Enhance LDAP Lookups
October 2026 Quarterly Update Release Notes
Table of Contents
- Release Details
- What’s New
- Supported Platforms
- Fixed Issues
- Third Party Licenses
October 20, 2026 - Revision 1.0
Release Details
This release is the October 2026 quarterly update release for Azul Zulu Builds of OpenJDK version 27, 25, 21, 17, 11, 8, 7, and 6.
The following table describes which Azul Zulu versions are published with this release.
Azul Zulu Version (*) |
Update Type (**) |
JDK VersionThe JDK version that is used in this release of Azul Zulu. |
Based onThe previous version of Azul Zulu that was used as the basis for the current version. |
JavaFX VersionThe version of JavaFX that is included in this release of Azul Zulu. JavaFX is available in the bundles with the |
|
|---|---|---|---|---|---|
Azul Zulu Version |
JDK Version |
||||
27.30.105 (CA) |
PSU |
27.0.1+9 |
27.28 |
27.0.0+35 |
27.0.1+101 |
25.37.112 (SA) |
CPU |
25.0.4.1.101+1 |
25.36 |
25.0.4.1.1+1 |
25.0.4.0.101+102 |
25.38.105 (CA) |
PSU |
25.0.5+8 |
25.37 |
25.0.4.1.101+1 |
25.0.5+100 |
21.53.110 (SA) |
CPU |
21.0.12.1.101+1 |
21.52 |
21.0.12.1+1 |
23.0.8.0.101+101 |
21.54.105 (CA) |
PSU |
21.0.13+9 |
21.53 |
21.0.12.1.101+1 |
23.0.9+102 |
17.69.108 (SA) |
CPU |
17.0.20.1.101+1 |
17.68 |
17.0.20.1+1 |
22.0.10.0.101+101 |
17.70.107 (CA) |
PSU |
17.0.21+9 |
17.69 |
17.0.20.1.101+1 |
22.0.11+103 |
11.91.108 (SA) |
CPU |
11.0.32.1.101+1 |
11.90 |
11.0.32.1+1 |
19.0.16.0.101+101 |
11.92.105 (CA) |
PSU |
11.0.33+9 |
11.91 |
11.0.32.1.101+1 |
19.0.17+102 |
8.97.0.108 (SA) |
CPU |
8u511-b01 |
8.96 |
8u504-b01 |
8u511-b03 |
8.98.0.105 (CA) |
PSU |
8u512-b08 |
8.97 |
8u511-b01 |
8u512-b02 |
7.89.0.108 (SA) |
CPU |
7u521-b01 |
7.87 |
7u513-b01 |
N/A |
6.83.0.106 (SA) |
CPU |
6b191 |
6.81 |
6b183 |
N/A |
(*) Azul provides two types of distribution packages for each Java version:
-
Subscriber Availability (SA) distributions are tested, certified, and commercially supported Azul Zulu Builds of OpenJDK. Azul ensures that the software that uses the Accessible APIs of the product doesn’t have to include specific licenses and that such a use doesn’t contaminate the code or intellectual property of such software with any license requirements. SA builds may support configurations and features that are unavailable to free users.
-
Community Availability (CA) distributions are Azul Zulu Builds of OpenJDK that are free to download and use.
|
Note
|
Both SA and CA distributions may contain Early Access builds noted with -ea- in their filename. Early Access builds may not be TCK certified.
|
(**) Update type:
-
CPU (Critical Patch Updates) contain fixes to security vulnerabilities and critical bug fixes. Azul Zulu CPU releases are generally based on prior-cycle PSU releases, with only security fixes applied. They provide a low-risk vehicle for the potentially urgent deployment of security fixes when issues of sufficient severity arise. CPU releases are available in SA distributions.
-
PSU (Patch Set Updates) incorporates all fixes in the corresponding CPU, as well as additional non-security bug fixes. Azul Zulu PSU releases incorporate both security fixes and other changes that align the release contents with the associated OpenJDK project quarterly release. PSU releases are available in SA and CA distributions.
What’s New
Azul JDK X-Ray Tool
This update contains an exceptional number of CVEs, which makes now a good time to check your systems for outdated Java versions.
The Azul JDK X-Ray Tool is a single-file script that answers one question: is there a vulnerable Java on this machine? It is not an inventory tool, so it doesn’t report where Java is installed or how much of it there is. Instead, it looks for Java files, first in the standard install locations and, if nothing outdated is found there, on the full disk. This also catches a JDK that was unpacked or bundled by a third-party application.
The tool requires no arguments, no configuration, and no network access. Download the script and run it:
-
Windows:
windows/azul-jdk-xray.ps1(PowerShell 5.1 or later) -
macOS and Linux:
macos-linux/azul-jdk-xray.sh(any POSIX shell)
The tool is hosted on GitHub for full transparency and auditability. As with any script you download, please review it before running it.
Change Related to Intelligence Cloud
The Connected Runtime Service (CRS) embedded agent is being retired from Azul Zulu Builds of OpenJDK, as the separate Azul Intelligence Cloud Agent covers the same use cases more efficiently.
In the July 2026 release, this change was applied to all Azul Zulu PSU configurations. With this release, the same applies to the CPU configurations.
See Using the Azul Intelligence Cloud agent for more information.
Changes in the HTTP Server Behavior
This release includes the following changes in the JDK built-in HTTP server.
sun.net.httpserver.disableHostValidation
HttpServer now accepts only one Host header in HTTP/1.1 requests by default, as required by RFC 9112. Requests with more than one Host header are rejected with a 400 error code. This behavior is controlled by a new system property sun.net.httpserver.disableHostValidation with the default value false.
The previous behavior can be restored by setting the following system property:
-Dsun.net.httpserver.disableHostValidation=true
Changes to XML processing
This release includes the following new or changed system properties.
jdk.xml.enableTemplatesImplDeserialization
Deserializing a TemplatesImpl object through ObjectInputStream.readObject() now throws an UnsupportedOperationException by default. This behavior is controlled by a new system property jdk.xml.enableTemplatesImplDeserialization with the default value false.
The previous behavior can be restored by setting the following system property:
-Djdk.xml.enableTemplatesImplDeserialization=true
jdk.xml.allowNonXSLTSysProps
The XPath system-property() function now throws a TransformerException for property names outside the set defined by XSLT by default. This behavior is controlled by a new system property jdk.xml.allowNonXSLTSysProps with the default value false.
The previous behavior can be restored by setting the following system property:
-Djdk.xml.allowNonXSLTSysProps=true
Changes in RMI Connections
FORWARD_PERMIT in java-rmi.cgi.sh
In Azul Zulu 6, 7, and 8, the jdk/src/solaris/bin/java-rmi.cgi.sh script now denies port forwarding by default, if the script is installed. This behavior is controlled by a new setting FORWARD_PERMIT in the script.
Restoring the previous behavior is discouraged, but it can be restored by adding a new line to the script:
FORWARD_PERMIT=1024-65535
Changes in JavaFX Clipboard Processing
javafx.dnd.deserializeObjectGraph
In builds with FX on macOS, Clipboard.getContent(DataFormat) and Dragboard.getContent(DataFormat) now deserialize only to String or ByteBuffer types by default. This behavior is controlled by a new system property javafx.dnd.deserializeObjectGraph with the default value false.
The previous behavior can be restored by setting the following system property:
-Djavafx.dnd.deserializeObjectGraph=true
Changes in Coordinated Restore at Checkpoint (CRaC)
Coordinated Restore at Checkpoint (CRaC) is an OpenJDK project that allows you to start Java programs with a shorter time to first transaction, combined with less time and resources to achieve full code speed.
Support for Checkpoint After Restore in Warp
CRaC uses a "CRaC engine" to record the state of the Java process at checkpoint and to reconstruct it on restore. Azul Zulu provides two engines for Linux:
-
criuengine: based on CRIU (Checkpoint/Restore In Userspace). It requires elevated privileges, for example root through the SUID bit or the
CHECKPOINT_RESTOREandSYS_PTRACEcapabilities in a container. Enable it with-XX:CRaCEngine=criuengine. -
Warp: an engine independent of CRIU that requires no additional privileges for checkpoint or restore. Enable it with
-XX:CRaCEngine=warp.
For more information about the engines, see CRaC Engines in the CRaC documentation.
Starting with this release, Warp supports checkpointing again after a restore, which criuengine already supported.
|
Note
|
If you use direct mapping of the checkpoint image (-XX:CRaCEngineOptions=direct_map=true, the default mode), you must preserve the whole chain of images. For example, if you checkpointed to /path/to/image1 and restored from it without -XX:CRaCEngineOptions=direct_map=false, you cannot checkpoint to /path/to/image1 again. That would overwrite the old image, on which the new one depends because of the direct mapping. Instead, checkpoint to /path/to/image2. When you restore from /path/to/image2, /path/to/image1 must still exist in the same location. This restriction applies to both Warp and criuengine.
|
Notification of Changes
Reduced/Streamlined Testing
In this release, Azul is reducing and/or streamlining the testing of Zulu builds on certain End-of-Life operating systems. Rest assured, Azul will continue accepting support requests from these platforms, and customers will continue to be fully supported. It does mean that testing on these platforms can be reduced, streamlined, or deprioritized. If you continue to use Zulu on any of these platforms, please let us know by emailing us at [email protected].
The following platforms are affected and are no longer listed in the Supported Platforms table:
-
Debian 11, for which the LTS support ended on August 31, 2026.
-
Ubuntu 18.04 and Ubuntu 20.04, for which the standard support ended.
-
Alpine Linux versions older than 3.24, as all earlier versions reached their end of life. Azul now tests Alpine Linux 3.24 for all Zulu versions.
-
Fedora 43, replaced by Fedora 44, which is the version Azul tests.
-
CentOS Stream versions older than CentOS Stream 9, which is the version Azul tests.
-
macOS versions older than macOS 15.
Supported Platforms
This section provides information about the operating systems that are supported in this release of Azul Zulu.
Azul Zulu Builds of OpenJDK Without and With OpenJFX
Some versions of Azul Zulu are available in different packages for specific platforms, as indicated in this overview table with:
-
: Build of OpenJDK without OpenJFX. -
: Build of OpenJDK without and with OpenJFX.
|
Note
|
The list of supported configurations and platform includes, but is not limited to, the table below. Don’t hesitate to contact Support if you have issues with Azul Zulu Builds of OpenJDK on any other platform or configuration. |
Operating System |
Azul Zulu Version |
|||||||
|---|---|---|---|---|---|---|---|---|
6 |
7 |
8 |
11 |
17 |
21 |
25 |
27 |
|
Windows Server 2025 |
|
|
|
|
|
|
|
|
Windows Server 2022 |
|
|
|
|
|
|
|
|
Windows Server 2019 |
|
|
|
|
|
|
|
|
Windows Server 2016 |
|
|
|
|
|
|
|
|
Windows 11 |
|
|
|
|
|
|
|
|
Windows (ARM 64-bit) |
||||||||
Windows 11 |
n/a |
n/a |
n/a |
n/a |
|
|
|
|
Linux (x86 32/64-bit) |
||||||||
RHEL 10.x [2]Only available in PSU builds |
|
|
|
|
|
|
|
|
RHEL 9.x |
|
|
|
|
|
|
|
|
RHEL 8.x |
|
|
|
|
|
|
|
|
RHEL 7.x |
n/a |
n/a |
|
|
|
n/a |
n/a |
n/a |
Fedora 44 |
|
|
|
|
|
|
|
|
SLES 16 |
|
|
|
|
|
|
|
|
SLES 15 |
|
|
|
|
|
|
|
|
SLES 12 |
|
|
|
|
|
|
|
|
CentOS Stream 9 |
|
|
|
|
|
|
|
|
Ubuntu 26.04 |
|
|
|
|
|
|
|
|
Ubuntu 24.04 |
|
|
|
|
|
|
|
|
Ubuntu 22.04 |
|
|
|
|
|
|
|
|
Debian 13 |
|
|
|
|
|
|
|
|
Debian 12 |
|
|
|
|
|
|
|
|
Wind River 8.x |
n/a |
|
|
n/a |
n/a |
n/a |
n/a |
n/a |
Alpine Linux 3.24 |
n/a |
n/a |
|
|
|
|
|
|
Wolfi Linux |
n/a |
n/a |
n/a |
n/a |
n/a |
|
|
|
Amazon Linux 2023 |
n/a |
n/a |
|
|
|
|
|
|
Linux (ARM 64-bit) |
||||||||
Ubuntu 26.04 |
n/a |
n/a |
|
|
|
|
|
|
Ubuntu 24.04 |
n/a |
n/a |
|
|
|
|
|
|
Ubuntu 22.04 |
n/a |
n/a |
|
|
|
|
|
|
Debian 13 |
n/a |
n/a |
|
|
|
|
|
|
Debian 12 |
n/a |
n/a |
|
|
|
|
|
|
Alpine Linux 3.24 |
n/a |
n/a |
|
|
|
|
|
|
Wolfi Linux |
n/a |
n/a |
n/a |
n/a |
n/a |
|
|
|
Amazon Linux 2023 |
n/a |
n/a |
|
|
|
|
|
|
Linux with kernel 3.10.x and glibc 2.23
[3]Bundles with the Checkpoint/Restore (with the |
n/a |
n/a |
|
|
n/a |
n/a |
n/a |
n/a |
Linux (ARM 32-bit Hard-Float) |
||||||||
Ubuntu 18.04 [5]Bundles with the C1 compiler were tested on ARMv6/ARMv7/ARMv8 hardware. Bundles with both C1 and C2 compilers were tested on ARMv7/ARMv8 hardware. |
n/a |
n/a |
|
|
|
|
|
n/a |
Raspberry Pi OS 10 (Buster) [5]Bundles with the C1 compiler were tested on ARMv6/ARMv7/ARMv8 hardware. Bundles with both C1 and C2 compilers were tested on ARMv7/ARMv8 hardware. |
n/a |
n/a |
|
|
|
|
|
n/a |
Raspberry Pi OS 9 (Stretch) [5]Bundles with the C1 compiler were tested on ARMv6/ARMv7/ARMv8 hardware. Bundles with both C1 and C2 compilers were tested on ARMv7/ARMv8 hardware. |
n/a |
n/a |
|
|
n/a |
|
|
n/a |
Linux with kernel 3.10.x and glibc 2.9
[5]Bundles with the C1 compiler were tested on ARMv6/ARMv7/ARMv8 hardware. Bundles with both C1 and C2 compilers were tested on ARMv7/ARMv8 hardware.
[8]Bundles with the CRaM (with the |
n/a |
n/a |
|
|
n/a |
|
|
n/a |
Linux (ARM 32-bit Soft-Float) [9]Bundles with the C1 compiler use FPU, if it is present and available, to speed up floating point operations. Bundles with both C1 and C2 compilers require FPU. |
||||||||
Linux with kernel 2.6.34 and glibc 2.5 [10]Bundles with the C1 compiler. Tested on ARMv5 hardware. |
n/a |
n/a |
|
|
n/a |
n/a |
n/a |
n/a |
Debian 7 Wheezy [11]Bundles with the C1 compiler were tested on ARMv6 and ARMv7 hardware. Bundles with both C1 and C2 compilers were tested on ARMv7 hardware. |
n/a |
n/a |
|
|
n/a |
n/a |
n/a |
n/a |
Linux with kernel 3.10.x and glibc 2.9 [11]Bundles with the C1 compiler were tested on ARMv6 and ARMv7 hardware. Bundles with both C1 and C2 compilers were tested on ARMv7 hardware. |
n/a |
n/a |
|
|
n/a |
n/a |
n/a |
n/a |
Linux (MIPS 32-bit) [12]MIPS32r2 ISA, Big Endian, FPU in 32-bit mode or equivalent emulation. |
||||||||
Linux with kernel 4.9.59 and glibc 2.9 [13]Linux soft-float O32 MIPS ABI. |
n/a |
n/a |
|
n/a |
n/a |
n/a |
n/a |
n/a |
Linux (ppc64 Big Endian) |
||||||||
Linux with kernel 3.8.13 and glibc 2.22 [14]Bundles for this platform were tested on QorIQ® T4240-RDB. |
n/a |
n/a |
|
n/a |
n/a |
n/a |
n/a |
n/a |
Linux (ppc32 Hard-float and SPE) |
||||||||
Linux with kernel 3.12.37 and glibc 2.20 [15]Hard-Float EABI bundles were tested on QorIQ® T1024RDB. SPE ABI bundles were tested on NXP® P2020RDB. |
n/a |
n/a |
|
n/a |
n/a |
n/a |
n/a |
n/a |
QNX |
||||||||
QNX 7.0 ARMv7 32-bit Hard-Float ABI |
n/a |
n/a |
|
n/a |
n/a |
n/a |
n/a |
n/a |
QNX 7.1 ARMv8 32-bit Hard-Float ABI |
n/a |
n/a |
|
n/a |
n/a |
n/a |
n/a |
n/a |
macOS 15+ |
n/a |
|
|
|
|
|
|
|
macOS (Apple Silicon) |
||||||||
macOS 15+ |
n/a |
n/a |
|
|
|
|
|
|
Solaris (x86 and Sparc) |
||||||||
Solaris 11 |
n/a |
|
|
|
n/a |
n/a |
n/a |
n/a |
Solaris 10 |
n/a |
|
|
n/a |
n/a |
n/a |
n/a |
n/a |
Azul Zulu Builds of OpenJDK With CRaC
|
Note
|
Currently, CRaC is only available for the specified Linux systems, in the versions listed below of Azul Zulu Builds of OpenJDK. For development, you can use the CRaC Java library on any platform and simulate the CRaC functionality. |
-
: Build of OpenJDK with full CRaC support and the Warp engine.
-
: Build of OpenJDK with CRaC support for development purposes. These provide a simulated checkpoint/restore mechanism to be used for development and testing.
Operating System |
Azul Zulu Versions |
|
|---|---|---|
17, 21, 25, 27 |
||
x86 64-bit |
ARM 64-bit |
|
Linux |
|
|
Alpine Linux 3.24 |
|
|
Windows |
|
n/a |
macOS |
|
|
Fixed Issues
This section covers all issues that were fixed in this release.
Fixed Common Vulnerabilities and Exposures
This section summarizes Common Vulnerabilities and Exposures (CVE) fixed in this release.
| No. | CVE # | Component | Protocol | Remote Exploit w/o Auth. | Base Score | Attack Vector | Attack Complex | Privileges Req’d | User Interact | Scope | Confiden-tiality | Integrity | Availability | Azul Zulu Versions Affected | Notes |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
1 |
JavaFX (WebKitGTK) |
Multiple |
Yes |
7.5 |
Network |
High |
None |
Required |
Unchanged |
High |
High |
High |
27, 25, 21, 17, 11, 8 |
Note 1 |
|
2 |
2D |
Multiple |
Yes |
7.0 |
Network |
High |
None |
None |
Unchanged |
Low |
Low |
High |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 2 |
|
3 |
Networking |
SOCKS5 |
Yes |
6.8 |
Network |
High |
None |
None |
Changed |
None |
High |
None |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 2 |
|
4 |
Libraries |
Multiple |
Yes |
6.5 |
Network |
Low |
None |
None |
Unchanged |
Low |
Low |
None |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 2 |
|
5 |
Networking |
Multiple |
Yes |
6.5 |
Network |
Low |
None |
None |
Unchanged |
None |
Low |
Low |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 2 |
|
6 |
Security |
Multiple |
Yes |
6.5 |
Network |
Low |
None |
None |
Unchanged |
Low |
Low |
None |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 2 |
|
7 |
2D |
Multiple |
Yes |
6.5 |
Network |
High |
None |
None |
Unchanged |
None |
High |
Low |
17, 11, 8, 7, 6 |
Note 2 |
|
8 |
Utility |
Multiple |
Yes |
6.5 |
Network |
Low |
None |
None |
Unchanged |
None |
Low |
Low |
11, 8, 7, 6 |
Note 2 |
|
9 |
Utility |
Multiple |
Yes |
6.5 |
Network |
Low |
None |
None |
Unchanged |
None |
Low |
Low |
11, 8, 7, 6 |
Note 2 |
|
10 |
JGSS |
Multiple |
Yes |
6.5 |
Network |
High |
None |
None |
Unchanged |
None |
Low |
High |
11, 8, 7, 6 |
Note 2 |
|
11 |
JavaFX (WebKitGTK) |
Multiple |
Yes |
5.9 |
Network |
High |
None |
None |
Unchanged |
None |
None |
High |
27, 25, 21, 17, 11, 8 |
Note 1 |
|
12 |
Security |
Multiple |
Yes |
5.9 |
Network |
High |
None |
None |
Unchanged |
None |
High |
None |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 2 |
|
13 |
JDBC |
Multiple |
Yes |
5.9 |
Network |
High |
None |
None |
Unchanged |
High |
None |
None |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 2 |
|
14 |
JAXP |
Multiple |
Yes |
5.9 |
Network |
High |
None |
None |
Unchanged |
High |
None |
None |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 2 |
|
15 |
Networking |
Multiple |
Yes |
5.9 |
Network |
High |
None |
None |
Unchanged |
High |
None |
None |
27, 25, 21, 17, 11 |
Note 2 |
|
16 |
JGSS |
Multiple |
Yes |
5.9 |
Network |
High |
None |
None |
Unchanged |
None |
High |
None |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 3 |
|
17 |
RMI |
Multiple |
Yes |
5.4 |
Network |
High |
None |
None |
Changed |
Low |
Low |
None |
8, 7, 6 |
Note 3 |
|
18 |
JavaFX |
Multiple |
Yes |
5.4 |
Network |
Low |
None |
Required |
Unchanged |
Low |
Low |
None |
27, 25, 21, 17, 11, 8 |
Note 1 |
|
19 |
JAAS |
Multiple |
Yes |
5.3 |
Network |
Low |
None |
None |
Unchanged |
Low |
None |
None |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 2 |
|
20 |
JAXP |
Multiple |
Yes |
5.3 |
Network |
Low |
None |
None |
Unchanged |
None |
None |
Low |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 2 |
|
21 |
Networking |
Multiple |
Yes |
5.3 |
Network |
Low |
None |
None |
Unchanged |
Low |
None |
None |
27, 25, 21 |
Note 3 |
|
22 |
Networking |
Multiple |
Yes |
5.3 |
Network |
Low |
None |
None |
Unchanged |
None |
Low |
None |
27, 25, 21, 17, 11 |
Note 2 |
|
23 |
JSSE |
TLS |
Yes |
5.3 |
Network |
Low |
None |
None |
Unchanged |
None |
None |
Low |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 2 |
|
24 |
Libraries |
Multiple |
Yes |
5.3 |
Network |
Low |
None |
None |
Unchanged |
None |
None |
Low |
25, 21, 17, 11, 8, 7 |
Note 2 |
|
25 |
CORBA |
Multiple |
Yes |
5.3 |
Network |
Low |
None |
None |
Unchanged |
None |
None |
Low |
8, 7, 6 |
Note 3 |
|
26 |
ImageIO |
Multiple |
Yes |
5.3 |
Network |
Low |
None |
None |
Unchanged |
None |
None |
Low |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 2 |
|
27 |
Networking |
Multiple |
Yes |
5.3 |
Network |
Low |
None |
None |
Unchanged |
None |
Low |
None |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 3 |
|
28 |
Networking |
Multiple |
Yes |
5.3 |
Network |
Low |
None |
None |
Unchanged |
None |
Low |
None |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 3 |
|
29 |
Lightweight HTTP Server |
Multiple |
Yes |
5.3 |
Network |
Low |
None |
None |
Unchanged |
None |
Low |
None |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 3 |
|
30 |
JGSS |
Multiple |
Yes |
5.3 |
Network |
High |
None |
Required |
Unchanged |
High |
None |
None |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 1 |
|
31 |
JGSS |
Multiple |
Yes |
5.3 |
Network |
High |
None |
Required |
Unchanged |
High |
None |
None |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 1 |
|
32 |
Compiler |
Multiple |
Yes |
4.8 |
Network |
High |
None |
None |
Unchanged |
Low |
Low |
None |
27, 25, 21 |
Note 3 |
|
33 |
Security |
Multiple |
Yes |
4.8 |
Network |
High |
None |
None |
Unchanged |
Low |
Low |
None |
27, 25, 21, 17, 11, 8, 7 |
Note 2 |
|
34 |
Serviceability |
Multiple |
Yes |
4.8 |
Network |
High |
None |
None |
Unchanged |
Low |
Low |
None |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 2 |
|
35 |
Compiler |
Multiple |
Yes |
4.8 |
Network |
High |
None |
None |
Unchanged |
Low |
Low |
None |
27, 25, 21, 17, 11 |
Note 3 |
|
36 |
Libraries |
None |
No |
4.7 |
Local |
High |
None |
Required |
Unchanged |
None |
High |
None |
27, 25, 21, 17, 11 |
Note 2 |
|
37 |
JDK tools |
None |
No |
4.7 |
Local |
High |
None |
Required |
Unchanged |
None |
High |
None |
27, 25, 21, 17, 11 |
Note 1 |
|
38 |
JavaFX (gstreamer) |
Multiple |
Yes |
4.2 |
Network |
High |
None |
Required |
Unchanged |
Low |
None |
Low |
27, 25, 21, 17, 11, 8 |
Note 1 |
|
39 |
Utility |
None |
No |
4.0 |
Local |
High |
None |
None |
Unchanged |
Low |
Low |
None |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 2 |
|
40 |
JSSE |
TLS |
Yes |
3.7 |
Network |
High |
None |
None |
Unchanged |
None |
Low |
None |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 2 |
|
41 |
Compiler |
Multiple |
Yes |
3.7 |
Network |
High |
None |
None |
Unchanged |
Low |
None |
None |
27, 25 |
Note 3 |
|
42 |
Networking |
Multiple |
Yes |
3.7 |
Network |
High |
None |
None |
Unchanged |
None |
Low |
None |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 2 |
|
43 |
JAXP |
Multiple |
Yes |
3.7 |
Network |
High |
None |
None |
Unchanged |
None |
Low |
None |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 2 |
|
44 |
Security |
Multiple |
Yes |
3.7 |
Network |
High |
None |
None |
Unchanged |
None |
Low |
None |
27, 25, 21 |
Note 2 |
|
45 |
ImageIO |
Multiple |
Yes |
3.7 |
Network |
High |
None |
None |
Unchanged |
Low |
None |
None |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 2 |
|
46 |
2D |
Multiple |
Yes |
3.7 |
Network |
High |
None |
None |
Unchanged |
None |
Low |
None |
8, 7, 6 |
Note 2 |
|
47 |
Networking |
Multiple |
Yes |
3.7 |
Network |
High |
None |
None |
Unchanged |
None |
None |
Low |
27 |
Note 2 |
|
48 |
JSSE |
TLS |
Yes |
3.7 |
Network |
High |
None |
None |
Unchanged |
None |
Low |
None |
27, 25, 21, 17, 11, 8 |
Note 3 |
|
49 |
Serviceability |
None |
No |
3.6 |
Local |
High |
None |
Required |
Unchanged |
None |
Low |
Low |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 2 |
|
50 |
Sound |
Multiple |
Yes |
3.1 |
Network |
High |
None |
Required |
Unchanged |
None |
None |
Low |
27, 25, 21, 17, 11, 8, 7, 6 |
Note 1 |
|
51 |
JavaFX |
Multiple |
Yes |
3.1 |
Network |
High |
None |
Required |
Unchanged |
Low |
None |
None |
27, 25, 21, 17, 11, 8 |
Note 1 |
|
52 |
JavaFX |
Multiple |
Yes |
3.1 |
Network |
High |
None |
Required |
Unchanged |
Low |
None |
None |
27, 25 |
Note 1 |
|
53 |
AWT |
Multiple |
No |
2.6 |
Network |
High |
Low |
Required |
Unchanged |
Low |
None |
None |
27, 25, 21, 17, 11, 8, 7 |
Note 1 |
|
54 |
CVE-2026-91484 This CVE is not applicable to Azul Zulu Builds of OpenJDK. It is listed here for comparison with other Java implementations which may contain this CVE. |
Java plugin |
None |
No |
7.5 |
Local |
High |
Low |
None |
Changed |
High |
High |
None |
None |
Note 1 |
55 |
CVE-2026-101737 This CVE is not applicable to Azul Zulu Builds of OpenJDK. It is listed here for comparison with other Java implementations which may contain this CVE. |
Compiler |
Multiple |
Yes |
5.9 |
Network |
High |
None |
None |
Unchanged |
None |
None |
High |
None |
Note 3 |
Notes:
| ID | Notes |
|---|---|
1 |
This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically on servers, that load and run only trusted code (e.g., code installed by an administrator). |
2 |
This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. |
3 |
This vulnerability can only be exploited by supplying data to APIs in the specified Component, such as through a web service. |
Non-CVE Security Fixes
The following table summarizes non-CVE security fixes implemented in this release.
| OpenJDK Patch ID | Azul Zulu Version | Synopsis | CPU/PSUCPU fixes are included in both CPU and PSU bundles. PSU fixes are included in the PSU bundles only. |
|---|---|---|---|
8,11,17,21,25,27 |
PSU |
||
8,11,17,21,25,27 |
Improve JavaFX Scripting Support |
PSU |
|
8,11,17,21,25,27 |
Enhance JavaFX Document Loading |
PSU |
|
8,11,17,21,25,27 |
Enhance JavaFX Image Loading |
PSU |
|
8,11,17,21,25,27 |
Enhance JavaFX DnD |
PSU |
|
8,11,17,21,25,27 |
Enhance MD5 Digesting |
PSU |
|
25,27 |
Enhance JavaFX CSS Handling |
PSU |
|
8,11,17,21,25,27 |
Enhance JavaFX Clipboard |
PSU |
|
11,17,21,25,27 |
Improve JavaFX Input Methods |
PSU |
|
8,11,17,21,25,27 |
Improve JavaFX Drag and Drop |
PSU |
|
25,27 |
Improve JavaFX Rich Text Formatting |
PSU |
|
21,25,27 |
Enhance Javadoc Searching |
PSU |
|
8,11,17,21,25,27 |
Enhance DataFlavor |
PSU |
|
17,21,25,27 |
Enhance jpackage Packaging |
PSU |
|
8,11,17,21,25,27 |
Enhance EventListenerList |
PSU |
OpenJDK Fixes and Enhancements
The following table describes the OpenJDK changes implemented in this release.
| OpenJDK Patch ID | Azul Zulu Version | Synopsis | CPU/PSUCPU fixes are included in both CPU and PSU bundles. PSU fixes are included in the PSU bundles only. |
|---|---|---|---|
8 |
ZipFile cannot read some InfoZip ZIP64 zip files |
CPU,PSU |
|
6,7,8 |
improve error messages in matchJavaTZ [windows] |
CPU,PSU |
|
8 |
DeflateIn_InflateOut.java test incorrectly assumes size of compressed file |
CPU,PSU |
|
11 |
HTTP Client sometimes gets java.io.IOException → Invalid chunk header byte 32 |
CPU,PSU |
|
8,11 |
(zipfs) ZipFileSystem::readExtra can fail if zipinfo-time is not set to false |
CPU,PSU |
|
6,7,8 |
Change implementation of safeAdd/safeMult in the LCMSImageLayout class |
CPU,PSU |
|
6,7,8,11,17 |
GIFImageReader disregards ignoreMetadata flag which causes memory exhaustion |
CPU,PSU |
|
8,11 |
ZipFile can’t open big file (NegativeArraySizeException) |
CPU,PSU |
|
6,7,8,11,17 |
Replace the usage of ImageLayoutException by the CMMException |
CPU,PSU |
|
6,7,8,11,17 |
Add validation of the raster’s layout before using in native |
CPU,PSU |
|
8,11,17 |
Add a fast, non-manual alternative to test/jdk/java/util/zip/ZipFile/TestTooManyEntries |
CPU,PSU |
|
8,11,17,21 |
(zipfs) ZipFileSystem.readFullyAt does not tolerate short reads |
CPU,PSU |
|
11,17,21 |
Redundant entries in Windows |
CPU,PSU |
|
6,7,8,11 |
Uninitialised memory in deleteGSSCB of GSSLibStub.c:179 |
CPU,PSU |
|
8,11,17,21 |
Improve ZipFile validation of the END header |
CPU,PSU |
|
11,17,21 |
Provide means to alter lib/tzmappings entries on Windows |
CPU,PSU |
|
7,8,11 |
Bug in com/sun/net/httpserver/bugs/B6361557.java test |
CPU,PSU |
|
25 |
VectorAPI: Refactor current implementation of subword gather load API |
CPU,PSU |
|
11,17 |
Convert JShell tests to use JUnit instead of TestNG |
CPU,PSU |
|
6,7,8,11,17,21,25 |
Clear text HttpServer connection could fail fast if receiving SSL ClientHello |
CPU,PSU |
|
11,17 |
Several JShell tests report JUnit discovery warnings |
CPU,PSU |
|
7,8,11,17,21,25 |
(zipfs) ZipFileSystem.initCEN needlessly reads END header |
CPU,PSU |
|
7,8,11,17,21,25 |
(zipfs) Align ZipFileSystem END header validation with the ZipFile implementation |
CPU,PSU |
|
11,17,21,25 |
Refactor test/jdk/sun/util/resources TestNG tests to JUnit |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance PKCS5 padding |
CPU,PSU |
|
6,7 |
Support std/dstOffset attributes in CLDR’s |
CPU,PSU |
|
8,11,17,21,25 |
Support std/dstOffset attributes in CLDR’s metazone definitions |
CPU,PSU |
|
6,7 |
Enhance Der Value Handling |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance TLS certificate handling |
CPU,PSU |
|
21,25,27 |
Improve C2 loop transformations |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance LDAP logins |
CPU,PSU |
|
7,8,11,17,21,25,27 |
Enhance SASL Authentication |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance WebRowSets |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance HTTP Client Response Handling |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance Certificate Name Checks |
CPU,PSU |
|
25,27 |
Enhance Vector Processing |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance XPath Expressions |
CPU,PSU |
|
21,25,27 |
Enhance HTTP Server |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance Network Clients |
CPU,PSU |
|
6,7,8 |
Enhance RMI connections |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance Certificate Constraint Checking |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance XML Processing |
CPU,PSU |
|
21,25,27 |
Improve ciphertext handling |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance JPEG loading |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance Template Handling |
CPU,PSU |
|
7,8,11,17,21,25,27 |
Enhance Image Handling |
CPU,PSU |
|
11,17,21,25,27 |
Enhance jmod handling |
CPU,PSU |
|
11,17,21,25,27 |
Enhance JShell |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance Preferences |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance TLS handshakes |
CPU,PSU |
|
6,7,8 |
Enhance Font Rendering |
CPU,PSU |
|
11,17,21,25,27 |
Enhance HTTP Client |
CPU,PSU |
|
6,8,11,17 |
Enhance Image Processing |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance jstatd |
CPU,PSU |
|
11,17,21,25,27 |
Enhance HTTP client caching |
CPU,PSU |
|
6,7,8,11 |
Enhance Pack200 unpacking |
CPU,PSU |
|
6,7,8,11 |
Improve Pack200 handling |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance diagnostic sessions |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance SOCKS5 support |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance MIDI file handling |
CPU,PSU |
|
7,8,11,17,21,25 |
Enhance zipfs |
CPU,PSU |
|
6,7,8,11 |
Enhance JGSS |
CPU,PSU |
|
6,7,8 |
Enhance CORBA |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance font rendering |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance HTTP server parsing |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance HTTP Server Handler |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Improve HTTP headers |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance GIF loading |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
WebRowSet empty elements read value of previous element |
CPU,PSU |
|
8,11,17,21,25,27 |
Enhance TLS Extensions |
CPU,PSU |
|
17,21,25,27 |
RemoteHostImpl constructor correction (jstatd) |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Remove LuxTrust Global Root CA |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance krb5 tokens |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance krb5 client |
CPU,PSU |
|
11,17,21,25,27 |
JShell tests failing |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Enhance Kerberos validation |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
(tz) Update Timezone Data to 2026c |
CPU,PSU |
|
8,11,17,21,25,27 |
Cherry-pick metazone changes from CLDR to support tzdata2026c for JDK update releases |
CPU,PSU |
|
8,11,17,21,25 |
Cherry-pick tz attributes from newer CLDR data for jdk25u and earlier |
CPU,PSU |
|
11,17,21,25,27 |
Enhance C2 comparisons |
CPU,PSU |
|
8,11,17,21,25,27 |
TestZoneTextPrinterParser.java assertion fails with expected: <Mountain Standard Time> but was: <Mountain Daylight Time> |
CPU,PSU |
|
11,17,21 |
Inconsistent TimeZone Names Displayed across JDK release trains |
CPU,PSU |
|
6,7,8,11,17,21,25 |
Follow-on fix for Improve certification checking |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
(tz) Update Timezone Data to 2026d |
CPU,PSU |
|
8,11,17,21,25,27 |
Cherry-pick metazone changes from CLDR for tzdata2026d, for JDK update release |
CPU,PSU |
|
25,27 |
Cherry-pick BCP 47 time zone changes from CLDR for tzdata2026d, for JDK update releases |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Align the JDK with Microsoft’s new timezone names for British Columbia/Alberta |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
(tz) Update Timezone Data to 2026e |
CPU,PSU |
|
8,11,17,21,25,27 |
Cherry-pick metazone changes from CLDR to support tzdata2026e for JDK update releases |
CPU,PSU |
|
6,7,8,11,17,21,25,27 |
Align the JDK with Microsoft’s new timezone name for Manitoba |
CPU,PSU |
|
11,17,21 |
[21u] Add explicit zone offset test for America/Rainy_River |
CPU,PSU |
|
11,17 |
[17u] Update tzmappings.override location after JDK-8343788 backport |
CPU,PSU |
|
17 |
Event time in future part 2, now on X |
PSU |
|
17,21,25 |
3 tests from closed/javax/sound/sampled caused BSOD on win 7 x86 |
PSU |
|
17 |
Test java/awt/im/memoryleak/InputContextMemoryLeakTest.java fails |
PSU |
|
17 |
Few awt test fail for Solaris 11 with RuntimeException |
PSU |
|
17 |
Test java/awt/Mouse/TitleBarDoubleClick/TitleBarDoubleClick fails on Ubuntu with mouseReleased event after double click on title bar |
PSU |
|
17 |
Consistent failure of java/awt/dnd/MissingEventsOnModalDialog/MissingEventsOnModalDialogTest.java |
PSU |
|
17 |
GetMousePositionTest fails with the message "Mouse position should not be null" |
PSU |
|
17,21 |
Define algorithm names for keys derived from KeyAgreement |
PSU |
|
8 |
GSS: Uninitialized cb→initiator_address when using channel binding with native kerberos |
PSU |
|
17 |
Regression automated Test 'javax/swing/JFileChooser/6738668/bug6738668.java' fails |
PSU |
|
17 |
java/awt/Scrollbar/ScrollbarMouseWheelTest/ScrollbarMouseWheelTest.java fails |
PSU |
|
17 |
java/awt/List/SingleModeDeselect/SingleModeDeselect.java times out |
PSU |
|
17 |
Regression automated Test 'java/awt/TrayIcon/PopupMenuLeakTest/PopupMenuLeakTest.java' fails |
PSU |
|
17 |
java/awt/Component/NativeInLightShow/NativeInLightShow.java fails |
PSU |
|
17 |
java/awt/TextArea/AutoScrollOnSelectAndAppend/AutoScrollOnSelectAndAppend.java fails on mac10.13 |
PSU |
|
17 |
Test java/awt/Modal/ToFront/DialogToFrontModeless1Test.java fails on Linux |
PSU |
|
21,25 |
RunTest does not support running of JTREG manual tests |
PSU |
|
8 |
Improve test template SSLEngineTemplate with SSLContextTemplate |
PSU |
|
8 |
isnanf is obsolete |
PSU |
|
11 |
Remove unnecessary string copy in NetworkInterface.c |
PSU |
|
8 |
Don’t wrap SocketExceptions into SSLExceptions in SSLSocketImpl |
PSU |
|
11 |
[macos_aarch64] configure script fails if GNU uname in PATH |
PSU |
|
11,17 |
Certificate’s IP x509 NameConstraints raises ArrayIndexOutOfBoundsException |
PSU |
|
8 |
compiler/codegen/TestCharVect2.java fails for client VMs |
PSU |
|
17 |
Optimize existing fill stubs for AVX-512 target |
PSU |
|
17 |
SHA3: changing java implementation to help C2 create high-performance code |
PSU |
|
11 |
Data race between JvmtiClassFileReconstituter::copy_bytecodes and class linking |
PSU |
|
17 |
containers/docker/TestJcmd.java failed with "RuntimeException: Could not find specified process" |
PSU |
|
17 |
isAssignableFrom checks in AlgorithmParametersSpi.engineGetParameterSpec appear to be backwards |
PSU |
|
17 |
java/lang/StringBuffer(StringBuilder)/HugeCapacity.java intermittently fails |
PSU |
|
17 |
Unexpected exception thrown when CEN file entry comment length is not valid |
PSU |
|
17 |
jarsigner output does not explain why an EC key is disabled if its curve has been disabled |
PSU |
|
11 |
JDK-8282306 breaks gtests on zero |
PSU |
|
17 |
x86 Code cleanup related to move instructions. |
PSU |
|
17 |
closed test sun/java2d/OpenGL/XORPaint.java is unstable |
PSU |
|
11 |
Fix a configure error in RISC-V cross build |
PSU |
|
27 |
Port JEP 425 to S390X |
PSU |
|
17 |
Test vmTestbase/gc/gctests/WeakReference/weak006/weak006.java fails: Last soft reference has not been cleared |
PSU |
|
8,11 |
Introduce LDAP and RMI protocol-specific object factory filters to JNDI implementation |
PSU |
|
17 |
AArch64: test/jdk/sun/security/ec/ed/EdDSATest.java failed with -XX:+UseSHA3Intrinsics |
PSU |
|
17 |
java/util/concurrent/forkjoin/AsyncShutdownNow.java is too slow |
PSU |
|
17 |
Add EdDSA/XDH/RSASSA-PSS to KeyPairGeneratorBench.java |
PSU |
|
17,21 |
Implement JEP 497: Quantum-Resistant Module-Lattice-Based Digital Signature Algorithm |
PSU |
|
17,21 |
Implement JEP 496: Quantum-Resistant Module-Lattice-Based Key Encapsulation Mechanism |
PSU |
|
8 |
Refactor subsystem_file_line_contents and add docs and tests |
PSU |
|
17 |
EdDSA does not verify when there is no message |
PSU |
|
11,17 |
Update autoconf build-aux files with latest from 2022-09-17 |
PSU |
|
17 |
AlgorithmId should not encode a missing parameters field as NULL unless hardcoded |
PSU |
|
17 |
MemoryPoolMBean/isCollectionUsageThresholdExceeded/isexceeded005 failed with "isCollectionUsageThresholdExceeded() returned true, while threshold = 1 and used = 0" |
PSU |
|
8 |
Make thread stacks not use huge pages |
PSU |
|
17 |
Request with timeout aborts later in-flight request on HTTP/1.1 cxn |
PSU |
|
11 |
gtest is_first_C_frame failing on ARM |
PSU |
|
17 |
Add an extra test for JDK-8292755 |
PSU |
|
17 |
javax/swing/JTable/7068740/bug7068740.java fails on Ubunutu 20.04 |
PSU |
|
21 |
function isWsl() returns false on WSL2 |
PSU |
|
17,21,25 |
ClipIsRunningAfterStop.java failed with "../nptl/pthread_mutex_lock.c:81: pthread_mutex_lock: Assertion `mutex→data.__owner == 0' failed." |
PSU |
|
17,21,25 |
javax/sound/sampled/Clip/ClipFlushCrash.java timed out |
PSU |
|
17 |
DSA does not reset SecureRandom when initSign is called again |
PSU |
|
17,21 |
JitTester: Exclude java.lang.Math.random |
PSU |
|
11 |
JDK-8303215 is incomplete |
PSU |
|
11 |
THPs cause huge RSS due to thread start timing issue |
PSU |
|
11 |
Rename DisableTHPStackMitigation flag to THPStackMitigation |
PSU |
|
8 |
Print 'rss' and 'cache' as part of the container information |
PSU |
|
17 |
Use JUnit in lib-test/jdk tests |
PSU |
|
11 |
TEST_BUG: runtime/os/THPsInThreadStackPreventionTest.java could fail on machine with large number of cores |
PSU |
|
25 |
Implement JEP 527: TLS 1.3 Hybrid Key Exchange |
PSU |
|
17 |
Refactor some jdk/java/net/httpclient/http2 tests to JUnit |
PSU |
|
17 |
SHAKE256 does not work correctly if n >= 137 |
PSU |
|
17 |
Ensure randomness is only read from provided SecureRandom object |
PSU |
|
21 |
VM build without C2 fails after JDK-8180450 |
PSU |
|
17 |
Add a Test against ECDSA and ECDH NIST Test vector |
PSU |
|
17 |
Test sun/security/ssl/SSLSessionImpl/ResumeChecksServer.java failed: Existing session was used |
PSU |
|
17,21 |
SHA3 performance can be improved |
PSU |
|
17,21 |
gtest/GTestWrapper.java fails on armhf due to LogDecorations.iso8601_utctime_test |
PSU |
|
27 |
[s390x] test failure - PrintClasses.java |
PSU |
|
17,21 |
Internal XOF Methods for SHAKE128 and SHAKE256 |
PSU |
|
21 |
App classpath mismatch if a jar from the Class-Path attribute is on the classpath |
PSU |
|
17,21 |
A common framework to support public key algorithms with standard parameter sets |
PSU |
|
17,21 |
Fix some Asserts failure messages |
PSU |
|
25 |
EXCEPTION_ACCESS_VIOLATION in awt.dll after JDK-8185862 |
PSU |
|
21 |
AVX-512 intrinsic for SHA3 |
PSU |
|
17,21 |
sun/security/tools/keytool/GenKeyPairSigner.java failed due to missing certificate output |
PSU |
|
17,21 |
ProblemList sun/security/tools/keytool/GenKeyPairSigner.java |
PSU |
|
17,21 |
Static ACVP sample tests |
PSU |
|
25 |
PKCS#12 KeyStore support for RFC 9879: Use of Password-Based Message Authentication Code 1 (PBMAC1) |
PSU |
|
17 |
java/io/File/GetXSpace.java fails on Windows with CD-ROM drive |
PSU |
|
21 |
Linux x86_64 lto build gives a lot of warnings and fails lto-wrapper: fatal error: make returned 2 exit status |
PSU |
|
17,21 |
Test java/awt/event/KeyEvent/ExtendedKeyCode/ExtendedKeyCodeTest.java failed: Wrong extended key code |
PSU |
|
17,21 |
ML_KEM NamedParameterSpec constants removed by ML-DSA integration |
PSU |
|
8 |
[8u] javax/sound/midi/Soundbanks/GetSoundBankSecurityException/GetSoundBankSecurityException.java fails with FileSystemException |
PSU |
|
17,21 |
Remove wrapper functions for intrinsics in PQC algorithms |
PSU |
|
17,21 |
Switch ML-DSA implementation to FIPS 204 final |
PSU |
|
17 |
OperatingSystemMXBean.getSystemCpuLoad() throws NPE |
PSU |
|
17 |
Problem list automated tests that fail on macOS15 |
PSU |
|
25 |
--strip-debug removes parameter names included with -parameters |
PSU |
|
8 |
cpuset cgroups controller is required for no good reason |
PSU |
|
17,21 |
Optimize Java implementation of ML-DSA |
PSU |
|
17,21 |
Optimize Java implementation of ML-KEM |
PSU |
|
8 |
Container detection code for cgroups v2 should use cgroup.controllers |
PSU |
|
25 |
C2 should remove unused leaf / pure runtime calls |
PSU |
|
17,21 |
Add Support for the Latest ML-KEM and ML-DSA Private Key Encodings |
PSU |
|
17 |
MultiNST tests need more debugging and timing |
PSU |
|
17,21 |
Add aarch64 intrinsics for ML-DSA |
PSU |
|
25 |
runtime/ErrorHandling/CreateCoredumpOnCrash fails on Windows aarch64 |
PSU |
|
17,21 |
Update ML tests to verify against ACVP 1.1.0.38 version |
PSU |
|
25 |
Refactor ./pkcs11/Provider/MultipleLogins.sh to java test |
PSU |
|
17,21 |
Add aarch64 intrinsics for ML-KEM |
PSU |
|
17,21 |
Add unit test for CertificateBuilder and SimpleOCSPServer test utilities |
PSU |
|
17 |
Test CR6740048.java passes unexpectedly missing CR6740048.xsd |
PSU |
|
8 |
Change cgroup version detection logic to not depend on /proc/cgroups |
PSU |
|
17,21 |
Investigate cleaner implementation of AArch64 ML-DSA intrinsic introduced in JDK-8348561 |
PSU |
|
21 |
Add AVX-512 intrinsics for ML-DSA |
PSU |
|
21 |
Add AVX-512 intrinsics for ML-KEM |
PSU |
|
25 |
Windows specific issues in combination of JEP 493 and --with-external-symbols-in-bundles=public |
PSU |
|
17 |
Test java/awt/Frame/MultiScreenTest.java fails: Window list is empty |
PSU |
|
25 |
Add native method implementation of Reference.get() |
PSU |
|
25 |
InternalError loading java.security due to Windows parent folder permissions |
PSU |
|
17,21 |
Update crypto microbenchmarks to cover ML-DSA, ML-KEM, and HSS algorithms |
PSU |
|
25 |
VectorAPI: combine vector not operation with compare |
PSU |
|
17,21 |
SHAKE128 and SHAKE256 MessageDigest algorithms |
PSU |
|
8 |
File Leak in CgroupSubsystemFactory::determine_type of cgroupSubsystem_linux.cpp:300 |
PSU |
|
17,21 |
Remove remnants of debugging in the fix for JDK-8348561 and JDK-8349721 |
PSU |
|
17 |
Move NativeDialogToFrontBackTest.java PL test to manual category |
PSU |
|
17,21 |
Update SignatureUtil.java with the new KnownOIDs |
PSU |
|
21 |
AArch64: compiler stub buffer size wrongly depends on ZGC |
PSU |
|
25 |
Shenandoah: Clean up SATB barrier runtime entry points |
PSU |
|
17 |
java/lang/StringBuilder/HugeCapacity.java failing with OOME |
PSU |
|
25 |
Introduce a BSMAttributeEntry struct |
PSU |
|
11,17,21 |
[Ubuntu 25.10] java/lang/ProcessBuilder/Basic.java, java/lang/ProcessHandle/InfoTest.java fail due to rust-coreutils |
PSU |
|
25 |
Add support for AVX10 floating point minmax instruction |
PSU |
|
17 |
sun/security/tools/keytool/i18n.java user country is current user location instead of the language |
PSU |
|
17 |
sun/security/tools/keytool/i18n.java add an ability to add comment for failures |
PSU |
|
25 |
OOM in java/foreign/TestUpcallStress.java |
PSU |
|
25 |
Add AVX-512 intrinsics for ML-KEM - enhancement on AVX512_VBMI |
PSU |
|
17,21,25 |
Fix typo in onTradAbsence |
PSU |
|
17 |
sun/security/krb5/config/native/TestDynamicStore.java ensure that the test is run with sudo |
PSU |
|
21 |
Update to use jtreg 8 |
PSU |
|
25 |
[GCC static analyzer] unix NetworkInterface.c addif leak on early returns |
PSU |
|
25 |
PKCS12 KeyStore PBMAC1 interoperability testing |
PSU |
|
21,25 |
Include java.runtime.version in thread dump output |
PSU |
|
25 |
Support AVX10 saturating floating point conversion instructions |
PSU |
|
25 |
AArch64: Set JVM flags for Neoverse N3 and V3 cores |
PSU |
|
25 |
Use a set instead of a list as the intermediary Klass* storage to reduce typeset processing |
PSU |
|
17 |
TEST_BUG: java/rmi/transport/checkLeaseInfoLeak/CheckLeaseLeak.java failing intermittently |
PSU |
|
17,21,25 |
[macos26] Graphics2D tests fail on new macOS 26 |
PSU |
|
17,21,25 |
jdk/jfr/event/os/TestCPULoad.java fails with Expected at least one event |
PSU |
|
25 |
ml64.exe is not the right assembler for Windows aarch64 |
PSU |
|
17 |
test/jdk/sun/security/pkcs11/Provider/ tests skipped without SkippedException |
PSU |
|
17 |
/test/jdk/sun/security/pkcs11/Cipher tests skip without SkippedException |
PSU |
|
25 |
test/jdk/java/lang/Thread/virtual/JfrEvents.java failing intermittently |
PSU |
|
17 |
Tests should throw SkippedException when SCTP not supported |
PSU |
|
25 |
Remove oopDesc::mark_addr() |
PSU |
|
17 |
Some PKCS11Tests are being skipped when they shouldn’t |
PSU |
|
25 |
Unexpected exception occurs when executing code in a "local" JShell environment |
PSU |
|
21,25 |
Algorithm identifiers for HmacSHA* should always have NULL as params |
PSU |
|
17 |
jdk/open/test/jdk/sun/security/pkcs11/ rsa, ec, config, secmod and sslecc tests are skipping but showing as pass |
PSU |
|
25 |
Refactor Constantpool’s operand array into two |
PSU |
|
25 |
PKCS11 HKDF can’t use byte array IKM in FIPS mode |
PSU |
|
25 |
TLS stateless session ticket decryption fails on some providers |
PSU |
|
25 |
TLS 1.3 KeyUpdate fails with SunPKCS11 provider |
PSU |
|
17,21 |
acvp test should throw SkippedException when no ACVP-Server available |
PSU |
|
17,21,25 |
PKCS11-NSS generic keys generated by DH have leading zeroes stripped |
PSU |
|
25 |
[TEST] compiler/floatingpoint/ScalarFPtoIntCastTest.java expects x86 IR on non-x86 platforms |
PSU |
|
21,25 |
Test compiler/intrinsics/TestLongUnsignedDivMod.java completed and timed out |
PSU |
|
8 |
Add test to ensure serialized ICC_Profile stores only necessary optional data |
PSU |
|
25 |
GenShen: Regulator thread may observe inconsistent states |
PSU |
|
21,25 |
Update to use jtreg 8.1 |
PSU |
|
25 |
Fix race in CompressedClassSpaceSizeInJmapHeap.java |
PSU |
|
21 |
[macOS] use dead_strip linker option to reduce binary size |
PSU |
|
25 |
Upcall exception handler crashes with bad oop |
PSU |
|
25 |
Implementation Review Based on ML-KEM Security Considerations |
PSU |
|
25 |
AArch64: Match rule failure with some CompareAndSwap operand shapes |
PSU |
|
17,21,25 |
UnixMultiResolutionSplashTest.java fails intermittently on Ubuntu_24.04 |
PSU |
|
25 |
[Linux]: Replace reading proc to get thread user CPU time with clock_gettime |
PSU |
|
21,25 |
Many container tests fail when running rootless on cgroup v1 |
PSU |
|
25 |
[Linux] Remove unnecessary logic for supports_fast_thread_cpu_time |
PSU |
|
25 |
Detailed authentication failure messages |
PSU |
|
17,21,25 |
MacOS, Accessibility: Crash in [MenuAccessibility accessibilityChildren] after JDK-8341311 |
PSU |
|
25 |
JDK-8351842 broke native debugging on Linux |
PSU |
|
25 |
Remove stale comments after JDK-8372584 |
PSU |
|
17 |
Some sound tests failing in CI due to lack of sound key |
PSU |
|
17 |
TestDynamicStore.java '/manual' disables use of '/timeout' |
PSU |
|
17 |
Refactor java/net/httpclient/ThrowingPublishers*.java tests to use JUnit5 |
PSU |
|
25 |
C2: Robust Node::uncast_helper infinite loop check |
PSU |
|
17 |
Test java/lang/invoke/TestVHInvokerCaching.java tests nothing |
PSU |
|
17 |
Refactor java/net/httpclient/ThrowingSubscribers*.java tests to use JUnit5 |
PSU |
|
21 |
Fix SIGSEGV when lib/modules is unreadable |
PSU |
|
17 |
[17u] TestUseSHA512IntrinsicsOptionOnUnsupportedCPU failed with java.lang.AssertionError |
PSU |
|
17,21,25 |
ML-KEM’s 12-bit decompression can be simplified on aarch64 |
PSU |
|
17,21,25 |
CAInterop.java#microsoftrsa2017 test fails as EE certificate does not specify OCSP responder |
PSU |
|
17,21,25 |
assert(false) failed: "Attempting to acquire lock NativeHeapTrimmer_lock/nosafepoint out of order with lock ConcurrentHashTableResize_lock/nosafepoint-2 — possible deadlock" when using native heap trimmer |
PSU |
|
25 |
Error handling to raise illegal_parameter or internal_error alert in hybrid key exchange |
PSU |
|
21 |
(fs) Files.copy can fail with EOPNOTSUPP when copy_file_range not supported |
PSU |
|
25 |
java/net/httpclient/ConnectTimeoutWithProxy*.java tests fail on EC2 |
PSU |
|
25 |
Compiler crash when using record pattern matching with a generic type parameter shadowing a record class |
PSU |
|
17 |
Test javax/swing/JFileChooser/4966171/bug4966171.java is failing with OOME |
PSU |
|
21,25 |
Update to use jtreg 8.2.1 |
PSU |
|
25 |
C2: folding ifs may cause incorrect execution when trap is taken |
PSU |
|
25 |
Shenandoah: Assembler store barriers read destination memory despite the decorators |
PSU |
|
27 |
Enable full JSR166TestCase.java test for s390x |
PSU |
|
17 |
jdk/jfr/event/gc/detailed/TestZAllocationStallEvent.java intermittent OOME |
PSU |
|
25 |
Zero: Replace Java math ops with UB-safe implementations |
PSU |
|
17,21,25 |
TestLimitsUpdating.java fails with runtime exception even after JDK-8370492 is fixed |
PSU |
|
25 |
Zero: JNIEnv argument is corrupted in native calls |
PSU |
|
11,17,21,25 |
Compiling OpenJDK with C23 C-Compiler gives warning: initialization discards ‘const’ qualifier from pointer target type |
PSU |
|
25 |
Test ChangedJarFile.java failed: missing "timestamp has changed" |
PSU |
|
25 |
Build fails with --enable-linktime-gc set when using some devkits/toolchains |
PSU |
|
17,21,25 |
[macOS] Window content not updated when rendering to multiple windows |
PSU |
|
25 |
C2: performance regression due to missing constant folding for Math.pow() |
PSU |
|
25 |
Fix issues with "dead" code elimination and serviceability agent in libjvm.so on Linux |
PSU |
|
17 |
Refactor java/nio/channels/AsynchronousSocketChannel test to use JUnit |
PSU |
|
25 |
threadDump.schema.json syntax error, missing comma after owner |
PSU |
|
25 |
C2 crash in LoadNode::can_split_through_phi_base during Escape Analysis (JDK 25.0.1+8) |
PSU |
|
25 |
Throwing proper exception for invalid encapsulation length in Hybrid |
PSU |
|
17,21 |
draft-ietf-lamps-kyber-certificates is now RFC 9935 |
PSU |
|
25 |
Adjust JVM debug helper exports |
PSU |
|
17 |
Path-to-gcroots search should not trigger stack overflows |
PSU |
|
27 |
compiler/intrinsics/TestReturnOopSetForJFRWriteCheckpoint.java crashes on s390x |
PSU |
|
25 |
Shenandoah: Missing store barrier when resetting bitmaps |
PSU |
|
25 |
Thread dump parsing and test improvements |
PSU |
|
25 |
Reduce runtime for MonitorVmStartTerminate.java on hosts with a lot of VMs |
PSU |
|
11,17,21,25,27 |
[REDO] Incorrect Interpretation of POSIX TZ Environment Variable on AIX |
PSU |
|
17,21,25 |
Add a check for DNS label not to end with a hyphen |
PSU |
|
25 |
Lots of /tmp/8173970-<number> folders on test machines |
PSU |
|
17,21 |
Make exceptions in Java_sun_security_mscapi_CKeyPairGenerator generateCKeyPair more specific |
PSU |
|
21,25 |
Jtreg test javax/swing/SwingWorker/TestDoneBeforeDoInBackground.java fails |
PSU |
|
25 |
Shenandoah: Clean up nmethod entry barrier support |
PSU |
|
25 |
[AOT Cache] CRC was not checked on Code Region |
PSU |
|
25 |
sun/security/ssl/SSLSocketImpl/SSLSocketBruteForceClose.java fails sporadically |
PSU |
|
8,11,17,21,25,27 |
Enhance LDAP Lookups |
PSU |
|
25 |
Shenandoah: STS yield deadlocks in OOM-evac scope |
PSU |
|
25 |
C2: Reference intrinsics are broken by shadow "referent" field |
PSU |
|
25 |
Improve Shenandoah clone barrier tests |
PSU |
|
25 |
Shenandoah: Interpreter barriers clobber interpreter registers |
PSU |
|
8,11,17,21,25,27 |
Enhance MD5 Digesting |
PSU |
|
21,25,27 |
Enhance Javadoc Searching |
PSU |
|
21,25 |
assert(count == os::processor_count() + 1) failed: invalid enumeration! |
PSU |
|
25 |
Additional Shenandoah clone barrier tests |
PSU |
|
25 |
klass_or_null_acquire asserts on null when using compact object headers |
PSU |
|
25 |
[PPC64] Consolidate code related to calls in nmethods that use trampoline stubs |
PSU |
|
21 |
(so) SocketChannel.connect and finishConnect() exception messages could be improved |
PSU |
|
25 |
Shenandoah: GC checks in C1 LRB clobber fastpath result |
PSU |
|
17,21,25 |
[CRaC] Customizable error message on CPU features check failure |
PSU |
|
8,11,17,21,25,27 |
Enhance DataFlavor |
PSU |
|
17,21,25,27 |
Enhance jpackage Packaging |
PSU |
|
21,25 |
JMX remote bootstrap tests fail on Windows |
PSU |
|
8 |
Update GIFlib to 6.1.3 |
PSU |
|
25 |
[ubsan] TestDockerMemoryMetricsSubgroup.java jtreg test fails with ubsan-enabled binaries |
PSU |
|
25 |
PPC: C2: c_return_value and return_value should not set 2nd OptoRegPair for Op_RegI |
PSU |
|
25 |
Shenandoah: Load klass once in marking task |
PSU |
|
17,21,25,27 |
[CRaC] aarch64: c7g.medium <→ c8g.medium FAIL: vector length |
PSU |
|
21,25,27 |
Provide more NUMA related information in hsinfo/hserr files |
PSU |
|
25 |
Bump update version for OpenJDK: jdk-25.0.5 |
PSU |
|
21 |
Bump update version for OpenJDK: jdk-21.0.13 |
PSU |
|
17 |
Bump update version for OpenJDK: jdk-17.0.21 |
PSU |
|
17,21,25 |
CAInterop.java#buypassclass3ca fails with Intermediate Root CA not found in the chain |
PSU |
|
25,27 |
Headless jdk still contains bin/jconsole |
PSU |
|
8,11,17,21,25,27 |
Enhance EventListenerList |
PSU |
|
27 |
Enhance QUIC connections |
PSU |
|
27 |
Bump update version for OpenJDK: jdk27u to 27.0.1 |
PSU |
|
17,21,25 |
Some javax/sound/sampled tests fail on systems with high CPU core number and running with high concurrency |
PSU |
|
8 |
Bump update version of OpenJDK: 8u512 |
PSU |
|
11 |
Bump update version of OpenJDK: 11.0.33 |
PSU |
|
21,25 |
Remove redundant @requires from TestGarbageCollectionEventWithZMinor |
PSU |
|
21,25 |
double_keccak stub does not set its return value on x86 |
PSU |
|
25 |
Fix comparison checks in DHasKEM |
PSU |
|
17 |
[17u] Test test/langtools/jdk/jshell/UndefinedClassTest.java fails on JDK 17 with java.lang.ThreadDeath |
PSU |
|
25 |
Shenandoah: Missing load barrier when making assertions about mark bitmap |
PSU |
|
25,27 |
Lower peak throughput with AOTCache |
PSU |
|
11,17 |
Insets are incorrectly set in newer Gnome versions |
PSU |
|
25 |
C2: crash with "named projection 2 not found" from ArrayCopyNode::finish_transform() for clone |
PSU |
|
25 |
Remove duplicate handling of sparc in platform.m4 |
PSU |
|
17,21,25 |
[CRaC] Fixup docs of bundled engines |
PSU |
|
25 |
Incomplete algorithm decomposition for TLS 1.3 cipher suites in SSLAlgorithmDecomposer |
PSU |
|
25 |
RISC-V: assert failed with fastdebug build on systems with different core types |
PSU |
|
25 |
hotspot_gc_shenandoah should include gtests |
PSU |
|
25 |
Insufficient feature gate in vm_version_x86 for UseKyberIntrinsics |
PSU |
|
21,25 |
Using XOR mode to clear the content leaves some traces in metal |
PSU |
|
17,21,25 |
Add "dt_socket" to |
PSU |
|
25 |
Timeout when running test BulkCipherDisabledAlgorithms |
PSU |
|
21,25,27 |
sun/tools/jstat shell tests fail on platforms that do not support ParallelGC |
PSU |
|
27 |
Increase static size of some stubs for APX code |
PSU |
|
27 |
[s390x] is_z_illtrap should recognise all forms |
PSU |
|
8 |
[8u] Path to PreferredKey.java exclusion is wrong |
PSU |
|
17,21,25 |
[CRaC] CRIU fails to restore jdk/crac/SecureRandom/InterlockTest |
PSU |
|
27 |
[s390] resolve_jobject uses wrong branch condition after tmll |
PSU |
|
21 |
[21u] Backport of JDK-8352565 misses previous vm symbol to be deleted |
PSU |
|
25 |
GenShen: Degenerated cycle could be skipped |
PSU |
|
25 |
com/sun/net/httpserver/simpleserver/jwebserver/MaxRequestTimeTest.java does not test the maximum request time |
PSU |
|
25 |
Launching with AOT cache fatally crashes with SIGILL (0x4) depending on available CPU instructions |
PSU |
|
25 |
Shenandoah: Control thread may observe incorrect cancellation reason |
PSU |
|
27 |
Change milestone to fcs for all releases |
PSU |
|
25 |
Avoid unused variables warnings in libj2pkcs11 |
PSU |
|
25 |
RISC-V: vector_update_crc32 wrongly assumes undisturbed tail elements |
PSU |
|
25 |
[unix] Avoid unused variables warnings in libj2pkcs11 and adjust malloc rv handling |
PSU |
|
17,21 |
[21u] java/io/Serializable/records/ProhibitedMethods.java fails after JDK-8307843 backport in othervm mode |
PSU |
|
17,21,25 |
[TEST_BUG] java/awt/TextField/CaretPositionTest/CaretPositionTest.java fails in OL-9 |
PSU |
|
17,21,25,27 |
[CRaC] jdk/crac/SecureRandom/InterlockTest timeout on windows-x64 in GitHub CI |
PSU |
|
17,21,25 |
[CRaC] criuengine can’t move out of JVM process hierarchy |
PSU |
|
17,21,25 |
[CRaC] ConcurrentModificationException in LinuxWatchService |
PSU |
|
17,21,25 |
[CRaC] Off-by-one errors in criuengine |
PSU |
|
17,21,25 |
[CRaC] Exception when closing or ignoring pipes via resource policy |
PSU |
|
17,21,25 |
[CRaC] FdsInfo::same_fd calls unspecified fcntl operations |
PSU |
|
17,21,25 |
[CRaC] Cleanup CRaC code |
PSU |
|
25 |
Disable stringop-overflow in shenandoahHeap.cpp |
PSU |
|
17 |
[17u] test/jdk/sun/security/x509/GeneralName/DNSNameTest.java fails to compile in Java 17 after JDK-8381771 backport |
PSU |
|
17 |
[17u] test/jdk/java/net/httpclient/lib/jdk/httpclient/test/lib/common/HttpServerAdapters.java fails to compile in Java 17 after JDK-8343855 backport |
PSU |
|
25 |
RISC-V: Fix C2 stack-to-stack spill copies with large offsets |
PSU |
|
17,21,25,27 |
[CRaC] Custom image constraints |
PSU |
|
17,21,25,27 |
[CRaC] Treat local JARs opened via URL as persistent |
PSU |
|
25 |
Test gc/TestUseGCOverheadLimit.java#G1 fails on linux-arm32 |
PSU |
|
17,21,25 |
[CRaC] Improve restore error logging |
PSU |
|
17,21,25,27 |
[CRaC] Test repeated checkpoint |
PSU |
|
17,21,25,27 |
[CRaC] crlib_bitmap_comparison_t enum values have no unique prefix |
PSU |
|
27 |
[CRaC] Record restore-related metrics |
PSU |
|
17,21,25,27 |
[CRaC] Clear restore data after use |
PSU |
|
17 |
[17u] Remove designator DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.21 |
PSU |
OpenJFX Fixes and Enhancements
The following table describes the JavaFX changes implemented in this release.
| OpenJDK Patch ID | Azul Zulu Version | Synopsis | CPU/PSUCPU fixes are included in both CPU and PSU bundles. PSU fixes are included in the PSU bundles only. |
|---|---|---|---|
8,11,17,21,25,27 |
Update WebKit to 625.1 |
CPU,PSU |
|
8,11,17,21,25 |
Update libxml2 to 2.15.3 |
CPU,PSU |
|
8,11,17,21,25,27 |
Update libxml2 to 2.15.3 or newer |
CPU,PSU |
|
8,11,17,21,25,27 |
Enhance JavaFX Resource Loading |
CPU,PSU |
|
8,11,17,21,25,27 |
Update GStreamer to 1.28.3 or newer |
CPU,PSU |
|
8,11,17,21,25,27 |
Improve graphics rendering |
CPU,PSU |
|
8,11,17,21,25,27 |
Upgrade to Webkit 625.1 |
CPU,PSU |
|
8,11,17,21,25,27 |
Additional WebKit 625.1 fixes from WebKitGTK 2.52.5 |
CPU,PSU |
|
25,27 |
Enhance JavaFX image handling |
CPU,PSU |
|
8,11,17,21,25,27 |
Additional WebKit 625.1 fixes from WebKitGTK 2.52.6 |
CPU,PSU |
|
25,27 |
Snapshot test failures after JDK-8389176 |
CPU,PSU |
|
21 |
JUnit test without a timeout value can hang indefinitely |
PSU |
|
25 |
[macOS] Intermittent build failure in native font with parallel compilation |
PSU |
|
21 |
WebKit 620.1 crashes on startup on Windows x86 32-bit |
PSU |
|
25 |
JavaFX build uses deprecated features that will be removed in gradle 9 |
PSU |
|
8,11,17,21,25 |
Remove UNICODE related code from GLib |
PSU |
|
8,11,17,21,25,27 |
Improve JavaFX Scripting Support |
PSU |
|
8,11,17,21,25,27 |
Enhance JavaFX Document Loading |
PSU |
|
8,11,17,21,25,27 |
Enhance JavaFX Image Loading |
PSU |
|
8,11,17,21,25,27 |
Enhance JavaFX DnD |
PSU |
|
25,27 |
Enhance JavaFX CSS Handling |
PSU |
|
8,11,17,21,25,27 |
Enhance JavaFX Clipboard |
PSU |
|
11,17,21,25,27 |
Improve JavaFX Input Methods |
PSU |
|
8,11,17,21,25,27 |
Improve JavaFX Drag and Drop |
PSU |
|
25,27 |
Improve JavaFX Rich Text Formatting |
PSU |
|
25 |
Update GStreamer to 1.28.3 |
PSU |
|
8,11,17,21,25,27 |
WebView crashes when calling document.startViewTransition() |
PSU |
|
25 |
GlassClipboard: Replace deprecated hash_map and hash_set |
PSU |
|
27 |
Change JavaFX release version to 27.0.1 in jfx27u |
PSU |
|
8,11,17,21,25,27 |
Custom String data cannot be read from the clipboard after JDK-8383252 |
PSU |
|
8,11,17,21,25 |
Memory leak in dshowwrapper - decoded buffers delivered by CSink are never unmapped |
PSU |
|
27 |
Update Unicode Data Files license file to 17.0.0 |
PSU |
|
8,11,17,21,25 |
Crash in JavaFX native glass toolkit during Timer shutdown |
PSU |
|
25 |
Change JavaFX release version to 25.0.5 in jfx25u |
PSU |
|
27 |
Create release notes for JavaFX 27 |
PSU |
|
8,11,17,21,27 |
Intermittent WebView crash when running TextureMapperTest |
PSU |
Fixes and Enhancements Specific to Azul Zulu Builds of OpenJDK
The following table describes the Azul Zulu changes implemented in this release.
| Issue ID | Azul Zulu Version | Synopsis | CPU/PSUCPU fixes are included in both CPU and PSU bundles. PSU fixes are included in the PSU bundles only. |
|---|---|---|---|
ZULU-95586 |
11 |
[test] CertificateBuilder::addNameConstraintsExt is already defined |
CPU,PSU |
ZULU-96324 |
11 |
jdk/jshell/RemoteAgentHandshakeTest::testDefaultAgentUsesNewHandshake fails on Solaris |
CPU,PSU |
ZULU-96706 |
17 |
Update JFX to zulu22.0.10.0.101+100 |
CPU,PSU |
ZULU-96718 |
11 |
Update JFX to zulu19.0.16.0.101+100 |
CPU,PSU |
ZULU-96727 |
25 |
Update JFX to zulu25.0.4.0.101+100 |
CPU,PSU |
ZULU-96765 |
8 |
Update JFX to zulu8u511-b02 |
CPU,PSU |
ZULU-96837 |
21 |
Update JFX to zulu23.0.8.0.101+100 |
CPU,PSU |
ZULU-96887 |
11,17,21 |
Failed java/lang/SecurityManager/CheckAccessClassInPackagePermissions.java: module java.net.http has not been granted accessClassInPackage.jdk.internal.util |
CPU,PSU |
ZULU-96911 |
25 |
Update JFX to zulu25.0.4.0.101+101 |
CPU,PSU |
ZULU-98474 |
7 |
Include jvm.h in attach natives for jio_snprintf |
CPU,PSU |
ZULU-98484 |
25 |
Update PQJSSE for Oct CPU release |
CPU,PSU |
ZULU-99011 |
25 |
Update JFX to zulu25.0.4.0.101+102 |
CPU,PSU |
ZULU-99012 |
21 |
Update JFX to zulu23.0.8.0.101+101 |
CPU,PSU |
ZULU-99067 |
8 |
Update JFX to zulu8u511-b03 |
CPU,PSU |
ZULU-99070 |
17 |
Update JFX to zulu22.0.10.0.101+101 |
CPU,PSU |
ZULU-99076 |
11 |
Update JFX to zulu19.0.16.0.101+101 |
CPU,PSU |
AZULJDK-43 |
27 |
add Extended GC Logging (-Xlog:ext*) jtreg tests |
PSU |
AZULJDK-45 |
27 |
Additional ReadyNow jtreg tests |
PSU |
AZULJDK-158 |
27 |
fix sysinfo field validation in Test4_3_JcmdWithAlwaysCollect |
PSU |
ZULU-5106 |
21 |
armv7 (Neon): Add intrinsic for GHASH algorithm |
PSU |
ZULU-61036 |
17,21,25 |
Support CPUFeatures also for aarch64 |
PSU |
ZULU-77471 |
21 |
Disable ARM32 GHASH intrinsic for CA builds |
PSU |
ZULU-85909 |
11,17,21 |
CI: Failed java/lang/ProcessHandle/InfoTest.java on linux-musl (x64/aarch64) |
PSU |
ZULU-89211 |
25 |
CI: Enable linux-aarch32hf back to zulu25-default dev boms |
PSU |
ZULU-91759 |
17,21,25 |
Extend customizability of auto-checkpoint policy |
PSU |
ZULU-91760 |
17,21,25 |
YAML-like format for auto-checkpoint policy |
PSU |
ZULU-92308 |
8 |
"java.vm.info" can’t be overridden at zulu8 |
PSU |
ZULU-92314 |
21 |
Increase a threshold in TimedAcquireLeak |
PSU |
ZULU-92472 |
25 |
CI: Fix PingPong test exclusion |
PSU |
ZULU-92822 |
21 |
Add to Exlude List CI: Failed test java/util/concurrent/locks/Lock/TimedAcquireLeak.java in zulu21-crac |
PSU |
ZULU-93044 |
25 |
CI: Failed test gc/TestUseGCOverheadLimit.java#G1 in zulu25-default |
PSU |
ZULU-93231 |
25 |
Add to Exclude List CI: Failed test compiler/loopopts/superword/TestAlignVectorFuzzer.java#CompileOnly in zulu25-default |
PSU |
ZULU-93308 |
17,21,25 |
Post-review cleanup in AutoCheckpointPolicy |
PSU |
ZULU-93345 |
17,21,25 |
Fixup default auto-checkpoint policy |
PSU |
ZULU-93456 |
17,21,25,27 |
Connect to Starbase & remote checkpoint |
PSU |
ZULU-93953 |
17,21,25,27 |
Integrate latest Warp fixes into Zulu Oct 2026 |
PSU |
ZULU-94118 |
17,21,25 |
CI: Failed test compiler/jvmci/JVM_GetJVMCIRuntimeTest.java in zulu26-crac |
PSU |
ZULU-94514 |
17,21,25 |
PSU |
|
ZULU-95429 |
8,11,17,21,25,27 |
OOB read issue in FreeType 2.14.3 |
PSU |
ZULU-95511 |
17 |
CI: Exclude tests Aug 2026 |
PSU |
ZULU-95619 |
17,21,25 |
Autonomous auto-checkpoint fixups |
PSU |
ZULU-96345 |
17,21,25,27 |
Trailing whitespaces and blank lines at EOF in crac-containers test |
PSU |
ZULU-96579 |
27 |
Live metrics |
PSU |
ZULU-96581 |
21,25 |
Fix CRaC tests after JDK-8372615 |
PSU |
ZULU-96589 |
11,17,21,25,27 |
Update JLine to version 3.30.16 |
PSU |
ZULU-96798 |
27 |
build/CheckFiles.java fails on CRaC builds |
PSU |
ZULU-96899 |
11,17,21,25 |
Update Capstone library to v5.0.9 or higher |
PSU |
ZULU-97276 |
11,17,21,25,27 |
jdk/internal/jline/AbstractWindowsTerminalTest.java and KeyConversionTest.java do not compile after the JLine update to 3.30.16 |
PSU |
ZULU-97345 |
17,21,25 |
Exclude tests Sep 2026 |
PSU |
ZULU-98326 |
17,21,25 |
Fix deficiencies of previous CPUFeatures backports |
PSU |
ZULU-98421 |
17,21,25 |
CRaC⇐25: JVMCIError: Missing CPU feature constants: [SVE256] |
PSU |
ZULU-98429 |
17,21,25,27 |
Starbase code is missing includes |
PSU |
ZULU-98797 |
25 |
Update PQJSSE for Oct PSU release |
PSU |
ZULU-99037 |
27 |
Update JFX to zulu27.0.1+101 |
PSU |
ZULU-99400 |
17,21,25,27 |
Integrate latest CRIU fixes into Zulu Oct 2026 |
PSU |
ZULU-99467 |
27 |
Starbase mutex is not initialized |
PSU |
ZULU-99577 |
27 |
ToolTabSnippetTest.testAnnotation fails after JLine 3.30.16 upgrade (ZULU-96589) |
PSU |
ZULU-99740 |
21,25,27 |
[CRaC] zulu21: error: 'MutexLocker' was not declared in this scope |
PSU |
ZULU-99741 |
17,21 |
[CRaC] 21+17: Fix CPUInfoTest.java |
PSU |
ZULU-99789 |
25,27 |
jdk/internal/jline/JLineConsoleProviderTest.java fails after the JLine update to 3.30.16 (ZULU-96589) |
PSU |
ZULU-99818 |
21 |
Update JFX to zulu23.0.9+101 |
PSU |
ZULU-99842 |
25 |
Update JFX to zulu25.0.5+100 |
PSU |
ZULU-99843 |
8 |
Update JFX to zulu8u512-b01 |
PSU |
ZULU-99936 |
17 |
Update JFX to zulu22.0.11+102 |
PSU |
ZULU-99937 |
11 |
Update JFX to zulu19.0.17+101 |
PSU |
ZULU-100058 |
8 |
Update JFX to zulu8u512-b02 |
PSU |
Fixes and Enhancements Specific to Azul Zulu Builds of OpenJDK With JavaFX
The following table describes the Azul Zulu changes implemented in this release.
| Issue ID | Azul Zulu Version | Synopsis | CPU/PSUCPU fixes are included in both CPU and PSU bundles. PSU fixes are included in the PSU bundles only. |
|---|---|---|---|
ZULU-96350 |
8 |
JFX8 build failure after 8385281 |
CPU,PSU |
ZULU-96503 |
8 |
Another maven proxy issue |
CPU,PSU |
ZULU-97984 |
21 |
Build failure after 8383209 |
PSU |
ZULU-97985 |
8 |
Build failure after 8388783 |
PSU |
ZULU-98472 |
21 |
The JFX23 is not able to be built for Win32 |
PSU |
ZULU-99439 |
21 |
WebKit SYSV_ABI attribute is applied on non-x86_64 Windows targets |
PSU |
ZULU-99506 |
21 |
System tests fail to compile after 8328629: fail(Throwable) not available in JUnit 4 |
PSU |
ZULU-99536 |
21 |
Intermittent timeouts in javafx.web tests due to races in TestBase |
PSU |
ZULU-99791 |
17 |
Windows build fails: TestRunnerShared misses JavaScriptCore private headers |
PSU |