Liberica JDK 21.0.1+12 Release Notes


The full version string for this update release is 21.0.1+12. The version number is 21.

Liberica JDK 21.0.1+12

Liberica is a certified, Java SE 21-compliant distribution of OpenJDK 21 which works on server (Linux x86_64, Linux ARM64, Windows 64), desktop (Windows 64, Windows 32, Mac, Linux x86_64), and embedded devices (Linux ARM64, Linux ARMv7, including Raspberry Pi 2 & 3 (ARMv6 hardfloat)). It has the following notable additions:

  • Linux x86_64 version contains experimental support for ZGC.
  • Linux x86_64, ARMv8 and ARMv7 distributions include a choice of Client VM, Server VM and Minimal VM.
  • Alpine Linux x86_64 version is build with musl support.
  • Windows x86_64, Windows x86, Windows ARMv8, Mac, Linux x86_64, Linux x86 and Linux ARMv7 distributions contain OpenJFX 21.
  • Linux ARMv7 distribution contains Device IO API compiled for Raspberry Pi.

Please refer to the Oracle JDK 21.0.1 release notes for further information on JDK 21 features. This document further outlines the peculiarities of Liberica distribution as compared to Oracle JDK 21 distribution.

Supported Server and Desktop configurations

Liberica is supported on the following OSes:

  • Ubuntu Linux 16.04, 18.04, 20.04 (x86, x86_64, ARMv7, ARMv8)
  • Debian Linux 8, 9, 10 (x86, x86_64, ARMv7, ARMv8)
  • Red Hat, Oracle Linux and CentOS 8x, 6.x, 7.x (x86, x86_64, ARMv7, ARMv8)
  • Alpine Linux 3.7+ (x86_64, ARMv8)
  • SUSE Linux Enterprise 12, 15 and tumbleweed (x86_64, ARMv8)
  • Apple macOS 10.11+ (x86_64, ARMv8)
  • Microsoft Windows 2019, Windows 2016, Windows 2012 R2, Windows 10, Windows 8, Windows 7 (x86, x86_64, ARMv8)

It is also known to work on other Linux distributions and Windows versions.

Note: The minimum supported Linux kernel version is 2.6.18 and GLIBC version 2.6. LibericaFX works on all supported Ubuntu versions, Red Hat Linux family starting from 7.x and SUSE versions with GTK3 backend.

Supported Embedded configurations

Liberica is tested and certified on Raspberry Pi 2, 3 and 4 running the following OSes:

  • Raspbian OS (armhf)
  • OpenSUSE (armv8)

It is also known to work with Debian (armhf) and Ubuntu (armhf).

Liberica JDK 21 distribution

Liberica JDK 21 are distributed as .rpm, .zip, .deb and .tar.gz packages. Please select the one which is most appropriate for your purposes.

Liberica JDK 21 introduced all new features supported by OpenJDK 21.

With the introduction of the Jigsaw feature in JDK 9 and Minimal VM it is now possible to create a Runtime that is sufficient to run your application and trim down the size of the Runtime. To generate a Runtime with just the Minimal VM, add --vm=minimal to jlink options.

Liberica JDK continues to provide support for AOT and Graal JIT. Since in OpenJDK 21 builds these features are deemed experimental and deprecated, it is recommended to compile native executables with Liberica Native Image Kit to avoid errors.

By default, the Liberica uses Server VM. Server VM and Client VM can be enabled with -server and -client command line options, respectively. In case the deployment requires to minimize the footprint, it may be beneficial to use Minimal VM, which emphasises on a minimal footprint. It has C1 JIT compiler only, Serial GC and no serviceability features.

LibericaFX for the Raspberry Pi

Liberica JDK 21 come with a bundled LibericaFX implementation, which is based on OpenJFX. The following tables lists Java FX modules status of Liberica distribution

  • Java FX Graphics - works.
  • Java FX Controls - works.
  • Java FX Media - does not work.
  • Java FX Webkit - does not work.

The following pipelines are known to work: EGL, SW (direct framebuffer) and GTK. By default, Liberica tries to use the accelerated EGL pipeline, which requires the presence of EGL libraries. If they are not found, the implementation falls back to software rendering.

Use the following command line options to specify the rendering pipeline:

  • -Dprism.order=sw forces the use of software rendering pipeline. *
  • -Dprism.order=es2 forces the use of EGL pipeline and hardware acceleration. *
  • -Djavafx.platform=gtk if you would like to launch a LibericaFX application using Liberica from X11.

* Not supported on Raspberry Pi 4.

Please refer to the following wiki for more information.

Device IO API for the Raspberry Pi

Liberica JDK 21 comes with a bundled OpenJDK Device I/O (DIO) API implementation module. DIO provides a Java API for accessing Raspberry PI GPIO pins and for communicating with peripheral devices:

  • General Purpose Input/Output (GPIO).
  • Inter-Integrated Circuit Bus (I2C), Serial Peripheral Interface (SPI).
  • Universal Asynchronous Receiver/Transmitter (UART).

Please refer to the following wiki for more information.

Security Baselines

BellSoft Liberica follows the security baselines for Oracle Java SE. Please refer to the Oracle documentation for a list of issues fixed in a given release.

Known Issues

LibericaFX and EGL on Raspbian

As of 2017, the default location of Broadcom libEGL.so and libGLESv2.so has changed in Raspbian OS. If you'd like to leverage hardware EGL acceleration available from Broadcom video drivers in LibericaFX while running a recent Raspbian OS, run the following command:

cd /opt/vc/lib
sudo ln -s libbrcmEGL.so libEGL.so
sudo ln -s libbrcmGLESv2.so libGLESv2.so

CVEs

This is the list of the security issues fixed in this release. CVSS scores are provided using the CVSS version 3.1 scoring system.

CVE ID CVSS base score Component/Module Attack vector Complexity User interaction Scope Confidentiality Integrity Availability
CVE-2023-22081 5.3 security-libs/javax.net.ssl network low none unchanged none none low
CVE-2023-22025 3.7 hotspot/compiler network high none unchanged none low none

Issues fixed

Issue Description
JDK-8240567 MethodTooLargeException thrown while creating a jlink image
JDK-8284772 GHA: Use GCC Major Version Dependencies Only
JDK-8286503 Enhance security classes
JDK-8293114 JVM should trim the native heap
JDK-8296581 Better system proxy support
JDK-8297856 Improve handling of Bidi characters
JDK-8299658 C1 compilation crashes in LinearScan::resolve_exception_edge
JDK-8302017 Allocate BadPaddingException only if it will be thrown
JDK-8303815 Improve Metaspace test speed
JDK-8304008 Update README.md and CONTRIBUTING.md for jfx update repos
JDK-8304954 SegmentedCodeCache fails when using large pages
JDK-8307766 Linux: Provide the option to override the timer slack
JDK-8308042 [macos] Developer ID Application Certificate not picked up by jpackage if it contains UNICODE characters
JDK-8308047 java/util/concurrent/ScheduledThreadPoolExecutor/BasicCancelTest.java timed out and also had jcmd pipe errors
JDK-8308184 Launching java with large number of jars in classpath with java.protocol.handler.pkgs system property set can lead to StackOverflowError
JDK-8308474 DSA does not reset SecureRandom when initSign is called again
JDK-8308609 java/lang/ScopedValue/StressStackOverflow.java fails with "-XX:-VMContinuations"
JDK-8309032 jpackage does not work for module projects unless --module-path is specified
JDK-8309088 security/infra/java/security/cert/CertPathValidator/certification/AmazonCA.java fails
JDK-8309214 sun/security/pkcs11/KeyStore/CertChainRemoval.java fails after 8301154
JDK-8309475 Test java/foreign/TestByteBuffer.java fails: a problem with msync (aix)
JDK-8309502 RISC-V: String.indexOf intrinsic may produce misaligned memory loads
JDK-8309591 Socket.setOption(TCP_QUICKACK) uses wrong level
JDK-8309746 Reconfigure check should include make/conf/version-numbers.conf
JDK-8309889 [s390] Missing return statement after calling jump_to_native_invoker method in generate_method_handle_dispatch.
JDK-8309966 Enhanced TLS connections
JDK-8310106 sun.security.ssl.SSLHandshake.getHandshakeProducer() incorrectly checks handshakeConsumers
JDK-8310171 Bump version numbers for 21.0.1
JDK-8310211 serviceability/jvmti/thread/GetStackTrace/getstacktr03/getstacktr03.java failing
JDK-8310233 Fix THP detection on Linux
JDK-8310268 RISC-V: misaligned memory access in String.Compare intrinsic
JDK-8310321 make JDKOPT_CHECK_CODESIGN_PARAMS more verbose
JDK-8310586 ProblemList java/lang/ScopedValue/StressStackOverflow.java#default with virtual threads on linux-all
JDK-8310681 Update WebKit to 616.1
JDK-8310687 JDK-8303215 is incomplete
JDK-8310873 Re-enable locked_create_entry symbol check in runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V
JDK-8311026 Some G1 specific tests do not set -XX:+UseG1GC
JDK-8311033 [macos] PrinterJob does not take into account Sides attribute
JDK-8311097 Synchron XMLHttpRequest not receiving data
JDK-8311160 [macOS, Accessibility] VoiceOver: No announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
JDK-8311249 Remove unused MemAllocator::obj_memory_range
JDK-8311285 report some fontconfig related environment variables in hs_err file
JDK-8311511 Improve description of NativeLibrary JFR event
JDK-8311592 ECKeySizeParameterSpec causes too many exceptions on third party providers
JDK-8311682 Change milestone to fcs for all releases
JDK-8311862 RISC-V: small improvements to shift immediate instructions
JDK-8311917 MAP_FAILED definition seems to be obsolete in src/java.desktop/unix/native/common/awt/fontpath.c
JDK-8311921 Inform about MaxExpectedDataSegmentSize in case of pthread_create failures on AIX
JDK-8311923 TestIRMatching.java fails on RISC-V
JDK-8311926 java/lang/ScopedValue/StressStackOverflow.java takes 9mins in tier1
JDK-8311955 c++filt is now ibm-llvm-cxxfilt when using xlc17 / clang on AIX
JDK-8311981 Test gc/stringdedup/TestStringDeduplicationAgeThreshold.java#ZGenerational timed out
JDK-8312127 FileDescriptor.sync should temporarily increase parallelism
JDK-8312128 Change JavaFX release version to 21.0.1 in jfx21u
JDK-8312180 (bf) MappedMemoryUtils passes incorrect arguments to msync (aix)
JDK-8312182 THPs cause huge RSS due to thread start timing issue
JDK-8312248 Enhanced archival support redux
JDK-8312394 [linux] SIGSEGV if kernel was built without hugepage support
JDK-8312395 Improve assertions in growableArray
JDK-8312401 SymbolTable::do_add_if_needed hangs when called in InstanceKlass::add_initialization_error path with requesting length exceeds max_symbol_length
JDK-8312489 Increase jdk.jar.maxSignatureFileSize default which is too low for JARs such as WhiteSource/Mend unified agent jar
JDK-8312525 New test runtime/os/TestTrimNative.java#trimNative is failing: did not see the expected RSS reduction
JDK-8312535 MidiSystem.getSoundbank() throws unexpected SecurityException
JDK-8312555 Ideographic characters aren't stretched by AffineTransform.scale(2, 1)
JDK-8312573 Failure during CompileOnly parsing leads to ShouldNotReachHere
JDK-8312585 Rename DisableTHPStackMitigation flag to THPStackMitigation
JDK-8312591 GCC 6 build failure after JDK-8280982
JDK-8312619 Strange error message when switching over long
JDK-8312620 WSL Linux build crashes after JDK-8310233
JDK-8312625 Test serviceability/dcmd/vm/TrimLibcHeapTest.java failed: RSS use increased
JDK-8312909 C1 should not inline through interface calls with non-subtype receiver
JDK-8312976 MatchResult produces StringIndexOutOfBoundsException for groups outside match
JDK-8312984 javac may crash on a record pattern with too few components
JDK-8313081 MonitoringSupport_lock should be unconditionally initialized after 8304074
JDK-8313177 Web Workers timeout with Webkit 616.1
JDK-8313181 Enabling modern media controls on webkit 616.1 does not load button images on HTML5 video Element
JDK-8313248 C2: setScopedValueCache intrinsic exposes nullptr pre-values to store barriers
JDK-8313262 C2: Sinking node may cause required cast to be dropped
JDK-8313307 java/util/Formatter/Padding.java fails on some Locales
JDK-8313312 Add missing classpath exception copyright header
JDK-8313323 javac -g on a java file which uses unnamed variable leads to ClassFormatError when launching that class
JDK-8313402 C1: Incorrect LoadIndexed value numbering
JDK-8313428 GHA: Bump GCC versions for July 2023 updates
JDK-8313576 GCC 7 reports compiler warning in bundled freetype 2.13.0
JDK-8313602 increase timeout for jdk/classfile/CorpusTest.java
JDK-8313626 C2 crash due to unexpected exception control flow
JDK-8313657 com.sun.jndi.ldap.Connection.cleanup does not close connections on SocketTimeoutErrors
JDK-8313676 Amend TestLoadIndexedMismatch test to target intrinsic directly
JDK-8313678 SymbolTable can leak Symbols during cleanup
JDK-8313691 use close after failing os::fdopen in vmError and ciEnv
JDK-8313701 GHA: RISC-V should use the official repository for bootstrap
JDK-8313707 GHA: Bootstrap sysroots with --variant=minbase
JDK-8313711 Cherry-pick WebKit 616.1 stabilization fixes
JDK-8313752 InstanceKlassFlags::print_on doesn't print the flag names
JDK-8313765 Invalid CEN header (invalid zip64 extra data field size)
JDK-8313796 AsyncGetCallTrace crash on unreadable interpreter method pointer
JDK-8313856 Replace VLA with malloc in pango
JDK-8313874 JNI NewWeakGlobalRef throws exception for null arg
JDK-8313900 Possible NULL pointer access in NativeAudioSpectrum and NativeVideoBuffer
JDK-8313901 [TESTBUG] test/hotspot/jtreg/compiler/codecache/CodeCacheFullCountTest.java fails with java.lang.VirtualMachineError
JDK-8313904 [macos] All signing tests which verifies unsigned app images are failing
JDK-8314020 Print instruction blocks in byte units
JDK-8314024 SIGSEGV in PhaseIdealLoop::build_loop_late_post_work due to bad immediate dominator info
JDK-8314063 The socket is not closed in Connection::createSocket when the handshake failed for LDAP connection
JDK-8314117 RISC-V: Incorrect VMReg encoding in RISCV64Frame.java
JDK-8314118 Update JMH devkit to 1.37
JDK-8314139 TEST_BUG: runtime/os/THPsInThreadStackPreventionTest.java could fail on machine with large number of cores
JDK-8314144 gc/g1/ihop/TestIHOPStatic.java fails due to extra concurrent mark with -Xcomp
JDK-8314212 Crash when loading cnn.com in WebView
JDK-8314216 Case enumConstant, pattern compilation fails
JDK-8314262 GHA: Cut down cross-compilation sysroots deeper
JDK-8314423 Multiple patterns without unnamed variables
JDK-8314426 runtime/os/TestTrimNative.java is failing on slow machines
JDK-8314501 Shenandoah: sun/tools/jhsdb/heapconfig/JMapHeapConfigTest.java fails
JDK-8314517 some tests fail in case ipv6 is disabled on the machine
JDK-8314618 RISC-V: -XX:MaxVectorSize does not work as expected
JDK-8314649 Enhanced archival support redux
JDK-8314656 GHA: No need for Debian ports keyring installation after JDK-8313701
JDK-8314679 SA fails to properly attach to JVM after having just detached from a different JVM
JDK-8314730 GHA: Drop libfreetype6-dev transitional package in favor of libfreetype-dev
JDK-8314850 SharedRuntime::handle_wrong_method() gets called too often when resolving Continuation.enter
JDK-8314960 Add Certigna Root CA - 2
JDK-8315020 The macro definition for LoongArch64 zero build is not accurate.
JDK-8315051 jdk/jfr/jvm/TestGetEventWriter.java fails with non-JVMCI GCs
JDK-8315534 Incorrect warnings about implicit annotation processing
JDK-8315657 Application window not activated in macOS 14 Sonoma
JDK-8316879 RegionMatches1Tests fails if CompactStrings are disabled after JDK-8302163
JDK-8317121 vector_masked_load instruction is moved too early after JDK-8286941
ON THIS PAGE