWT Drag & Drop related tests
JDK-8306681 Open source more AWT DnD related tests
JDK-8306955 Open source several JComboBox jtreg tests
JDK-8306432 Open source several AWT Text Component related tests
JDK-8306954 Open source five Focus related tests
JDK-8307134 Add GTS root CAs
JDK-8268582 javadoc throws NPE with --ignore-source-errors option
JDK-8287854 Dangling reference in ClassVerifier::verify_class
JDK-8275233 Incorrect line number reported in exception stack trace thrown from a lambda expression
JDK-8296343 CPVE thrown on missing content-length in OCSP response
JDK-8261495 Shenandoah: reconsider update references memory ordering
JDK-8297154 Improve safepoint cleanup logging
JDK-8306753 Open source several container AWT tests
JDK-8307378 Allow collectors to provide specific values for GC notifications' actions
JDK-8284331 Add sanity check for signal handler modification warning.
JDK-8276058 Some swing test fails on specific CI macos system
JDK-8277407 javax/swing/plaf/synth/SynthButtonUI/6276188/ fails to compile after JDK-8276058
JDK-8304350 Font.getStringBounds calculates wrong width for TextAttribute.TRACKING other than 0.0
JDK-8306489 Open source AWT List related tests
JDK-8307133 Open source some JTable jtreg tests
JDK-8306943 Open source several dnd AWT tests
JDK-8307381 Open Source JFrame, JIF related Swing Tests
JDK-8306871 Open source more AWT Drag & Drop tests
JDK-8306941 Open source several datatransfer and dnd AWT tests
JDK-8307130 Open source few Swing JMenu tests
JDK-8307346 Add missing gc+phases logging for ObjectCount(AfterGC) JFR event collection code
JDK-8307425 Socket input stream read burns CPU cycles with back-to-back poll(0) calls
JDK-8306996 Open source Swing MenuItem related tests
JDK-8248001 javadoc generates invalid HTML pages whose ftp:// links are broken
JDK-8304760 Add 2 Microsoft TLS roots
JDK-8299544 Improve performance of CRC32C intrinsics (non-AVX-512) for small inputs
JDK-8295974 jni_FatalError and Xcheck:jni warnings should print the native stack when there are no Java frames
JDK-8305975 Add TWCA Global Root CA
JDK-8282201 Consider removal of expiry check in test
JDK-8305088 SIGSEGV in Method::is_method_handle_intrinsic
JDK-8304054 Linux: NullPointerException from FontConfiguration.getVersion in case no fonts are installed
JDK-8304867 Explicitly disable dtrace for ppc builds
JDK-8297587 Upgrade JLine to 3.22.0
JDK-8301216 ForkJoinPool invokeAll() ignores timeout
JDK-8296934 Write a test to verify whether Undecorated Frame can be iconified or not
JDK-8292206 fails as getMemoryUsage() is lower than expected
JDK-8307331 Correctly update line maps when class redefine rewrites bytecodes
JDK-8305993 Add handleSocketErrorWithMessage to extend nio Net.c exception message
JDK-8305690 [X86] Do not emit two REX prefixes in Assembler::prefix
JDK-8299570 [JVMCI] Insufficient error handling when CodeBuffer is exhausted
JDK-8302508 Add timestamp to the output TraceCompilerThreads
JDK-8297450 fails when run with -show parameter
JDK-8289509 Improve test coverage for XPath Axes: descendant, descendant-or-self, following, following-sibling
JDK-8296084 javax/swing/JSpinner/4788637/ fails intermittently on a VM
JDK-8292990 Improve test coverage for XPath Axes: parent
JDK-8244976 vmTestbase/nsk/jdi/Event/request/ doesn' initialize eName
JDK-8286398 Address possibly lossy conversions in jdk.internal.le
JDK-8286191 misc tests fail due to JDK-8285987
JDK-8285987 executing shell scripts without #! fails on Alpine linux
JDK-8283057 Update GCC to version 11.2.0 for Oracle builds on Linux
JDK-8275735 [linux] Remove deprecated Metrics api (kernel memory limit)
JDK-8304291 [AIX] Broken build after JDK-8301998
JDK-8306825 Monitor deflation might be accidentally disabled by zero intervals
JDK-8306774 Make runtime/Monitor/ more reliable
JDK-8305994 Guarantee eventual async monitor deflation
JDK-8257856 Make robust to JDK version updates
JDK-8303508 Vector.lane() gets wrong value on x86
JDK-8303069 Memory leak in CompilerOracle::parse_from_line
JDK-8303564 C2: "Bad graph detected in build_loop_late" after a CMove is wrongly split thru phi
JDK-8303511 C2: assert(get_ctrl(n) == cle_out) during unrolling
JDK-8303861 Error handling step timeouts should never be blocked by OnError and others
JDK-8305481 gtest is_first_C_frame failing on ARM
JDK-8297955 LDAP CertStore should use LdapName and not String for DNs
JDK-8224768 Test fails
JDK-8303476 Add the runtime version in the release file of a JDK image
JDK-8287897 Augment src/jdk.internal.le/share/legal/ with information on 4th party dependencies
JDK-8303822 gtestMain should give more helpful output
JDK-8301190 [vectorapi] The typeChar of LaneType is incorrect when default locale is tr
JDK-8289735 UTIL_LOOKUP_PROGS fails on pathes with space
JDK-8306976 UTIL_REQUIRE_SPECIAL warning on grep
JDK-8306883 Thread stacksize is reported with wrong units in os::create_thread logging
JDK-8305403 Shenandoah evacuation workers may deadlock
JDK-8303130 Document required Accessibility permissions on macOS
JDK-8290822 C2: assert in PhaseIdealLoop::do_unroll() is subject to undefined behavior
JDK-8301491 C2: java.lang.StringUTF16::indexOfChar intrinsic called with negative character argument
JDK-8300079 SIGSEGV in LibraryCallKit::inline_string_copy due to constant NULL src argument
JDK-8306664 GHA: Update MSVC version to latest stepping
JDK-8302595 use-after-free related to GraphKit::clone_map
JDK-8293858 Change PKCS7 code to use default SecureRandom impl instead of SHA1PRNG
JDK-8254711 Add JFR Event
JDK-8294673 JFR: Add SecurityProviderService#threshold to
JDK-8306768 CodeCache Analytics reports wrong threshold
JDK-8296545 C2 Blackholes should allow load optimizations
JDK-8306658 GHA: MSVC installation could be optional since it might already be pre-installed
JDK-8283566 G1: Improve G1BarrierSet::enqueue performance
JDK-8252990 Intrinsify Unsafe.storeStoreFence
JDK-8302594 use-after-free in Node::destruct
JDK-8302172 [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined must respect ForceInline
JDK-8301338 Identical branch conditions in CompileBroker::print_heapinfo
JDK-8296412 Special case infinite loops with unmerged backedges in IdealLoopTree::check_safepts
JDK-8278146 G1: Rework VM_G1Concurrent VMOp to clearly identify it as pause
JDK-8238274 (sctp) JDK-7118373 is not fixed for SctpChannel
JDK-8301998 Update HarfBuzz to 7.0.1
JDK-8304295 harfbuzz build fails with GCC 7 after JDK-8301998
JDK-8306543 GHA: MSVC installation is failing
JDK-8201516 DebugNonSafepoints generates incorrect information
JDK-8305400 ISO 4217 Amendment 175 Update
JDK-8304683 Memory leak in WB_IsMethodCompatible
JDK-8304134 jib bootstrapper fails to quote filename when checking download filetype
JDK-8303482 Update LCMS to 2.15
JDK-8303588 [JVMCI] make JVMCI source directories conform with standard layout
JDK-8302151 BMPImageReader throws an exception reading BMP images
JDK-8178806 Better exception logging in crypto code
JDK-8301123 Enable Symbol refcounting underflow checks in PRODUCT
JDK-8297730 C2: Arraycopy intrinsic throws incorrect exception
JDK-8300823 UB: Compile::_phase_optimize_finished is initialized too late
JDK-8299179 ArrayFill with store on backedge needs to reduce length by 1
JDK-8299259 C2: Div/Mod nodes without zero check could be split through iv phi of loop resulting in SIGFPE
JDK-8296318 use-def assert: special case undetected loops nested in infinite loops
JDK-8298488 [macos13] tools/jpackage tests failing with "Exit code: 137" on macOS
JDK-8271519 java/awt/event/SequencedEvent/ failed with "Total [200] - Expected [400]"
JDK-8285635 javax/swing/JRootPane/ failed with Default Button not pressed for L&F:
JDK-8289949 Improve test coverage for XPath: operators
JDK-8277775 Fixup bugids in - add 4357905
JDK-8282704 runtime/Thread/ may leak memory
JDK-8273909 vmTestbase/nsk/jdi/Event/request/request001 can still fail with "ERROR: new event is not ThreadStartEvent"
JDK-8270434 JDI+UT: Unexpected event in JDI tests
JDK-8270869 G1ServiceThread may not terminate
JDK-8268298 jdk/jfr/api/consumer/log/ fails: unexpected log message
JDK-8298887 On the latest macOS+XCode the Robot API may report wrong colors
JDK-8269821 Remove is-queue-active check in inner loop of write_ref_array_pre_work
JDK-8299959 C2: CmpU::Value must filter overflow computation against local sub computation
JDK-8297000 [jib] Add more friendly warning for proxy issues
JDK-8295564 Norwegian Nynorsk Locale is missing formatting
JDK-8294906 Memory leak in PKCS11 NSS TLS server
JDK-8292755 Non-default method in interface leads to a stack overflow in JShell
JDK-8287007 [cgroups] Consistently use stringStream throughout parsing code
JDK-8287246 DSAKeyValue should check for missing params instead of relying on KeyFactory provider
JDK-8245877 assert(_value != __null) failed: resolving NULL _value in JvmtiExport::post_compiled_method_load
JDK-8305113 (tz) Update Timezone Data to 2023c
JDK-8288589 Files.readString ignores encoding errors for UTF-16
JDK-8305711 Arm: C2 always enters slowpath for monitorexit
JDK-8305721 add `make compile-commands` artifacts to .gitignore
JDK-8274864 Remove Amman/Cairo hacks in ZoneInfoFile
JDK-8302491 NoClassDefFoundError omits the original cause of an error
JDK-8293887 AArch64 build failure with GCC 12 due to maybe-uninitialized warning in libfdlibm k_rem_pio2.c
JDK-8294281 Allow warnings to be disabled on a per-file basis
JDK-8278834 Error "Cannot read field "sym" because "this.lvar[od]" is null" when compiling
JDK-8304880 [PPC64] VerifyOops code in C1 doesn't work with ZGC
JDK-8278434 timeouts in test java/time/test/java/time/format/
JDK-8291638 Keep-Alive timeout of 0 should close connection immediately
JDK-8282227 Locale information for nb is not working properly
JDK-8275721 Name of UTC timezone in a locale changes depending on previous code
JDK-8304671 javac regression: Compilation with --release 8 fails on underscore in enum identifiers
JDK-8291226 Create Test Cases to cover scenarios for JDK-8278067
JDK-8291637 HttpClient default keep alive timeout not followed if server sends invalid value
JDK-8287541 Files.writeString fails to throw IOException for charset "windows-1252"
JDK-8286287 Reading file as UTF-16 causes Error which "shouldn't happen"
JDK-8283062 Uninitialized warnings in libgtest with GCC 11.2
JDK-8282077 PKCS11 provider C_sign() impl should handle CKR_BUFFER_TOO_SMALL error
JDK-8268288 jdk/jfr/api/consumer/streaming/ fails with "Error: ShouldNotReachHere()"
JDK-8302849 SurfaceManager might expose partially constructed object
JDK-8303102 jcmd: ManagementAgent.status truncates the text longer than O_BUFLEN
JDK-8227257 javax/swing/JFileChooser/4847375/ fails with AssertionError
JDK-8303575 adjust Xen handling on Linux aarch64
JDK-8300042 Improve CPU related JFR events descriptions
JDK-8303576 addIdentitiesToKeystore in KeystoreImpl.m needs CFRelease call in early potential CHECK_NULL return
JDK-8292301 [REDO v2] C2 crash when allocating array of size too large
JDK-8304063 tools/jpackage/share/ fails when checking LD_LIBRARY_PATH
JDK-8303949 gcc10 warning Linux ppc64le - note: the layout of aggregates containing vectors with 8-byte alignment has changed in GCC 5
JDK-8303354 addCertificatesToKeystore in KeystoreImpl.m needs CFRelease call in early potential CHECK_NULL return
JDK-8301050 Detect Xen Virtualization on Linux aarch64
JDK-8302791 Add specific ClassLoader object to Proxy IllegalArgumentException message
JDK-8302320 AsyncGetCallTrace obtains too few frames in sanity test
JDK-8303937 Corrupted heap dumps due to missing retries for os::write()
JDK-8303440 The "ZonedDateTime.parse" may not accept the "UTC+XX" zone id
JDK-8270859 Post JEP 411 refactoring: client libs with maximum covering > 10K
JDK-8292407 Improve Weak CAS VarHandle/Unsafe tests resilience under spurious failures
JDK-8303433 Bump update version for OpenJDK: jdk-17.0.8
JDK-8301009 Update libxml2 to 2.10.3
JDK-8304751 Improve pipeline layout
JDK-8306115 Update libxml2 to 2.10.4
JDK-8307642 Change JavaFX release version to 17.0.8 in jfx17u