Liberica JDK 27.0.1+11: Release Notes
Published: October 20, 2026
1. Version information
This document provides information about Liberica JDK 27.0.1 release. The full version string for this update release is 27.0.1+11. The version number is 27.
Liberica JDK 27 is distributed as .apk, .rpm, .zip, .deb, .pkg, and .tar.gz packages. Please select the most appropriate for your purposes.
2. What’s New
This release contains the following updates and new features.
Notable Changes
This is the list of the notable issues fixed in this release.
| Issue ID | |
|---|---|
JDK-8387123 | Summary: Remove LuxTrust Global Root CA Description: The following root certificate has been removed from the |
JDK-8388214 | Summary: Update Timezone Data to 2026c Description: Briefly: Alberta moved to permanent -06 on 2026-06-18; Morocco moves to permanent +00 on 2026-09-20; More integer overflow bugs have been fixed in zic. |
JDK-8392377 | Summary: Update Timezone Data to 2026d Description: Briefly: Canada’s Northwest Territories moved to permanent -06 on 2026-08-21; Obsolescent settings like TZ='EST5EDT' now conform better to POSIX; Fix security, performance and porting bugs in zic and localtime. |
JDK-8392538 | Summary: Align the JDK with Microsoft’s new timezone names for British Columbia/Alberta Description: Microsoft announced a new timezone name for British Columbia, per https://techcommunity.microsoft.com/blog/dstblog/interim-guidance-for-british-columbia-time-zone-changes-2026/4544988 JDK timezone data needs to be aligned with the registry key updates to allow a Windows user to select a local timezone. |
JDK-8393337 | Summary: Update Timezone Data to 2026e Description: Briefly: Manitoba moves to permanent -05 on 2026-10-31. |
JDK-8393848 | Summary: Align the JDK with Microsoft’s new timezone name for Manitoba Description: Microsoft announced a new timezone name for Manitoba, per https://techcommunity.microsoft.com/blog/dstblog/interim-guidance-for-manitoba-permanent-dst-2026/4562488 JDK timezone data needs to be aligned with the registry key updates to allow a Windows user to select a local timezone. |
Discontinued OS support
Note that Liberica JDK 27.0.1 is not available for and cannot be run on the following operating systems:
-
Windows x86 (32-bit)
-
macOS 10.x
IANA TZ Data version
This release of Liberica JDK 27.0.1 comes with the 2026e version of the in-tree copy of the Time Zone Database. The following are the key features of this version.
Briefly
Manitoba moves to permanent -05 on 2026-10-31.
Changes to future timestamps
Manitoba’s 2026-03-08 spring forward was its last foreseeable clock change, as it moved to permanent -05 thereafter. Model this with its traditional abbreviation EST. Although the change to permanent -05 legally takes place on 2026-10-31, temporarily model the change to occur on 2026-11-01 at 02:00 for the same reason as other recent temporary hacks. (Caution: see NOTE FOR 2026b TEMPORARY HACK FOR CLDR AND CANADA below.)
As the change affects both America/Winnipeg and its backward compatibility link, the obsolescent setting TZ="Canada/Central" will now use the abbreviation EST for affected timestamps, akin to TZ="Canada/Pacific" behavior introduced in 2026b.
Another TZDB release may be needed soon if any of the portions of northwestern Ontario historically aligned with America/Winnipeg do not follow. For now, given the short lead time with Manitoba’s announcement, assume that they will, to avoid creating new zones that may not be needed if no divergence occurs.
NOTE FOR 2026b TEMPORARY HACK FOR CLDR AND CANADA
This temporary hack works around a Canadian timekeeping bug in Unicode CLDR 48 and earlier. Unfortunately it also causes zic 2023d through 2026a, in the default slim mode, to generate a TZif file that does not conform to Internet RFC 9636 §3.3. The buggy file in turn causes some TZif readers, including tzcode itself, to ignore America/Vancouver’s 2026-11-01 02:00 transition from PDT (tm_isdst=1) to MST (tm_isdst=0). Although the buggy file does not cause any known TZif reader to mishandle UT offsets, caution is advised when using zic 2023d through 2026a to compile data from more-recent tz releases. To work around this problem when using these older zic versions, use ‘zic -b fat’.
Changes to past timestamps
In 1925 Ireland fell back on 09-20 not 10-04.
Changes to commentary
Discussion on timekeeping practices in northwestern Ontario has been expanded in light of Manitoba’s recent announcement. It is not yet known whether or to what extent these areas may adapt their own timekeeping practices in response.
For more information, see JDK-8393337.
3. Known Issues
This release does not contain any known issues.
4. Fixed CVEs
This is the list of the security issues fixed in this release. CVSS scores are provided using the CVSS version 3.1 scoring system.
| CVE ID | CVSS score | Component | Module | Attack Vector | Complexity | Privileges | User Interaction | Scope | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|---|---|---|---|---|---|
CVE-2026-101516 | 6.5 | security-libs | java.security | network | low | none | none | unchanged | low | low | none |
CVE-2026-43660 | 7.5 | javafx | web | network | high | none | required | unchanged | high | high | high |
CVE-2026-83374 | 5.9 | security-libs | javax.crypto | network | high | none | none | unchanged | none | high | none |
CVE-2026-83376 | 3.7 | security-libs | java.security | network | high | none | none | unchanged | none | low | none |
CVE-2026-83378 | 3.7 | hotspot | compiler | network | high | none | none | unchanged | none | low | none |
CVE-2026-83380 | 5.3 | security-libs | javax.security | network | low | none | none | unchanged | low | none | none |
CVE-2026-83381 | 4.8 | security-libs | javax.security | network | high | none | none | unchanged | low | low | none |
CVE-2026-83387 | 5.9 | core-libs | java.sql | network | high | none | none | unchanged | high | none | none |
CVE-2026-83395 | 3.7 | core-libs | java.net | network | high | none | none | unchanged | none | low | none |
CVE-2026-83400 | 5.3 | xml | jaxp | network | low | none | none | unchanged | none | none | low |
CVE-2026-87255 | 3.7 | hotspot | compiler | network | high | none | none | unchanged | low | none | none |
CVE-2026-87290 | 3.7 | xml | jaxp | network | high | none | none | unchanged | low | none | none |
CVE-2026-87291 | 5.3 | core-libs | java.net | network | low | none | none | unchanged | low | none | none |
CVE-2026-87292 | 3.7 | core-libs | java.net | network | high | none | none | unchanged | none | low | none |
CVE-2026-87294 | 6.5 | security-libs | java.security | network | low | none | none | unchanged | low | low | none |
CVE-2026-87367 | 3.7 | xml | jaxp | network | high | none | none | unchanged | none | low | none |
CVE-2026-91332 | 5.3 | core-libs | java.net | network | low | none | none | unchanged | none | low | none |
CVE-2026-91333 | 3.7 | security-libs | javax.crypto | network | high | none | none | unchanged | none | low | none |
CVE-2026-91334 | 3.7 | client-libs | javax.imageio | network | high | none | none | unchanged | low | none | none |
CVE-2026-91335 | 2.6 | client-libs | java.awt | network | high | low | required | unchanged | low | none | none |
CVE-2026-91373 | 5.3 | security-libs | java.security | network | low | none | none | unchanged | none | none | low |
CVE-2026-91374 | 4.8 | core-svc | tools | network | high | none | none | unchanged | low | low | none |
CVE-2026-91375 | 4.7 | tools | jlink | local | high | none | required | unchanged | none | high | none |
CVE-2026-91379 | 4.7 | tools | jshell | local | high | none | required | unchanged | none | high | none |
CVE-2026-91380 | 4.0 | core-libs | java.util | local | high | none | none | unchanged | low | low | none |
CVE-2026-91385 | 5.4 | javafx | web | network | low | none | required | unchanged | low | low | none |
CVE-2026-91394 | 5.9 | core-libs | java.net | network | high | none | none | unchanged | high | none | none |
CVE-2026-91397 | 3.6 | core-svc | tools | local | high | none | required | unchanged | none | low | low |
CVE-2026-91398 | 6.8 | core-libs | java.net | network | high | none | none | changed | none | high | none |
CVE-2026-91400 | 3.1 | client-libs | javax.sound | network | high | none | required | unchanged | none | none | low |
CVE-2026-91402 | 3.1 | javafx | graphics | network | high | none | required | unchanged | low | none | none |
CVE-2026-91409 | 3.7 | core-libs | java.net | network | high | none | none | unchanged | none | none | low |
CVE-2026-91415 | 4.8 | client-libs | 2d | network | high | none | none | unchanged | low | low | none |
CVE-2026-91418 | 5.3 | client-libs | javax.imageio | network | low | none | none | unchanged | none | none | low |
CVE-2026-91451 | 5.3 | core-libs | java.net | network | low | none | none | unchanged | none | low | none |
CVE-2026-91452 | 5.3 | core-libs | java.net | network | low | none | none | unchanged | none | low | none |
CVE-2026-91453 | 5.3 | core-libs | java.net | network | low | none | none | unchanged | none | low | none |
CVE-2026-91461 | 3.7 | security-libs | javax.net.ssl | network | high | none | none | unchanged | none | low | none |
CVE-2026-91462 | 5.9 | security-libs | org.ietf.jgss | network | high | none | none | unchanged | none | high | none |
CVE-2026-91463 | 5.3 | security-libs | org.ietf.jgss | network | high | none | required | unchanged | high | none | none |
CVE-2026-91464 | 5.3 | security-libs | org.ietf.jgss | network | high | none | required | unchanged | high | none | none |
CVE-2026-91477 | 3.1 | javafx | graphics | network | high | none | required | unchanged | low | none | none |
CVE-2026-91487 | 4.8 | hotspot | compiler | network | high | none | none | unchanged | low | low | none |
5. Resolved Issues
JDK issues
This is the list of general JDK issues fixed in this release.
| Issue ID | Summary |
|---|---|
JDK-8286300 | Port JEP 425 to S390X |
JDK-8335163 | [s390x] test failure - PrintClasses.java |
JDK-8377034 | Enable full JSR166TestCase.java test for s390x |
JDK-8380035 | compiler/intrinsics/TestReturnOopSetForJFRWriteCheckpoint.java crashes on s390x |
JDK-8380672 | Improve certification checking |
JDK-8380715 | Enhance PKCS5 padding |
JDK-8380993 | [REDO] Incorrect Interpretation of POSIX TZ Environment Variable on AIX |
JDK-8382178 | Enhance TLS certificate handling |
JDK-8382378 | Improve C2 loop transformations |
JDK-8382407 | Enhance LDAP Lookups |
JDK-8383047 | Enhance LDAP logins |
JDK-8383076 | Enhance SASL Authentication |
JDK-8383281 | Enhance MD5 Digesting |
JDK-8383301 | Enhance WebRowSets |
JDK-8383439 | Enhance HTTP Client Response Handling |
JDK-8383530 | Enhance Javadoc Searching |
JDK-8383679 | Enhance Certificate Name Checks |
JDK-8383689 | Enhance Vector Processing |
JDK-8383699 | Enhance XPath Expressions |
JDK-8383745 | Enhance HTTP Server |
JDK-8383756 | Enhance Network Clients |
JDK-8384021 | Enhance Certificate Constraint Checking |
JDK-8384031 | Enhance XML Processing |
JDK-8384165 | Improve ciphertext handling |
JDK-8384445 | Enhance JPEG loading |
JDK-8384455 | Enhance DataFlavor |
JDK-8384468 | Enhance jpackage Packaging |
JDK-8384654 | Enhance Template Handling |
JDK-8384664 | Enhance Image Handling |
JDK-8384688 | Enhance jmod handling |
JDK-8384708 | Enhance HTTP Connections |
JDK-8384736 | Enhance JShell |
JDK-8384746 | Enhance Preferences |
JDK-8384771 | Enhance TLS handshakes |
JDK-8384872 | Enhance HTTP Client |
JDK-8384930 | Enhance jstatd |
JDK-8385076 | Follow-on fix for Improve certification checking |
JDK-8385209 | Enhance HTTP client caching |
JDK-8385249 | Enhance diagnostic sessions |
JDK-8385260 | Enhance SOCKS5 support |
JDK-8385454 | Provide more NUMA related information in hsinfo/hserr files |
JDK-8385476 | Enhance MIDI file handling |
JDK-8385817 | Headless jdk still contains bin/jconsole |
JDK-8386013 | Enhance EventListenerList |
JDK-8386033 | Enhance QUIC connections |
JDK-8386089 | Bump update version for OpenJDK: jdk27u to 27.0.1 |
JDK-8386187 | Enhance font rendering |
JDK-8386298 | Improve font loading |
JDK-8386515 | Enhance HTTP server parsing |
JDK-8386525 | Enhance HTTP Server Handler |
JDK-8386535 | Improve HTTP headers |
JDK-8386552 | Enhance GIF loading |
JDK-8386783 | WebRowSet empty elements read value of previous element |
JDK-8386852 | Lower peak throughput with AOTCache |
JDK-8386923 | Enhance TLS Extensions |
JDK-8387075 | RemoteHostImpl constructor correction (jstatd) |
JDK-8387123 | Remove LuxTrust Global Root CA |
JDK-8387152 | Enhance krb5 tokens |
JDK-8387217 | Enhance krb5 client |
JDK-8387235 | JShell tests failing |
JDK-8387238 | Enhance Kerberos validation |
JDK-8387985 | sun/tools/jstat shell tests fail on platforms that do not support ParallelGC |
JDK-8388080 | Increase static size of some stubs for APX code |
JDK-8388117 | [s390x] is_z_illtrap should recognise all forms |
JDK-8388214 | (tz) Update Timezone Data to 2026c |
JDK-8388284 | [s390] resolve_jobject uses wrong branch condition after tmll |
JDK-8388866 | Change milestone to fcs for all releases |
JDK-8390380 | Cherry-pick metazone changes from CLDR to support tzdata2026c for JDK update releases |
JDK-8390400 | Enhance C2 comparisons |
JDK-8391256 | TestZoneTextPrinterParser.java assertion fails with expected: <Mountain Standard Time> but was: <Mountain Daylight Time> |
JDK-8392377 | (tz) Update Timezone Data to 2026d |
JDK-8392519 | Cherry-pick metazone changes from CLDR for tzdata2026d, for JDK update release |
JDK-8392526 | Cherry-pick BCP 47 time zone changes from CLDR for tzdata2026d, for JDK update releases |
JDK-8392538 | Align the JDK with Microsoft’s new timezone names for British Columbia/Alberta |
JDK-8393337 | (tz) Update Timezone Data to 2026e |
JDK-8393344 | Cherry-pick metazone changes from CLDR to support tzdata2026e for JDK update releases |
JDK-8393848 | Align the JDK with Microsoft’s new timezone name for Manitoba |
JFX issues
This is the list of JFX issues fixed in this release.
| Issue ID | Summary |
|---|---|
JDK-8304008 | Update README.md and CONTRIBUTING.md for jfx update repos |
JDK-8364680 | HelloWebView demo crashes when msn webpage is scrolled |
JDK-8373527 | Improve Graphics playback |
JDK-8376836 | Fix mistakes in FX API docs |
JDK-8378277 | Improve Editor selection |
JDK-8379207 | Improve audio conversion |
JDK-8380556 | Update WebKit to 625.1 |
JDK-8383092 | Enhance WebView Resource Loading |
JDK-8383129 | Better Handling of MP4 Files |
JDK-8383143 | Enhance Playlist Loading |
JDK-8383209 | Improve JavaFX Scripting Support |
JDK-8383219 | Enhance JavaFX Document Loading |
JDK-8383229 | Enhance JavaFX Image Loading |
JDK-8383252 | Enhance JavaFX DnD |
JDK-8383312 | Enhance JavaFX CSS Handling |
JDK-8383322 | Enhance JavaFX Clipboard |
JDK-8383332 | Improve JavaFX Input Methods |
JDK-8383333 | Improve JavaFX Drag and Drop |
JDK-8383356 | Improve JavaFX Rich Text Formatting |
JDK-8385198 | Enhance JavaFX Resource Loading |
JDK-8386486 | Improve graphics rendering |
JDK-8386859 | WebView crashes when calling document.startViewTransition() |
JDK-8388409 | Change JavaFX release version to 27.0.1 in jfx27u |
JDK-8388451 | Additional WebKit 625.1 fixes from WebKitGTK 2.52.5 |
JDK-8388508 | [macOS] MenuItem graphics in the system menu bar is corrupted or disappears, or JVM crashes in CoreGraphics, under memory pressure |
JDK-8388526 | [Windows] Crash in Platform.Preferences refresh on OS theme change when using FXCanvas |
JDK-8388783 | Custom String data cannot be read from the clipboard after JDK-8383252 |
JDK-8389093 | Typos in the JavaFX CSS Reference Guide |
JDK-8389176 | Enhance JavaFX image handling |
JDK-8389371 | cssref: explain font properties |
JDK-8389515 | Memory leak in dshowwrapper - decoded buffers delivered by CSink are never unmapped |
JDK-8389761 | Update Unicode Data Files license file to 17.0.0 |
JDK-8390263 | Create release notes for JavaFX 27 |
JDK-8390279 | Update copyright header for files modified in 2026 |
JDK-8390652 | Additional WebKit 625.1 fixes from WebKitGTK 2.52.6 |
JDK-8391652 | Snapshot test failures after JDK-8389176 |
JDK-8391823 | Intermittent WebView crash when running TextureMapperTest |
6. Updates to Third Party Libraries
This release does not contain any changes in the third party libraries.
7. Upgrading to the New Version
To keep your Liberica JDK up-to-date and secure, always upgrade to the newest available version once it is released. To upgrade, install the new version over the previous one. For the installation instructions, see Liberica JDK Installation Guide.