Liberica Native Image Kit 24.1.1+1 (23.0.1+13): Release Notes

1. Introduction

This document provides information about Liberica NIK release.

This particular version of Liberica NIK 24.1.1+1 is based on Liberica JDK 23.0.1+13.

Note:
For more information about Liberica JDK release, see Liberica JDK Release Notes.

Liberica Native Image Kit is a utility Based on GraalVM Open Source that is capable of converting your JVM-based application into a fully compiled native executable ahead-of-time under the closed-world assumption with an almost instant startup time.

Liberica NIK supports the following platforms:

  • Linux x86_64 (glibc)

  • Linux Alpine x86_64 (musl)

  • Linux AArch64 (glibc)

  • Linux Alpine AArch64 (musl)

  • Mac OS x86_64

  • Mac OS AArch64

  • Windows x86_64

Liberica NIK distribution

Liberica NIK is distributed as .apk, .deb, .dmg, .msi, .pkg, .rpm, .tar.gz, and .zip packages. Please select the most appropriate for your purposes.

2. What’s New

This release contains the following updates and new features.

Notable Issues

This release does not contain any notable issues. For the list of Liberica JDK notable issues, see Liberica JDK Release Notes

Language and framework versions

Liberica NIK 24.1.1 supports the following languages and frameworks:

ComponentVersion

LLVM

18.1.3 (GraalVM CE Native 24.1.1)

Python

3.11.7 (GraalVM CE Native 24.1.1)

Node.js

20.15.1

Java

Liberica JDK 23.0.1+13

Java Script

GraalVM JavaScript (GraalVM CE Native 24.1.1)

TruffleRuby

24.1.1 (Ruby 3.2.4)

Native Image

GraalVM version 24.1.1 (Liberica JDK 23.0.1+13, LTS)

Wasm

WebAssembly (GraalVM CE Native 24.1.1)

3. Known Issues

This release does not contain any known issues. For the list of Liberica JDK known issues, see Liberica JDK Release Notes.

4. CVEs

This is the list of the security issues fixed in this release. CVSS scores are provided using the CVSS version 3.1 scoring system.

CVE IDCVSS scoreComponentModuleAttack VectorComplexityPrivilegesUser InteractionScopeConfidentialityIntegrityAvailability

CVE-2023-42950

7.5

javafx

web

network

high

none

required

unchanged

high

high

high

CVE-2024-21208

3.7

core-libs

java.net

network

high

none

none

unchanged

none

none

low

CVE-2024-21210

3.7

hotspot

compiler

network

high

none

none

unchanged

none

low

none

CVE-2024-21217

3.7

core-libs

java.io:serialization

network

high

none

none

unchanged

none

none

low

CVE-2024-21235

4.8

hotspot

compiler

network

high

none

none

unchanged

low

low

none

CVE-2024-25062

7.5

javafx

web

network

low

none

none

unchanged

none

none

high

CVE-2024-36138

8.1

node.js

nghttp2

network

high

none

none

unchanged

high

high

high

5. Resolved Issues

Liberica NIK issues

This is the list of Liberica NIK issues fixed in this release.

Issue IDSummary

GR-56104

Fix --bundle-create option and bundle-launcher feature on Windows.

GR-56412

Backport to 24.1: Fix --bundle-create option and bundle-launcher feature on Windows.

GR-56704

Update mx import.

GR-57238

Backport to 24.1: Avoid getHostBackend when instantiating UnimplementedGraalIntrinsics.

GR-57295

Aarch: Move setConservativeLabelRange after resetting crb.

GR-57656

Backport to 24.1: Fix Addr part alignment in Truffle compilation logs.

GR-57706

Backport to 24.1: Reset Provider.Service.constructorCache field.

GR-57721

Backport to 24.1: Create Gradle plugin with similar features as our Maven plugin.

GR-57745

Backport to 24.1: Eagerly initialize caches in ValueConversions.

GR-57799

Backport to 24.1: Deprecate exposed truffle filesystem spi in VirtualFileSystem.

GR-57842

Update bouncycastle dependency

GR-57959

Backport to 24.1: Do not include TruffleJfrFeature if PGO config is specified.

GR-57970

Backport to 24.1: Make js.webassembly option stable.

GR-57975

Backport to 24.1: Update bouncycastle dependency

GR-58037

Start 24.1.1 dev cycle.

GR-58065

Update labsjdk to 23.0.1+9-jvmci-b01

GR-58165

Backport to 24.1: Prevent emission of typeReachable in reachability-metadata.json

GR-58228

Backport to 24.1: Remove constant memory buffer assumption and simplify ByteArrayWasmMemory.

GR-58283

Respin labsjdk to 23.0.1+11-jvmci-b01.

GR-58483

Update bcutil dependency

6. Upgrading to the New Version

To keep your Liberica NIK up-to-date and secure, always upgrade to the newest available version once it is released. To upgrade, install the new version over the previous one. For the installation instructions, see Liberica NIK Installation Guide.

ON THIS PAGE