Liberica JDK 17.0.1+12 Release Notes
The full version string for this update release is 17.0.1+12. The version number is 17.
Liberica JDK 17.0.1+12
Liberica is a certified, Java SE 17-compliant distribution of OpenJDK 17 which works on server (Linux x86_64, Linux ARM64, Solaris SPARC, Solaris x64, Windows 64), desktop (Windows 64, Windows 32, Mac, Linux x86_64), and embedded devices (Linux ARM64, Linux ARMv7, including Raspberry Pi 2 & 3 (ARMv6 hardfloat)). It has the following notable additions:
- Linux x86_64 version contains experimental support for ZGC.
- Linux x86_64, ARMv8 and ARMv7 distributions include a choice of Client VM, Server VM and Minimal VM.
- Alpine Linux x86_64 version is build with musl support.
- Windows x86_64, Windows x86, Windows ARMv8, Mac, Linux x86_64, Linux x86 and Linux ARMv7 distributions contain OpenJFX 17.
- Linux ARMv7 distribution contains Device IO API compiled for Raspberry Pi.
Please refer to the Oracle JDK 17.0.1 release notes for further information on JDK 17 features. This document further outlines the peculiarities of Liberica distribution as compared to Oracle JDK 17 distribution.
Supported Server and Desktop configurations
Liberica is supported on the following OSes:
- Ubuntu Linux 16.04, 18.04, 20.04 (x86, x86_64, ARMv7, ARMv8)
- Debian Linux 8, 9, 10 (x86, x86_64, ARMv7, ARMv8)
- Red Hat, Oracle Linux and CentOS 8x, 6.x, 7.x (x86, x86_64, ARMv7, ARMv8)
- Alpine Linux 3.7+ (x86_64, ARMv8)
- SUSE Linux Enterprise 12, 15 and tumbleweed (x86_64, ARMv8)
- Apple macOS 10.11+ (x86_64, ARMv8)
- Microsoft Windows 2019, Windows 2016, Windows 2012 R2, Windows 10, Windows 8, Windows 7 (x86, x86_64, ARMv8)
It is also known to work on other Linux distributions and Windows versions.
Note: The minimum supported Linux kernel version is 2.6.18 and GLIBC version 2.6. LibericaFX works on all supported Ubuntu versions, Red Hat Linux family starting from 7.x and SUSE versions with GTK3 backend.
Supported Embedded configurations
Liberica is tested and certified on Raspberry Pi 2, 3 and 4 running the following OSes:
- Raspbian OS (armhf)
- OpenSUSE (armv8)
It is also known to work with Debian (armhf) and Ubuntu (armhf).
Liberica JDK 17 distribution
Liberica JDK 17 are distributed as .rpm, .zip, .deb and .tar.gz packages. Please select the one which is most appropriate for your purposes.
Liberica JDK 17 introduced all new features supported by OpenJDK 17.
With the introduction of the Jigsaw feature in JDK 9 and Minimal VM it is now possible to create a Runtime that is sufficient to run your application and trim down the size of the Runtime. To generate a Runtime with just the Minimal VM, add --vm=minimal to jlink options.
Liberica JDK continues to provide support for AOT and Graal JIT. Since in OpenJDK 17 builds these features are deemed experimental and deprecated, it is recommended to compile native executables with Liberica Native Image Kit to avoid errors.
By default, the Liberica uses Server VM. Server VM and Client VM can be enabled with -server and -client command line options, respectively. In case the deployment requires to minimize the footprint, it may be beneficial to use Minimal VM, which emphasises on a minimal footprint. It has C1 JIT compiler only, Serial GC and no serviceability features.
LibericaFX for the Raspberry Pi
Liberica JDK 17 come with a bundled LibericaFX implementation, which is based on OpenJFX. The following tables lists Java FX modules status of Liberica distribution
- Java FX Graphics - works.
- Java FX Controls - works.
- Java FX Media - does not work.
- Java FX Webkit - does not work.
The following pipelines are known to work: EGL, SW (direct framebuffer) and GTK. By default, Liberica tries to use the accelerated EGL pipeline, which requires the presence of EGL libraries. If they are not found, the implementation falls back to software rendering.
Use the following command line options to specify the rendering pipeline:
- -Dprism.order=sw forces the use of software rendering pipeline. *
- -Dprism.order=es2 forces the use of EGL pipeline and hardware acceleration. *
- -Djavafx.platform=gtk if you would like to launch a LibericaFX application using Liberica from X11.
* Not supported on Raspberry Pi 4.
Please refer to the following wiki for more information.
Device IO API for the Raspberry Pi
Liberica JDK 17 comes with a bundled OpenJDK Device I/O (DIO) API implementation module. DIO provides a Java API for accessing Raspberry PI GPIO pins and for communicating with peripheral devices:
- General Purpose Input/Output (GPIO).
- Inter-Integrated Circuit Bus (I2C), Serial Peripheral Interface (SPI).
- Universal Asynchronous Receiver/Transmitter (UART).
Please refer to the following wiki for more information.
BellSoft Liberica follows the security baselines for Oracle Java SE. Please refer to the Oracle documentation for a list of issues fixed in a given release.
LibericaFX and EGL on Raspbian
As of 2017, the default location of Broadcom libEGL.so and libGLESv2.so has changed in Raspbian OS. If you’d like to leverage hardware EGL acceleration available from Broadcom video drivers in LibericaFX while running a recent Raspbian OS, run the following command:
cd /opt/vc/lib sudo ln -s libbrcmEGL.so libEGL.so sudo ln -s libbrcmGLESv2.so libGLESv2.so
|8273754||Re-introduce Automatic-Module-Name in empty jars|
|8273358||macOS Monterey does not have the font Times needed by Serif|
|8273150||Revert “8225083: Remove Google certificate that is expiring in December 2021”|
|8269993||[Test]: java/net/httpclient/DigestEchoClientSSL.java contains redundant @run tags|
|8272581||sun/security/pkcs11/Provider/MultipleLogins.sh fails after JDK-8266182|
|8266182||Automate manual steps listed in the test jdk/sun/security/pkcs12/ParamsTest.java|
|8269934||RunThese24H.java failed with EXCEPTION_ACCESS_VIOLATION in java_lang_Thread::get_thread_status|
|8272806||[macOS] “Apple AWT Internal Exception” when input method is changed|
|8270344||Session resumption errors|
|8269897||Shenandoah: Resolve UNKNOWN access strength, where possible|
|8272700||[macos] Build failure with Xcode 13.0 after JDK-8264848|
|8270137||Kerberos Credential Retrieval from Cache not Working in Cross-Realm Setup|
|8272472||StackGuardPages test doesn’t build with glibc 2.34|
|8272708||[Test]: Cleanup: test/jdk/security/infra/java/security/cert/CertPathValidator/certification/BuypassCA.java no longer needs ocspEnabled|
|8270096||Shenandoah: Optimize gc/shenandoah/TestRefprocSanity.java for interpreter mode|
|8270094||Shenandoah: Provide human-readable labels for test configurations|
|8269478||Shenandoah: gc/shenandoah/mxbeans tests should be more resilient|
|8265776||Improve Stream handling for SSL|
|8272602||[macos] not all KEY_PRESSED events sent when control modifier is used|
|8272326||java/util/Random/RandomTestMoments.java had two Gaussian fails|
|8248899||security/infra/java/security/cert/CertPathValidator/certification/QuoVadisCA.java fails, Certificate has been revoked|
|8270280||security/infra/java/security/cert/CertPathValidator/certification/LetsEncryptCA.java OCSP response error|
|8243543||jtreg test security/infra/java/security/cert/CertPathValidator/certification/BuypassCA.java fails|
|8225083||Remove Google certificate that is expiring in December 2021|
|8272124||Cgroup v1 initialization causes NullPointerException when cgroup path contains colon|
|8272131||PhaseMacroExpand::generate_slow_arraycopy crash when clone null CallProjections.fallthrough_ioproj|
|8271203||C2: assert(iff->Opcode() == Op_If || iff->Opcode() == Op_CountedLoopEnd || iff->Opcode() == Op_RangeCheck) failed: Check this code when new subtype is added|
|8271276||C2: Wrong JVM state used for receiver null check|
|8268963||[IR Framework] Some default regexes matching on PrintOptoAssembly in IRNode.java do not work on all platforms|
|8271925||ZGC: Arraycopy stub passes invalid oop to load barrier|
|8268019||C2: assert(no_dead_loop) failed: dead loop detected|
|8270098||ZGC: ZBarrierSetC2::clone_at_expansion fails with “Guard against surprises” assert|
|8261088||Repeatable annotations without @Target cannot have containers that target module declarations|
|8272332||–with-harfbuzz=system doesn’t add -lharfbuzz after JDK-8255790|
|8271589||fatal error with variable shift count integer rotate operation.|
|8271730||Client authentication using RSASSA-PSS fails after correct certificate requests|
|8267712||Better LDAP reference processing|
|8263314||Enhance XML Dsig modes|
|8266103||Better specified spec values|
|8266689||More Constrained Delegation|
|8268427||Improve AlgorithmConstraints:checkAlgorithm performance|
|8269851||OperatingSystemMXBean getProcessCpuLoad reports incorrect process cpu usage in containers|
|8267625||AARCH64: typo in LIR_Assembler::emit_profile_type|
|8269624||Enhance method selection support|
|8269574||C2: Avoid redundant uncommon traps in GraphKit::builtin_throw() for JVMTI exception events|
|8268261||C2: assert(n != __null) failed: Bad immediate dominator info.|
|8225082||Remove IdenTrust certificate that is expiring in September 2021|
|8271335||Updating RE Configs for BUILD REQUEST 17.0.1+4|
|8267666||Add option to jcmd GC.heap_dump to use existing file|
|8269882||stack-use-after-scope in NewObjectA|
|8263531||Remove unused buffer int|
|8262731||[macOS] Exception from “Printable.print” is swallowed during “PrinterJob.print”|
|8269763||The JEditorPane is blank after JDK-8265167|
|8265580||Enhanced style for RTF kit|
|8265574||Improve handling of sheets|
|8266115||More Manifest Jar Loading|
|8268199||Correct certificate requests|
|8268500||Better specified ParameterSpecs|
|8268193||Improve requests of certificates|
|8268205||Enhance DTLS client handshake|
|8269618||Better session identification|
|8268506||More Manifest Digests|
|8269297||Bump version numbers for JDK 17.0.1|
|8267735||Better BMP support|
|8267086||ArrayIndexOutOfBoundsException in java.security.KeyFactory.generatePublic|
|8266137||Improve Keystore integrity|
|8266097||Better hashing support|
|8266109||More Resilient Classloading|
|8267729||Improve TLS client handshaking|
|8265167||Richer Text Editors|