Release notes for Red Hat build of OpenJDK 8.0.422
Abstract
Preface Copy linkLink copied to clipboard!
Open Java Development Kit (OpenJDK) is a free and open source implementation of the Java Platform, Standard Edition (Java SE). The Red Hat build of OpenJDK is available in four versions: 8u, 11u, 17u, and 21u.
Packages for the Red Hat build of OpenJDK are available on Red Hat Enterprise Linux and Microsoft Windows platforms and shipped as a JDK and a JRE in the Red Hat Ecosystem Catalog.
Providing feedback on Red Hat build of OpenJDK documentation Copy linkLink copied to clipboard!
To report an error or to improve our documentation, log in to your Red Hat Jira account and submit an issue. If you do not have a Red Hat Jira account, then you will be prompted to create an account.
Procedure
- Click the following link to create a ticket.
- Enter a brief description of the issue in the Summary.
- Provide a detailed description of the issue or enhancement in the Description. Include a URL to where the issue occurs in the documentation.
- Clicking Create creates and routes the issue to the appropriate documentation team.
Making open source more inclusive Copy linkLink copied to clipboard!
Red Hat is committed to replacing problematic language in our code, documentation, and web properties. We are beginning with these four terms: master, slave, blacklist, and whitelist. Because of the enormity of this endeavor, these changes will be implemented gradually over several upcoming releases. For more details, see our CTO Chris Wright’s message.
Chapter 1. Support policy Copy linkLink copied to clipboard!
Red Hat will support select major versions of Red Hat build of OpenJDK in its products. For consistency, these are the same versions that Oracle designates as long-term support (LTS) for the Oracle JDK.
A major version of Red Hat build of OpenJDK will be supported for a minimum of six years from the time that version is first introduced. For more information, see the OpenJDK Life Cycle and Support Policy.
RHEL 6 reached the end of life in November 2020. Because of this, Red Hat build of OpenJDK is not supporting RHEL 6 as a supported configuration.
Chapter 2. Differences from upstream OpenJDK 8 Copy linkLink copied to clipboard!
Red Hat build of OpenJDK in Red Hat Enterprise Linux (RHEL) contains a number of structural changes from the upstream distribution of OpenJDK. The Microsoft Windows version of Red Hat build of OpenJDK attempts to follow RHEL updates as closely as possible.
The following list details the most notable Red Hat build of OpenJDK 8 changes:
- FIPS support. Red Hat build of OpenJDK 8 automatically detects whether RHEL is in FIPS mode and automatically configures Red Hat build of OpenJDK 8 to operate in that mode. This change does not apply to Red Hat build of OpenJDK builds for Microsoft Windows.
- Cryptographic policy support. Red Hat build of OpenJDK 8 obtains the list of enabled cryptographic algorithms and key size constraints from the RHEL system configuration. These configuration components are used by the Transport Layer Security (TLS) encryption protocol, the certificate path validation, and any signed JARs. You can set different security profiles to balance safety and compatibility. This change does not apply to Red Hat build of OpenJDK builds for Microsoft Windows.
-
Red Hat build of OpenJDK on RHEL dynamically links against native libraries such as
zlibfor archive format support andlibjpeg-turbo,libpng, andgiflibfor image support. RHEL also dynamically links againstHarfbuzzandFreetypefor font rendering and management. This change does not apply to Red Hat build of OpenJDK builds for Microsoft Windows. -
The
src.zipfile includes the source for all the JAR libraries shipped with Red Hat build of OpenJDK. - Red Hat build of OpenJDK on RHEL uses system-wide timezone data files as a source for timezone information.
- Red Hat build of OpenJDK on RHEL uses system-wide CA certificates.
- Red Hat build of OpenJDK on Microsoft Windows includes the latest available timezone data from RHEL.
- Red Hat build of OpenJDK on Microsoft Windows uses the latest available CA certificate from RHEL.
Chapter 3. Planned changes to naming convention for Windows build artifacts Copy linkLink copied to clipboard!
From October 2024 onward, Red Hat plans to introduce naming changes for some files that are distributed as part of Red Hat build of OpenJDK releases for Windows Server platforms.
These file naming changes will affect both the .zip archive and .msi installers that Red Hat provides for the JDK, JRE and debuginfo packages for Red Hat build of OpenJDK versions 8, 11, and 17.
The aim of this change is to adopt a common naming convention that is consistent across all versions of OpenJDK that Red Hat supports. Red Hat build of OpenJDK versions 8, 11, and 17 will be aligned with the naming convention that Red Hat has already adopted for Red Hat build of OpenJDK 21. This means that Red Hat build of OpenJDK 21 will not require any naming changes.
These planned changes do not affect the files for the Linux portable builds of any Red Hat build of OpenJDK version.
Red Hat build of OpenJDK 8.0.422 is the last release where Red Hat plans to use the old naming convention for Windows artifacts. The following list provides an example of how the planned naming changes will affect each file for future releases of Red Hat build of OpenJDK 8:
MSI installer
-
Old file name:
java-1.8.0-openjdk-1.8.0.<version>.redhat.windows.x86_64.msi -
New file name:
java-1.8.0-openjdk-1.8.0.<version>.win.x86_64.msi
-
Old file name:
.ziparchive for JDK package-
Old file name:
java-1.8.0-openjdk-1.8.0.<version>.redhat.windows.x86_64.zip -
New file name:
java-1.8.0-openjdk-1.8.0.<version>.win.jdk.x86_64.zip
-
Old file name:
.ziparchive for for JRE package-
Old file name:
java-1.8.0-openjdk-jre-1.8.0.<version>.redhat.windows.x86_64.zip -
New file name:
java-1.8.0-openjdk-1.8.0.<version>.win.jre.x86_64.zip
-
Old file name:
.ziparchive for debuginfo package-
Old file name:
java-1.8.0-openjdk-1.8.0.<version>.redhat.windows.x86_64.debuginfo.zip -
New file name:
java-1.8.0-openjdk-1.8.0.<version>.win.debuginfo.x86_64.zip
-
Old file name:
Chapter 4. Red Hat build of OpenJDK 8.0.422 release notes Copy linkLink copied to clipboard!
The latest Red Hat build of OpenJDK 8 release might include new features. Additionally, the latest release might enhance, deprecate, or remove features that originated from previous Red Hat build of OpenJDK 8 releases.
For all the other changes and security fixes, see OpenJDK 8u422 Released.
Red Hat build of OpenJDK new features and enhancements
Review the following release notes to understand new features and feature enhancements that Red Hat build of OpenJDK 8.0.422 provides:
System properties for controlling the keep-alive behavior of HTTPURLConnection
Red Hat build of OpenJDK 8.0.422 includes the following new system properties that you can use to control the keep-alive behavior of HTTPURLConnection in situations where the server does not specify a keep-alive time:
-
The
http.keepAlive.time.serverproperty controls the number of seconds before an idle connection to a server is closed. -
The
http.keepAlive.time.proxyproperty controls the number of seconds before an idle connection to a proxy is closed.
If the server or proxy specifies a keep-alive time in a Keep-Alive response header, this keep-alive time takes precedence over any value that you specify for the http.keepAlive.time.server or http.keepAlive.time.proxy property.
See JDK-8278067 (JDK Bug System).
GlobalSign R46 and E46 root certificates added
In Red Hat build of OpenJDK 8.0.422, the cacerts truststore includes two GlobalSign TLS root certificates:
- Certificate 1
- Name: GlobalSign
- Alias name: globalsignr46
- Distinguished name: CN=GlobalSign Root R46, O=GlobalSign nv-sa, C=BE
- Certificate 2
- Name: GlobalSign
- Alias name: globalsigne46
- Distinguished name: CN=GlobalSign Root E46, O=GlobalSign nv-sa, C=BE
Chapter 5. Advisories related to this release Copy linkLink copied to clipboard!
The following advisories are issued to document bug fixes and CVE fixes included in this release:
Revised on 2024-07-22 15:53:32 UTC