Liberica Native Image Kit 25.0.4-1 (25.0.4+10): Release Notes
Published: July, 2026
1. Introduction
This document provides information about Liberica NIK release.
This particular version of Liberica NIK 25.0.4-1 is based on Liberica JDK 25.0.4+10.
|
Note:
| For more information about Liberica JDK release, see Liberica JDK Release Notes. |
Liberica Native Image Kit is a utility Based on GraalVM Open Source that is capable of converting your JVM-based application into a fully compiled native executable ahead-of-time under the closed-world assumption with an almost instant startup time.
Liberica NIK supports the following platforms:
-
Linux x86_64 (glibc)
-
Linux Alpine x86_64 (musl)
-
Linux AArch64 (glibc)
-
Linux Alpine AArch64 (musl)
-
Mac OS x86_64
-
Mac OS AArch64
-
Windows x86_64
Liberica NIK distribution
Liberica NIK is distributed as .apk, .deb, .dmg, .msi, .pkg, .rpm, .tar.gz, and .zip packages. Please select the most appropriate for your purposes.
2. What’s New
This release contains the following updates and new features.
Notable Issues
This release does not contain any notable issues. For the list of Liberica JDK notable issues, see Liberica JDK Release Notes
Language and framework versions
Liberica NIK 25.0.4 supports the following languages and frameworks:
| Component | Version |
|---|---|
LLVM | 20.1.4 (GraalVM CE Native 25.0.4) |
Python | 3.12.8 (GraalVM CE Native 25.0.4) |
Node.js | 22.22.2 |
Java | Liberica JDK 25.0.4+10 |
Java Script | GraalVM JavaScript (GraalVM CE Native 25.0.4) |
TruffleRuby | 25.0.4 (Ruby 3.3.7) |
Native Image | GraalVM version 25.0.4 (Liberica JDK 25.0.4+10, LTS) |
Wasm | WebAssembly (GraalVM CE Native 25.0.4) |
3. Known Issues
This release does not contain any known issues. For the list of Liberica JDK known issues, see Liberica JDK Release Notes.
4. CVEs
This is the list of the security issues fixed in this release. CVSS scores are provided using the CVSS version 3.1 scoring system.
| CVE ID | CVSS score | Component | Module | Attack Vector | Complexity | Privileges | User Interaction | Scope | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|---|---|---|---|---|---|
CVE-2026-41254 | 7.5 | client-libs | 2d | network | low | none | none | unchanged | none | none | high |
CVE-2026-46917 | 5.3 | security-libs | javax.net.ssl | network | low | none | none | unchanged | none | none | low |
CVE-2026-46968 | 5.9 | security-libs | javax.net.ssl | network | high | none | none | unchanged | none | high | none |
CVE-2026-47010 | 3.7 | client-libs | javax.imageio | network | high | none | none | unchanged | none | low | none |
CVE-2026-47013 | 5.3 | javafx | graphics | network | low | none | none | unchanged | none | none | low |
CVE-2026-47021 | 5.3 | client-libs | 2d | network | low | none | none | unchanged | none | none | low |
CVE-2026-47027 | 5.3 | security-libs | java.security | network | low | none | none | unchanged | none | none | low |
CVE-2026-47059 | 5.9 | client-libs | 2d | network | high | none | none | unchanged | none | none | low |
CVE-2026-47063 | 7.5 | security-libs | java.security | network | low | none | none | unchanged | none | high | none |
CVE-2026-60147 | 6.5 | security-libs | java.security | network | low | none | none | unchanged | low | low | none |
5. Resolved Issues
Liberica NIK issues
This is the list of Liberica NIK issues fixed in this release.
| Issue ID | Summary |
|---|---|
GR-51123 | Support Native Image JFR and heap dumps on Windows |
GR-70732 | Backport to 25.0: Fix PyMapping_(Items/Keys/Values) with dict subclasses |
GR-70900 | Backport to 25.0.1: Ensurepip should not patch pip. |
GR-71149 | Add API to control which bootstrap methods are allowed to be executed at build time |
GR-71390 | Backport to 25.0: Reduce image size when using JFR. |
GR-71391 | Backport to 25.0: Reduce default JFR global buffer size to lower footprint. |
GR-72133 | Backport to 25.0: Add missing O_* posix constants |
GR-72135 | Backport to 25.0: Unify and fix codec error handlers |
GR-72435 | Backports : bulk native image fixes and optimizations. |
GR-72458 | Backport to 25.0: Notify inliner when a call target is specialized. |
GR-72458 | Backport to 25.0: Notify inliner when a call target is specialized |
GR-72571 | Backport to 25.0: Transient aux-engine-cache test failure. |
GR-72639 | Backport to 25.0: Implement ByteArrayWasmMemory#asByteBuffer. |
GR-72648 | Backport to 25.0: Remove faulty assertion in Truffle call target splitting. |
GR-72665 | Backport to 25.0: TruffleString: Fix wrong assertion in TransCodeIntlNode. |
GR-72889 | [GR-73368] Update labsjdk to 25.0.3+4-jvmci-b01 |
GR-72889 | Update labsjdk to 25.0.3+2-jvmci-b01 |
GR-72889 | Update labsjdk to 25.0.3+6-jvmci-b01 |
GR-72889 | Update labsjdk to 25.0.3+7-jvmci-b01 |
GR-72889 | Update labsjdk to 25.0.3+9-jvmci-b01 |
GR-72894 | Backport to 25.0: Improve reflection registration in extension layers |
GR-72939 | Backport to 25.0.3: Upgrading Node.js version used by graal-nodejs to 22.22.0. |
GR-73049 | Backport to 25.0: Race conditions in JfrRecurringCallbackExecutionSampler. |
GR-73089 | Backport to 25.0: TRegex: fix bugs uncovered by latest fuzzing round. |
GR-73112 | Backport to 25.0 : make PreserveOptionsSupport.registerType public |
GR-73119 | Remove support for darwin/amd64 CI jobs. |
GR-73285 | Backport to 25.0: Ensure that all isolates see a consistent global state. |
GR-73311 | [GR-73316] Backport to 25.0: Interop improvements. |
GR-73341 | Backport to 25.0: Allow generation of SSE V128_DOUBLE stores |
GR-73372 | Backport to 25.0: Don’t translate UnsupportedOperationException to UnsupportedMessageException for ProxyExecutable. |
GR-73379 | Backport to 25.0: Don’t return Number objects directly to host if they are also TruffleObject objects. |
GR-73399 | Backport to 25.0: Remove infrequent fast paths from list creation |
GR-73449 | Backport to 25.0: TRegex: sync OracleDB flavor with upstream update to Unicode version 17 |
GR-73523 | Backport to 25.0: Fix PE bailout in eval(). |
GR-73535 | Backport to 25.0: Disable transiently failing Windows jobs. |
GR-73639 | Backport to 25.0: Prevent constant folding of elements that should not be reflectively accessible |
GR-73806 | Backport to 25.0: An error occurred while writing the heap dump (darwin-aarch64) |
GR-73812 | Backport to 25.0: Fix simplification of x < x + a |
GR-73891 | Backport to 25.0: Fix complex add/sub handling of negative zero |
GR-73934 | Backport to 25.0: Race condition in ThreadStatusTransition.fromNativeToJava(…). |
GR-74174 | Fix missing reflection registration for LocaleDisplayNamesImpl constructor. |
GR-74224 | Backport to 25.0: Restrict Chrome Inspector to localhost. |
GR-74228 | Backport to 25.0: Add callback-based engine cache persistence API |
GR-74299 | Backport to 25.0: Fix missing reflection registration for ICU4J. |
GR-74369 | Backport to 25.0: Fix resource tracing bugs with the JVMTI tracer. |
GR-74407 | Backport to 25.0: Fix groovy substitutions for Groovy 5+. |
GR-74942 | Backport to 25.0: Ensure ArchiveSupport extracts to intended directory |
GR-75014 | Mask indexed store addresses. |
GR-75058 | Ensure that WASI does not follow symlinks out of preopened dirs. |
GR-75171 | Backport to 25.0: Omit statically required modules from the native image builder module path. |
GR-75182 | Backport to 25.0: Create dummy source with non-zero line number. |
GR-75268 | Backport to 25.0: TRegex: escape Truffle Source name in TRegexExecutorRootNode.toString. |
GR-75412 | Tighten MethodHandleNode type guard |
GR-75571 | Fix Long.MIN_VALUE < normalizeCompare(a, b) folding |
GR-75577 | NonmovableArrays: use word to compute offsets from indexes. |
GR-75580 | Remove NO_TRANSITION from dlsym(…) |
GR-75584 | Fix platform-specific logic in attachHelper.c |
GR-75750 | Fix constructor invokespecial receiver validation |
GR-75750 | Fix method handle casts and constructor invokespecial receiver validation |
GR-75755 | Initialize JDK Password ConsoleHolder at run time. |
GR-76386 | Move 'native-image-utils extract-sbom' to CE |
6. Upgrading to the New Version
To keep your Liberica NIK up-to-date and secure, always upgrade to the newest available version once it is released. To upgrade, install the new version over the previous one. For the installation instructions, see Liberica NIK Installation Guide.