Liberica JDK 8u422+6: Release Notes
1. Version information
This document provides information about Liberica JDK 8u422 release.
The full version string for this update release is 8u422+6. The version number is 8.
Liberica JDK 8 is distributed as .apk, .rpm, .zip, .deb, and .tar.gz packages. Please select the most appropriate for your purposes.
2. What’s New
This release contains the following updates and new features.
Notable Changes
This is the list of the notable issues fixed in this release.
| Issue ID | |
|---|---|
JDK-8326086 | Summary: Add an approximation of total bytes allocated on the Java heap by the JVM Description: A new com.sun.management.ThreadMXBean method getAllThreadAllocatedBytes() was introduced that, if both isAllocatedThreadMemorySupported() and isThreadAllocatedMemoryEnabled() are true, returns an approximation of the total number of bytes allocated in the Java heap by the JVM process. |
JDK-8326434 | Summary: Make HttpURLConnection default keep alive timeout configurable Description: The default keep alive time for idle TCP connections in the HttpURLConnection cache can now be configured by the http.keepAlive.time.server property. |
JDK-8329142 | Summary: Test 'api/java_awt/interactive/SystemTrayTests.html' failed because A blue ball icon was added outside of the system tray Description: When pressing the 'Add tray icon' button, the blue ball icon is now added to the system tray. |
JDK-8329143 | Summary: Add Certainly roots R1 and E1 Description: Certainly Root R1 CA certificate was added. |
JDK-8329544 | Summary: sun/security/krb5/auto/ReplayCacheTestProc.java cannot find the testlibrary Description: sun/security/krb5/auto/ReplayCacheTestProc.java failed due to a compilation error. This was because the classpath was set incorrectly by the @library annotation. |
JDK-8332733 | Summary: Add GlobalSign 2 TLS root certificates Description: GlobalSign Root R46 and GlobalSign Root E46 root certificates were added. |
IANA TZ Data update
This release of Liberica JDK 8u422 comes with IANA Time Zone Database version 2024a. The following are the main changes in this update:
Kazakhstan unifies on UTC+5 beginning 2024-03-01. Palestine springs forward a week later after Ramadan. zic no longer pretends to support indefinite-past DST. localtime no longer mishandles Ciudad Juárez in 2422.
3. Known Issues
This release does not contain any known issues.
4. Fixed CVEs
This is the list of the security issues fixed in this release. CVSS scores are provided using the CVSS version 3.1 scoring system.
| CVE ID | CVSS score | Component | Module | Attack Vector | Complexity | Privileges | User Interaction | Scope | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|---|---|---|---|---|---|
CVE-2024-21131 | 3.7 | hotspot | runtime | network | high | none | none | unchanged | none | low | none |
CVE-2024-21138 | 3.7 | hotspot | runtime | network | high | none | none | unchanged | none | none | low |
CVE-2024-21140 | 4.8 | hotspot | compiler | network | high | none | none | unchanged | low | low | none |
CVE-2024-21144 | 3.7 | core-libs | java.util | network | high | none | none | unchanged | none | none | low |
CVE-2024-21145 | 4.8 | client-libs | 2d | network | high | none | none | unchanged | low | low | none |
CVE-2024-21147 | 7.4 | hotspot | compiler | network | high | none | none | unchanged | high | high | none |
5. Resolved Issues
JDK issues
This is the list of general JDK issues fixed in this release.
| Issue ID | Summary |
|---|---|
JDK-8025439 | [TEST BUG] [macosx] PrintServiceLookup.lookupPrintServices doesn’t work properly since jdk8b105 |
JDK-8069389 | CompilerOracle prefix wildcarding is broken for long strings |
JDK-8159454 | [TEST_BUG] javax/swing/ToolTipManager/7123767/bug7123767.java: number of checked graphics configurations should be limited |
JDK-8159690 | [TESTBUG] Mark headful tests with @key headful. |
JDK-8198321 | javax/swing/JEditorPane/5076514/bug5076514.java fails |
JDK-8203691 | [TESTBUG] Test /runtime/containers/cgroup/PlainRead.java fails |
JDK-8235834 | IBM-943 charset encoder needs updating |
JDK-8239965 | XMLEncoder/Test4625418.java fails due to "Error: Cp943 - can’t read properly" |
JDK-8240756 | [macos] SwingSet2:TableDemo:Printed Japanese characters were garbled |
JDK-8256152 | tests fail because of ambiguous method resolution |
JDK-8258855 | Two tests sun/security/krb5/auto/ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java failed on OL8.3 |
JDK-8262017 | C2: assert(n != __null) failed: Bad immediate dominator info. 8205407: [windows, vs<2017] C4800 after 8203197 |
JDK-8268916 | Tests for AffirmTrust roots |
JDK-8278067 | Make HttpURLConnection default keep alive timeout configurable |
JDK-8291226 | Create Test Cases to cover scenarios for JDK-8278067 |
JDK-8291637 | HttpClient default keep alive timeout not followed if server sends invalid value |
JDK-8291638 | Keep-Alive timeout of 0 should close connection immediately |
JDK-8293562 | KeepAliveCache Blocks Threads while Closing Connections |
JDK-8303466 | C2: failed: malformed control flow. Limit type made precise with MaxL/MinL |
JDK-8304074 | [JMX] Add an approximation of total bytes allocated on the Java heap by the JVM |
JDK-8313081 | MonitoringSupport_lock should be unconditionally initialized after 8304074 |
JDK-8314794 | Improve UTF8 String supports |
JDK-8315020 | The macro definition for LoongArch64 zero build is not accurate. |
JDK-8316138 | Add GlobalSign 2 TLS root certificates |
JDK-8317507 | C2 compilation fails with "Exceeded _node_regs array" |
JDK-8318410 | jdk/java/lang/instrument/BootClassPath/BootClassPathTest.sh fails on Japanese Windows |
JDK-8319859 | Better symbol storage |
JDK-8320005 | Allow loading of shared objects with .a extension on AIX |
JDK-8320097 | Improve Image transformations |
JDK-8320548 | Improved loop handling |
JDK-8322106 | Enhance Pack 200 loading |
JDK-8323231 | Improve array management |
JDK-8323390 | Enhance mask blit functionality |
JDK-8324185 | [8u] Accept Xcode 12+ builds on macOS |
JDK-8324559 | Improve 2D image handling |
JDK-8325096 | Test java/security/cert/CertPathBuilder/akiExt/AKISerialNumber.java is failing |
JDK-8325600 | Better symbol storage |
JDK-8325927 | [8u] Backport of JDK-8170552 missed part of the test |
JDK-8326686 | Bump update version of OpenJDK: 8u422 |
JDK-8327440 | Fix "bad source file" error during beaninfo generation |
JDK-8328809 | [8u] Problem list some CA tests |
JDK-8328825 | Google CAInterop test failures |
JDK-8329544 | [8u] sun/security/krb5/auto/ReplayCacheTestProc.java cannot find the testlibrary |
JDK-8331791 | [8u] AIX build break from JDK-8320005 backport |
JDK-8331980 | [8u] Problem list CAInterop.java#certignarootca test |
JDK-8335552 | [8u] JDK-8303466 backport to 8u requires 3 ::Identity signature fixes |
JFX issues
This is the list of JFX issues fixed in this release.
| Issue ID | Summary |
|---|---|
JDK-8324233 | Update JPEG Image Decoding Software to 9f |
JDK-8324326 | Update ICU4C to 74.2 |
JDK-8327177 | macOS: wrong GlobalRef deleted in GlassMenu |
JDK-8328749 | Remove unused imports in javafx.web |
JDK-8328752 | Fix missing @Overrides in javafx.web |
JDK-8329705 | Add missing Application thread checks to platform specific a11y methods |
JDK-8331765 | Websocket callbacks are not executed after WebKit 617.1 update |
6. Updates to Third Party Libraries
This is the list of changes in the third party libraries.
| Library | Full name | New Version | Module | JBS |
|---|---|---|---|---|
ICU4C | ICU4C | 74.2 | javafx | JDK-8324326 |
JPEG | JPEG Image Decoding Software | 9f | javafx | JDK-8324233 |
7. Upgrading to the New Version
To keep your Liberica JDK up-to-date and secure, always upgrade to the newest available version once it is released. To upgrade, install the new version over the previous one. For the installation instructions, see Liberica JDK Installation Guide.