The full version string for this update release is 8u372-b7. The version number is 8.
Liberica JDK 8u372+7
Please refer to the Oracle JDK 8 release notes for further information on JDK 8 features. This document further outlines the peculiarities of Liberica distribution as compared to Oracle JDK 8 distribution.
Supported configurations
Supported Server and Desktop configurations
Liberica is supported on the following OSes:
- Ubuntu Linux 14.04, 16.04, 18.04 (x86_64, x86, ARMv8*)
- Debian Linux 8, 9 (x86_64, x86, ARMv8*)
- Red Hat, Oracle Linux and CentOS 5.5+, 6.x, 7.x (x86_64, x86, ARMv8*)
- Alpine Linux x86_64 version is build with musl support.
- SUSE Linux Enterprise 12, 15 and tumbleweed (x86_64, ARMv8*)
- Apple macOS 10.11+ (64 bit only)
- Solaris 10.9+ (SPARC and x86_64)*
- Microsoft Windows 2019, Windows 2016, Windows 2012 R2, Windows 10, Windows 8, Windows 7 (32 and 64 bit)
* - version doesn't have Client VM
Note: The minimum supported Linux kernel version is 2.6.18 and GLIBC version 2.5. LibericaFX works on all supported Ubuntu versions, Red Hat Linux family starting from 7.x and SUSE versions with GTK3 backend.
Liberica JDK and JRE distribution
Liberica JDK and JRE are distributed as .rpm, .zip, .deb and .tar.gz packages. Please select the one which is most appropriate for your purposes.
- Use Liberica JDK if your application requires javac or other tools and services not present in a JRE, or you would like to use jlink to create a trimmed-down version of the Java Runtime for your particular needs.
- Use Liberica JRE for all other purposes.
Liberica 8 introduces all new features supported by OpenJDK 8 on Linux x64
By default, the Liberica uses Server VM. Server VM and Client VM can be enabled with -server and -client command line options, respectively. In case the deployment requires to minimize the footprint, it may be beneficial to use Minimal VM, which emphasises on a minimal footprint. It has C1 JIT compiler only, Serial GC and no serviceability features. In a JRE it can be enabled in runtime with -minimal command line option.
Linux x86_64, Linux x86, Apple macOS x86_64, Microsoft Windows x86_64, Microsoft Windows x86 versions of Liberica 8 also contains LibericaFX. On macOS, LibericaFX works starting with 10.10+.
Security Baselines
BellSoft Liberica follows the security baselines for Oracle Java SE. Please refer to the Oracle documentation for a list of issues fixed in a given release.
CVEs
This is the list of the security issues fixed in this release. CVSS scores are provided using the CVSS version 3.1 scoring system.
| CVE ID | Score | Component | Module | Attack vector | Complexity | Privileges | User interaction | Scope | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|---|---|---|---|---|---|
| CVE-2023-21930 | 7.4 | security-libs | javax.net.ssl | network | high | none | none | unchanged | high | high | none |
| CVE-2023-21954 | 5.9 | hotspot | gc | network | high | none | none | unchanged | high | none | none |
| CVE-2023-21967 | 5.9 | security-libs | javax.net.ssl | network | high | none | none | unchanged | none | none | high |
| CVE-2023-21939 | 5.3 | client-libs | javax.swing | network | low | none | none | unchanged | none | low | none |
| CVE-2023-21938 | 3.7 | core-libs | java.lang | network | high | none | none | unchanged | none | low | none |
| CVE-2023-21937 | 3.7 | core-libs | java.net | network | high | none | none | unchanged | none | low | none |
| CVE-2023-21968 | 3.7 | core-libs | java.nio | network | high | none | none | unchanged | none | low | None |
Issues fixed
| Issue | Description |
|---|---|
| JDK-8299129 | Enhance NameService lookups |
| JDK-8298667 | Improved path handling |
| JDK-8298310 | Enhance TLS session negotiation |
| JDK-8298191 | Enhance object reclamation process |
| JDK-8297371 | Improve UTF8 representation redux |
| JDK-8296832 | Improve Swing platform support |
| JDK-8296700 | Improve String platform support |
| JDK-8296692 | Improve String platform support |
| JDK-8296684 | Improve String platform support |
| JDK-8296676 | Improve String platform support |
| JDK-8295304 | Runtime support improvements |
| JDK-8294474 | Better AES support |
| JDK-8288436 | Improve Xalan supports |
| JDK-8287404 | Improve ping times |
| JDK-8263404 | RsaPrivateKeySpec is always recognized as RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec |
| JDK-8305113 | (tz) Update Timezone Data to 2023c |
| JDK-8304053 | Revert os specific stubs for SystemMetrics |
| JDK-8303828 | [Solaris] Broken jdk8u build after JDK-8266391 |
| JDK-8245654 | Add Certigna Root CA |
| JDK-8248899 | security/infra/java/security/cert/CertPathValidator/certification/QuoVadisCA.java fails, Certificate has been revoked |
| JDK-8243543 | jtreg test security/infra/java/security/cert/CertPathValidator/certification/BuypassCA.java fails |
| JDK-8303408 | [AIX] Broken jdk8u build after JDK-8266391 |
| JDK-8275535 | Retrying a failed authentication on multiple LDAP servers can lead to users blocked |
| JDK-8301246 | NPE in FcFontManager.getDefaultPlatformFont() on Linux without installed fontconfig |
| JDK-8301143 | [TESTBUG] jfr/event/sampling/TestNative was backported to JDK8u without proper native wrapper |
| JDK-8270317 | Large Allocation in CipherSuite |
| JDK-8301760 | Fix possible leak in SpNegoContext dispose |
| JDK-8287463 | JFR: Disable TestDevNull.java on Windows |
| JDK-8282947 | JFR: Dump on shutdown live-locks in some conditions |
| JDK-8142540 | [TEST_BUG] Test sun/awt/dnd/8024061/bug8024061.java fails on ubuntu |
| JDK-8137101 | [TEST_BUG] javax/swing/plaf/basic/BasicHTML/4251579/bug4251579.java failure due to timing |
| JDK-7124238 | [macosx] Font in BasicHTML document is bigger than it should be |
| JDK-8282511 | Use fixed certificate validation date in SSLExampleCert template |
| JDK-8299445 | EndingDotHostname.java fails because of compilation errors |
| JDK-6734341 | REGTEST fails: SelectionAutoscrollTest.html |
| JDK-8156581 | Cleanup of ProblemList.txt |
| JDK-8156579 | Two JavaBeans tests failed |
| JDK-8205959 | Do not restart close if errno is EINTR |
| JDK-8298027 | Remove SCCS id's from awt jtreg tests |
| JDK-8301620 | [8u] some shell tests are passed but have unexpected operator errors |
| JDK-8287109 | Distrust.java failed with CertificateExpiredException |
| JDK-7124381 | DragSourceListener.dragDropEnd() never been called on completion of dnd operation |
| JDK-8301550 | [8u] Enable additional linux build testing in GitHub |
| JDK-8177560 | @headful key can be removed from the tests for JavaSound |
| JDK-8280048 | Missing comma in copyright header |
| JDK-8233570 | [TESTBUG] HTMLEditorKit test bug5043626.java is failing on macos |
| JDK-8287741 | Fix of JDK-8287107 (unused cgv1 freezer controller) was incomplete |
| JDK-8301332 | [8u] Fix writing of test files after the cgroups v2 backport |
| JDK-8287107 | CgroupSubsystemFactory.setCgroupV2Path asserts with freezer controller |
| JDK-8275650 | Problemlist java/io/File/createTempFile/SpecialTempFile.java for Windows 11 |
| JDK-8283606 | Tests may fail with zh locale on MacOS |
| JDK-8075964 | Test java/awt/Mouse/TitleBarDoubleClick/TitleBarDoubleClick.html fails intermittently with timeout error |
| JDK-8239827 | The test OpenByUNCPathNameTest.java should be changed to be manual |
| JDK-8042098 | [TESTBUG] Test sun/java2d/AcceleratedXORModeTest.java fails on Windows |
| JDK-7001973 | java/awt/Graphics2D/CopyAreaOOB.java fails |
| JDK-8039888 | [TEST_BUG] keyboard garbage after javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/WrongAltProcessing.java |
| JDK-8196467 | javax/swing/JInternalFrame/Test6325652.java fails |
| JDK-8159135 | [PIT] javax/swing/JMenuItem/8152981/MenuItemIconTest.java always fail |
| JDK-8293767 | AWT test TestSinhalaChar.java has old SCCS markings |
| JDK-8301122 | [8u] Fix unreliable vs2010 download link |
| JDK-8293540 | [Metrics] Incorrectly detected resource limits with additional cgroup fs mounts |
| JDK-8282398 | EndingDotHostname.java test fails because SSL cert expired |
| JDK-8292541 | [Metrics] Reported memory limit may exceed physical machine memory |
| JDK-8300119 | CgroupMetrics.getTotalMemorySize0() can report invalid results on 32 bit systems |
| JDK-8065422 | Trailing dot in hostname causes TLS handshake to fail with SNI disabled |
| JDK-8300014 | Some backports placed the tests in the wrong location |
| JDK-8203485 | [freetype] text rotated on 180 degrees is too narrow |
| JDK-8299439 | java/text/Format/NumberFormat/CurrencyFormat.java fails for hr_HR |
| JDK-8299483 | ProblemList java/text/Format/NumberFormat/CurrencyFormat.java |
| JDK-8289695 | [TESTBUG] TestMemoryAwareness.java fails on cgroups v2 and crun |
| JDK-8299804 | Fix non-portable code in hotspot shell tests in 8u |
| JDK-8296239 | ISO 4217 Amendment 174 Update |
| JDK-8294307 | ISO 4217 Amendment 173 Update |
| JDK-8289549 | ISO 4217 Amendment 172 Update |
| JDK-8293472 | Incorrect container resource limit detection if manual cgroup fs mounts present |
| JDK-8299548 | Fix hotspot/test/runtime/Metaspace/MaxMetaspaceSizeTest.java in 8u |
| JDK-8283277 | ISO 4217 Amendment 171 Update |
| JDK-8229182 | [TESTBUG] runtime/containers/docker/TestMemoryAwareness.java test fails on SLES12 |
| JDK-8297996 | [8u] generated images are broken due to renaming of MSVC runtime DLL's |
| JDK-8284977 | MetricsTesterCgroupV2.getLongValueEntryFromFile fails when named value doesn't exist |
| JDK-8292083 | Detected container memory limit may exceed physical machine memory |
| JDK-8234484 | Add ability to configure third port for remote JMX |
| JDK-8284102 | [TESTBUG] [11u] Retroactively add regression test for JDK-8272124 |
| JDK-8284756 | [11u] Remove unused isUseContainerSupport in CgroupV1Subsystem |
| JDK-8254717 | isAssignableFrom checks in KeyFactorySpi.engineGetKeySpec appear to be backwards |
| JDK-8266391 | Replace use of reflection in jdk.internal.platform.Metrics |
| JDK-8252957 | Wrong comment in CgroupV1Subsystem::cpu_quota |
| JDK-8291570 | [TESTBUG] Part of JDK-8250984 absent from 11u |
| JDK-8262379 | Add regression test for JDK-8257746 |
| JDK-8254001 | [Metrics] Enhance parsing of cgroup interface files for version detection |
| JDK-8253797 | [cgroups v2] Account for the fact that swap accounting is disabled on some systems |
| JDK-8253939 | [TESTBUG] Increase coverage of the cgroups detection code |
| JDK-8245543 | Cgroups: Incorrect detection logic on some systems (still reproducible) |
| JDK-8253435 | Cgroup: 'stomping of _mount_path' crash if manually mounted cpusets exist |
| JDK-8252359 | HotSpot Not Identifying it is Running in a Container |
| JDK-8278951 | containers/cgroup/PlainRead.java fails on Ubuntu 21.10 |
| JDK-8196196 | Headful tests should not be run in headless mode |
| JDK-8197408 | Bad pointer comparison and small cleanup in os_linux.cpp |
| JDK-8239559 | Cgroups: Incorrect detection logic on some systems |
| JDK-8072770 | [TESTBUG] Some Introspector tests fail with a Java heap bigger than 4GB |
| JDK-8240189 | [TESTBUG] Some cgroup tests are failing after JDK-8231111 |
| JDK-8244500 | jtreg test error in test/hotspot/jtreg/containers/docker/TestMemoryAwareness.java |
| JDK-8239785 | Cgroups: Incorrect detection logic on old systems in hotspot |
| JDK-8298307 | Enable hotspot/tier1 for 32-bit builds in GHA for 8u |
| JDK-8237479 | 8230305 causes slowdebug build failure |
| JDK-8253727 | [cgroups v2] Memory and swap limits reported incorrectly |
| JDK-8253714 | [cgroups v2] Soft memory limit incorrectly using memory.high |
| JDK-8295952 | Problemlist existing compiler/rtm tests also on x86 |
| JDK-8296957 | One more cast in SAFE_SIZE_NEW_ARRAY2 |
| JDK-8294767 | 8u contains two copies of test/../FileUtils.java, one uses JDK9+ features |
| JDK-8296496 | Overzealous check in sizecalc.h prevents large memory allocation |
| JDK-8284690 | [macos] VoiceOver : Getting java.lang.IllegalArgumentException: Invalid location on Editable JComboBox |
| JDK-8257620 | Do not use objc_msgSend_stret to get macOS version |
| JDK-8296632 | Write a test to verify the content change of TextArea sends TextEvent |
| JDK-6829250 | Reg test: java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails in Windows |
| JDK-8296485 | BuildEEBasicConstraints.java test fails with SunCertPathBuilderException |
| JDK-8296480 | java/security/cert/pkix/policyChanges/TestPolicy.java is failing |
| JDK-8231111 | Cgroups v2: Rework Metrics in java.base so as to recognize unified hierarchy |
| JDK-8275713 | TestDockerMemoryMetrics test fails on recent runc |
| JDK-8228585 | jdk/internal/platform/cgroup/TestCgroupMetrics.java - NumberFormatException because of large long values (memory limit_in_bytes) |
| JDK-8226236 | win32: gc/metaspace/TestCapacityUntilGCWrapAround.java fails |
| JDK-8286624 | Regression Test CoordinateTruncationBug.java fails on OL8.3 |
| JDK-8295982 | Failure in sun/security/tools/keytool/WeakAlg.java - ks: The process cannot access the file because it is being used by another process |
| JDK-8247676 | vcruntime140_1.dll is not needed on 32-bit Windows |
| JDK-8242468 | VS2019 build missing vcruntime140_1.dll |
| JDK-8241087 | Build failure with VS 2019 (16.5.0) due to C2039 and C2873 |
| JDK-8297329 | [8u] hotspot needs to recognise VS2019 |
| JDK-8295322 | Tests for JDK-8271459 were not backported to 11u |
| JDK-8230305 | Cgroups v2: Container awareness |
| JDK-8216366 | Add rationale to PER_CPU_SHARES define |
| JDK-8229202 | Docker reporting causes secondary crashes in error handling |
| JDK-8232207 | Linux os::available_memory re-reads cgroup configuration on every invocation |
| JDK-8254997 | Remove unimplemented OSContainer::read_memory_limit_in_bytes |
| JDK-8297739 | Bump update version of OpenJDK: 8u372 |
| JDK-8089986 | Menu beeps when mnemonics is used |
| JDK-8149508 | Performance issue when scrolling ListView due to excess CSS processing |
| JDK-8257758 | Allow building of JavaFX native libs for Apple Silicon |
| JDK-8257895 | Allow building of JavaFX media libs for Apple Silicon |
| JDK-8264536 | Building OpenJFX on Apple AARCH64 not possible |
| JDK-8266554 | Change default macOS min version for aarch64 to 11.0 |
| JDK-8276174 | JavaFX build fails on macOS aarch64 |
| JDK-8282386 | JavaFX media stubs rely on libav.org |
| JDK-8284662 | [Win][Accessibility][ListCell] Screen reader fails to read ListView/ComboBox item count if > 100 |
| JDK-8293375 | add_definitions USE_SYSTEM_MALLOC when USE_SYSTEM_MALLOC is ON |
| JDK-8294400 | Provide media support for libavcodec version 59 |
| JDK-8295755 | Update SQLite to 3.39.4 |
| JDK-8298167 | Opacity in WebView not working anymore |
| JDK-8299272 | Update copyright header for files modified in 2022 |
| JDK-8299781 | Improve JFX navigation |
| JDK-8299977 | Update WebKit to 615.1 |
| JDK-8300954 | HTML default Range input control not rendered |
| JDK-8301022 | Video distortion is observed while playing youtube video |
| JDK-8301712 | [linux] Crash on exit from WebKit 615.1 |
| JDK-8302294 | Cherry-pick WebKit 615.1 stabilization fixes |
| JDK-8302684 | Cherry-pick WebKit 615.1 stabilization fixes (2) |
| JDK-8303217 | Webview loaded webpage is not showing play, volume related buttons for embeded Audio/Video elements |
| JDK-8303501 | Unable to navigate to relative URLs after fix for JDK-8299781 |