Liberica JDK 8u382+6 Release Notes


The full version string for this update release is 8u382+6. The version number is 8.

Liberica JDK 8u382+6

Liberica is a certified, Java SE 8-compliant distribution of OpenJDK 8 which works on server (Linux x86_64, Linux ARM64, Windows 64), desktop (Windows 64, Windows 32, Mac, Linux x86_64), and embedded devices (Linux ARM64, Linux ARMv7, including Raspberry Pi 2 & 3 (ARMv6 hardfloat)). It has the following notable additions:

  • Linux x86_64 version contains experimental support for ZGC.
  • Linux x86_64, ARMv8 and ARMv7 distributions include a choice of Client VM, Server VM and Minimal VM.
  • Alpine Linux x86_64 version is build with musl support.
  • Windows x86_64, Windows x86, Windows ARMv8, Mac, Linux x86_64, Linux x86 and Linux ARMv7 distributions contain OpenJFX 8.
  • Linux ARMv7 distribution contains Device IO API compiled for Raspberry Pi.

Please refer to the Oracle JDK 8u382 release notes for further information on JDK 8 features. This document further outlines the peculiarities of Liberica distribution as compared to Oracle JDK 8 distribution.

Supported Server and Desktop configurations

Liberica is supported on the following OSes:

  • Ubuntu Linux 14.04, 16.04, 18.04 (x86_64, x86, ARMv8*)
  • Debian Linux 8, 9 (x86_64, x86, ARMv8*)
  • Red Hat, Oracle Linux and CentOS 5.5+, 6.x, 7.x (x86_64, x86, ARMv8*)
  • Alpine Linux x86_64 version is build with musl support.
  • SUSE Linux Enterprise 12, 15 and tumbleweed (x86_64, ARMv8*)
  • Apple macOS 10.11+ (64 bit only)
  • Solaris 10.9+ (SPARC and x86_64)*
  • Microsoft Windows 2019, Windows 2016, Windows 2012 R2, Windows 10, Windows 8, Windows 7 (32 and 64 bit)

* - version doesn't have Client VM

Note: The minimum supported Linux kernel version is 2.6.18 and GLIBC version 2.5. LibericaFX works on all supported Ubuntu versions, Red Hat Linux family starting from 7.x and SUSE versions with GTK3 backend.

Supported Embedded configurations

Liberica is tested and certified on Raspberry Pi 2, 3 and 4 running the following OSes:

  • Raspbian OS (armhf)
  • OpenSUSE (armv8)

It is also known to work with Debian (armhf) and Ubuntu (armhf).

Liberica JDK 8 distribution

Liberica JDK 8 are distributed as .rpm, .zip, .deb and .tar.gz packages. Please select the one which is most appropriate for your purposes.

Liberica JDK 8 introduced all new features supported by OpenJDK 8.

With the introduction of the Jigsaw feature in JDK 9 and Minimal VM it is now possible to create a Runtime that is sufficient to run your application and trim down the size of the Runtime. To generate a Runtime with just the Minimal VM, add --vm=minimal to jlink options.

Liberica JDK continues to provide support for AOT and Graal JIT. Since in OpenJDK 8 builds these features are deemed experimental and deprecated, it is recommended to compile native executables with Liberica Native Image Kit to avoid errors.

By default, the Liberica uses Server VM. Server VM and Client VM can be enabled with -server and -client command line options, respectively. In case the deployment requires to minimize the footprint, it may be beneficial to use Minimal VM, which emphasises on a minimal footprint. It has C1 JIT compiler only, Serial GC and no serviceability features.

LibericaFX for the Raspberry Pi

Liberica JDK 8 come with a bundled LibericaFX implementation, which is based on OpenJFX. The following tables lists Java FX modules status of Liberica distribution

  • Java FX Graphics - works.
  • Java FX Controls - works.
  • Java FX Media - does not work.
  • Java FX Webkit - does not work.

The following pipelines are known to work: EGL, SW (direct framebuffer) and GTK. By default, Liberica tries to use the accelerated EGL pipeline, which requires the presence of EGL libraries. If they are not found, the implementation falls back to software rendering.

Use the following command line options to specify the rendering pipeline:

  • -Dprism.order=sw forces the use of software rendering pipeline. *
  • -Dprism.order=es2 forces the use of EGL pipeline and hardware acceleration. *
  • -Djavafx.platform=gtk if you would like to launch a LibericaFX application using Liberica from X11.

* Not supported on Raspberry Pi 4.

Please refer to the following wiki for more information.

Device IO API for the Raspberry Pi

Liberica JDK 8 comes with a bundled OpenJDK Device I/O (DIO) API implementation module. DIO provides a Java API for accessing Raspberry PI GPIO pins and for communicating with peripheral devices:

  • General Purpose Input/Output (GPIO).
  • Inter-Integrated Circuit Bus (I2C), Serial Peripheral Interface (SPI).
  • Universal Asynchronous Receiver/Transmitter (UART).

Please refer to the following wiki for more information.

Security Baselines

BellSoft Liberica follows the security baselines for Oracle Java SE. Please refer to the Oracle documentation for a list of issues fixed in a given release.

Known Issues

LibericaFX and EGL on Raspbian

As of 2017, the default location of Broadcom libEGL.so and libGLESv2.so has changed in Raspbian OS. If you'd like to leverage hardware EGL acceleration available from Broadcom video drivers in LibericaFX while running a recent Raspbian OS, run the following command:

cd /opt/vc/lib
sudo ln -s libbrcmEGL.so libEGL.so
sudo ln -s libbrcmGLESv2.so libGLESv2.so

CVEs

This is the list of the security issues fixed in this release. CVSS scores are provided using the CVSS version 3.1 scoring system.

CVE ID Score Component Module Attack vector Complexity Privileges User interaction Scope Confidentiality Integrity Availability
CVE-2023-22043 5.9 javafx graphics network high none none unchanged none high none
CVE-2023-22045 3.7 hotspot compiler network high none none unchanged low none none
CVE-2023-22049 3.7 core-libs java.io network high none none unchanged none low none

Issues fixed

Issue Description
JDK-8305312 Enhanced path handling
JDK-8304468 Better array usages
JDK-8300596 Enhance Jar Signature validation
JDK-8298676 Enhanced Look and Feel
JDK-8310947 gb18030-2000 not selectable with LANG=zh_CN.GB18030 after JDK-8301119
JDK-8301119 Support for GB18030-2022
JDK-8241311 Move some charset mapping tests from closed to open
JDK-8186801 Add regression test to test mapping based charsets (generated at build time)
JDK-8307134 Add GTS root CAs
JDK-8304760 Add 2 Microsoft TLS roots
JDK-8298108 Add a regression test for JDK-8297684
JDK-8298271 java/security/SignedJar/spi-calendar-provider/TestSPISigned.java failing on Windows
JDK-8305975 Add TWCA Global Root CA
JDK-8072678 Wrong exception messages in java.awt.color.ICC_ColorSpace
JDK-8307310 Backport the tests for JDK-8058969 and JDK-8039271 to the OpenJDK8
JDK-8268558 [TESTBUG] Case 2 in TestP11KeyFactoryGetRSAKeySpec is skipped
JDK-8285515 (dc) DatagramChannel.disconnect fails with "Invalid argument" on macOS 12.4
JDK-8307531 [aarch64] JDK8 single-step debugging is extremely slow
JDK-8303028 Update system property for Java SE specification maintenance version
JDK-8305681 Allow additional characters for GB18030-2022 (Level 2) support
JDK-8301400 Allow additional characters for GB18030-2022 support
JDK-8305165 [8u] ServiceThread::nmethods_do is not called to keep nmethods from being zombied while in the queue
JDK-8282345 handle latest VS2022 in abstract_vm_version
JDK-8276841 Add support for Visual Studio 2022
JDK-8215105 java/awt/Robot/HiDPIScreenCapture/ScreenCaptureTest.java: Wrong Pixel Color
JDK-8277881 Missing SessionID in TLS1.3 resumption in compatibility mode
JDK-8151460 Metaspace counters can have inconsistent values
JDK-8305113 (tz) Update Timezone Data to 2023c
JDK-8263404 RsaPrivateKeySpec is always recognized as RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
JDK-8278851 Correct signer logic for jars signed with multiple digest algorithms
JDK-8263059 security/infra/java/security/cert/CertPathValidator/certification/ComodoCA.java fails due to revoked cert
JDK-8271199 Mutual TLS handshake fails signing client certificate with custom sensitive PKCS11 key
JDK-8295530 Update Zlib Data Compression Library to Version 1.2.13
JDK-8302791 Add specific ClassLoader object to Proxy IllegalArgumentException message
JDK-8152432 Implement setting jtreg @requires properties vm.flavor, vm.bits, vm.compMode
JDK-8289301 P11Cipher should not throw out of bounds exception during padding
JDK-8293232 Fix race condition in pkcs11 SessionManager
JDK-8282600 SSLSocketImpl should not use user_canceled workaround when not necessary
JDK-8293815 P11PSSSignature.engineUpdate should not print debug messages during normal operation
JDK-8185736 missing default exception handler in calls to rethrow_Stub
JDK-8303462 Bump update version of OpenJDK: 8u382
JDK-8282359 Intermittent WebKit build failure on Windows: C1090: PDB API call failed, error code 23
JDK-8284542 [Accessibility] [Win] Missing attribute for toggle state of CheckBox in CheckBoxTreeItem
JDK-8286089 Intermittent WebKit build failure on macOS in JavaScriptCore
JDK-8296654 [macos] Crash when launching JavaFX app with JDK that targets SDK 13
JDK-8301009 Update libxml2 to 2.10.3
JDK-8304441 [macos] Crash when putting invalid unicode char on clipboard
JDK-8304665 Change to Xcode12.4+1.1 devkit
JDK-8304751 Improve pipeline layout
JDK-8306115 Update libxml2 to 2.10.4
ON THIS PAGE