Liberica Native Image Kit 23.1.7+1 (21.0.7+9): Release Notes

Published: April, 2025

1. Introduction

This document provides information about Liberica NIK release.

This particular version of Liberica NIK 23.1.7+1 is based on Liberica JDK 21.0.7+9.

Note:
For more information about Liberica JDK release, see Liberica JDK Release Notes.

Liberica Native Image Kit is a utility Based on GraalVM Open Source that is capable of converting your JVM-based application into a fully compiled native executable ahead-of-time under the closed-world assumption with an almost instant startup time.

Liberica NIK supports the following platforms:

  • Linux x86_64 (glibc)

  • Linux Alpine x86_64 (musl)

  • Linux AArch64 (glibc)

  • Linux Alpine AArch64 (musl)

  • Mac OS x86_64

  • Mac OS AArch64

  • Windows x86_64

Liberica NIK distribution

Liberica NIK is distributed as .apk, .deb, .dmg, .msi, .pkg, .rpm, .tar.gz, and .zip packages. Please select the most appropriate for your purposes.

2. What’s New

This release contains the following updates and new features.

Notable Issues

This release does not contain any notable issues. For the list of Liberica JDK notable issues, see Liberica JDK Release Notes

Language and framework versions

Liberica NIK 23.1.7 supports the following languages and frameworks:

ComponentVersion

LLVM

16.0.1 (GraalVM CE Native 23.1.7)

Python

3.10.8 (GraalVM CE Native 23.1.7)

Node.js

18.20.6

Java

Liberica JDK 21.0.7+9

Java Script

GraalVM JavaScript (GraalVM CE Native 23.1.7)

R

4.0.3 (FastR)

TruffleRuby

23.1.7 (Ruby 3.2.2)

Native Image

GraalVM version 23.1.7 (Liberica JDK 21.0.7+9, LTS)

Wasm

WebAssembly (GraalVM CE Native 23.1.7)

3. Known Issues

This release does not contain any known issues. For the list of Liberica JDK known issues, see Liberica JDK Release Notes.

4. CVEs

This is the list of the security issues fixed in this release. CVSS scores are provided using the CVSS version 3.1 scoring system.

CVE IDCVSS scoreComponentModuleAttack VectorComplexityPrivilegesUser InteractionScopeConfidentialityIntegrityAvailability

CVE-2024-47606

8.6

N/A

N/A

Local

Low

None

None

Unchanged

High

High

High

CVE-2024-54534

9.8

N/A

N/A

Network

Low

None

None

Unchanged

High

High

High

CVE-2025-23083

7.7

N/A

N/A

Local

Low

None

None

Unchanged

High

High

None

CVE-2025-23084

5.6

N/A

N/A

Local

Low

Low

Required

Unchanged

High

Low

None

CVE-2025-23085

5.3

N/A

N/A

Network

Low

None

None

Unchanged

None

None

Low

5. Resolved Issues

Liberica NIK issues

This is the list of Liberica NIK issues fixed in this release.

Issue IDSummary

GR-47055

Port JDK-8309545. Thread.interrupted from virtual thread needlessly resets interrupt status.

GR-51149

Wrong error message when polyglot implementation is missing. Removed obsolete message.

GR-52657

Fix simplification of always-deopt FixedGuard.

GR-52884

Cannot update closed speculation encoding.

GR-53407

Optionally ignore OutOfMemoryErrors while in VM-internal code.

GR-53541

Fixed a deadlock if we run OutOfMemory while entering a synchronized blocks.

GR-53801

NullPointerException. Cannot invoke "com.oracle.truffle.polyglot.InternalResourceRoots$Root.path()" because "this.owningRoot" is null.

GR-53938

Reimplement linking wasm module imports from JS.

GR-54079

Post cherry-pick fixes.

GR-54163

Added stack traces to non-bailout compilation failures. Fixed LTS compatibility problems.

GR-54505

Validate Wasm function arguments when called through Interop.

GR-54545

Backport 23.1. Timeout of gate-vm-ce-truffle-unchained-labsjdk-latest-linux-amd64

GR-54582

Annotate methods in ImplicitExceptions with @Uninterruptible.

GR-54706

Wasm modules compiled and instantiated via the JS API should be cached.

GR-54851

Fix handling of trailing code after terminating end marker. Check that function/block type index is in bounds.

GR-55243

Prevent that large array allocations in VM-internal code trigger OutOfMemoryErrors.

GR-56351

Fix option ImplicitExceptionWithoutStacktraceIsFatal.

GR-56816

Add option VerifyDuringGC.

GR-56816

Improve serial GC heap verification.

GR-56861

Split CommittedMemoryProvider.

GR-56863

Fix serial GC collection count and time so that it is consistent with '-XX:+VerboseGC' and emitted JFR events.

GR-56883

Add FeatureHandler.containsFeature().

GR-61882

Backport to 23.1. Upgrading the underlying Node.js to version 18.20.6.

GR-62376

Backport to 23.1. Compilation failure in ImportMetaNode.

6. Upgrading to the New Version

To keep your Liberica NIK up-to-date and secure, always upgrade to the newest available version once it is released. To upgrade, install the new version over the previous one. For the installation instructions, see Liberica NIK Installation Guide.

ON THIS PAGE