java

Enterprise Performance Pack Release Notes

Java SE 8u421 Enterprise Performance Pack - Bug Fixes and Updates

The following sections summarize changes made in Java SE 8u421 Enterprise Performance Pack. Bug fixes and any other changes are listed below in date order, most current update first. Note that bug fixes in the previous BPR are also included in the current update release.

 

Changes in Java SE 8u421-Perf b31

Bug Fixes

Release date: July 16, 2024
BugId Category Subcategory Summary
JDK-8333859 core-libs java.util.jar Pack200.newUnpacker().unpack() throws IOException

Java™ SE Development Kit 8, Update 421 Enterprise Performance Pack (JDK 8u421-PERF)

Release date: July 16, 2024

The full version string for this update release is 8u421-perf-b07 (where "b" means "build"). The version number is 8u421-perf.

 

IANA TZ Data 2024a

For more information, refer to Timezone Data Versions in the JRE Software.

 

Security Baselines

The security baselines for the Java Runtime at the time of the release of JDK 8u421 are specified in the following table:

Java Family Version Security Baseline (Full Version String)
88u421-b09

 

Keeping the JDK up to Date

Oracle recommends that the JDK is updated with each Critical Patch Update. In order to determine if a release is the latest, the Security Baseline page can be used to determine which is the latest version for each release family.

Critical patch updates, which contain security vulnerability fixes, are announced one year in advance on Critical Patch Updates, Security Alerts and Bulletins. It is not recommended that this JDK (version 8u421) be used after the next critical patch update scheduled for October 15, 2024.

Java Management Service, available to all users, can help you find vulnerable Java versions in your systems. Java SE Subscribers and customers running in Oracle Cloud can use Java Management Service to update Java Runtimes and to do further security reviews like identifying potentially vulnerable third party libraries used by your Java programs. Existing Java Management Service user click here to log in to your dashboard. The Java Management Service Documentation provides a list of features available to everyone and those available only to customers. Learn more about using Java Management Service to monitor and secure your Java Installations.

For systems unable to reach the Oracle Servers, a secondary mechanism expires this JRE (version 8u421) on 2024-11-15. After either condition is met (new release becoming available or expiration date reached), the JRE will provide additional warnings and reminders to users to update to the newer version. For more information, see 23.1.2 JRE Expiration Date in the Java Platform, Standard Edition Deployment Guide.

 

Other Notes

security-libs/java.security
 Added GlobalSign R46 and E46 Root CA Certificates (JDK-8316138)

The following root certificates have been added to the cacerts truststore:

+ GlobalSign

  + globalsignr46
    DN: CN=GlobalSign Root R46, O=GlobalSign nv-sa, C=BE

+ GlobalSign
  + globalsigne46
    DN: CN=GlobalSign Root E46, O=GlobalSign nv-sa, C=BE

security-libs/javax.net.ssl
 Disabled DTLS 1.0 (JDK-8256660)

DTLS 1.0 has been disabled by default, by adding "DTLSv1.0" to the jdk.tls.disabledAlgorithms security property in the java.security configuration file. DTLS 1.0 has weakened over time and lacks support for stronger cipher suites. Any attempts to use DTLSv1.0 will fail with an SSLHandshakeException. Users can, at their own risk, re-enable the version by removing "DTLSv1.0" from the jdk.tls.disabledAlgorithms security property.

 

Changes in Java SE 8u421-Perf

Bug Fixes

JDK 8u421 Enterprise Performance Pack includes the following fixes from JDK 17:
# BugId Component Summary
1JDK-8321599hotspot/compilerData loss in AVX3 Base64 decoding
2JDK-8310844hotspot/compiler[AArch64] C1 compilation fails because monitor offset in OSR buffer is too large for immediate
3JDK-8324050hotspot/compilerIssue store-store barrier after re-materializing objects during deoptimization
4JDK-8326638hotspot/compilerCrash in PhaseIdealLoop::remix_address_expressions due to unexpected Region instead of Loop
5JDK-8319372hotspot/compilerC2 compilation fails with "Bad immediate dominator info"
6JDK-8282414hotspot/compilerx86: Enhance the assembler to generate more compact instructions
7JDK-8298129hotspot/jfrLet checkpoint event sizes grow beyond u4 limit
8JDK-8298649hotspot/jfrJFR: RemoteRecordingStream support for checkpoint event sizes beyond u4
9JDK-8286740hotspot/jfrJFR: Active Setting event emitted incorrectly
10JDK-8326106hotspot/jfrWrite and clear stack trace table outside of safepoint
11JDK-8298472hotspot/runtimeAArch64: Detect Ampere-1 and Ampere-1A CPUs and set default options
12JDK-8278241hotspot/runtimeImplement JVM SpinPause on linux-aarch64
13JDK-8296437hotspot/runtimeNMT incurs costs if disabled
14JDK-8327036hotspot/runtime[macosx-aarch64] SIGBUS in MarkActivationClosure::do_code_blob reached from Unsafe_CopySwapMemory0
15JDK-8319048hotspot/runtimeMonitor deflation unlink phase prolongs time to safepoint
16JDK-8324933hotspot/runtimeConcurrentHashTable::statistics_calculate synchronization is expensive