Liberica JDK 8u492+9: Release Notes$$$Published: April 21; 2026$$$$$$1. Version information$$$This document provides information about Liberica JDK 8u492 release. The full version string for this update release is 8u492+9. The version number is 8.$$$$$$Liberica JDK 8 is distributed as .apk; .rpm; .zip; .deb; .pkg; and .tar.gz packages. Please select the most appropriate for your purposes.$$$$$$2. What’s New$$$This release contains the following updates and new features.$$$$$$Notable Changes$$$This is the list of the notable issues fixed in this release.$$$$$$Issue IDt$$$JDK-8369282$$$$$$Summary: Distrust TLS server certificates anchored by Chunghwa ePKI Root CA$$$$$$Description: TLS server certificates anchored by the Chunghwa root CAs are distrusted or distrusted after a specific date by Google and Mozilla. The restrictions will be enforced in the SunJSSE Provider of the Java Secure Socket Extension (JSSE) API. A TLS session will not be negotiated if the server’s certificate chain is anchored by any of the mentioned Certificate Authorities and the certificate’s notBefore date is after March 17; 2026. An application will receive an Exception with a message indicating the trust anchor (root) is not trusted.$$$$$$JDK-8373476$$$$$$Summary: Update Timezone Data to 2025c$$$$$$Description: The 2025c release of the tz code and data is available. This release mostly changes code and commentary. The only changed data are leap second table expiration and pre-1976 time in Baja California. This release contains several code changes for compatibility with FreeBSD.$$$$$$IANA TZ Data version$$$This release of Liberica JDK 8u492 comes with the 2025c version of the in-tree copy of the IANA timezone database. The following are the key features of this version.$$$$$$This release mostly changes code and commentary. The only changed data are leap second table expiration and pre-1976 time in Baja California.$$$$$$Briefly$$$Several code changes for compatibility with FreeBSD.$$$$$$Changes to past timestamps$$$Baja California agreed with California’s DST rules in 1953 and in 1961 through 1975; instead of observing standard time all year.$$$$$$Changes to build procedure$$$Files in distributed tarballs now have correct commit times. Formerly; the committer’s time zone was incorrectly ignored.$$$$$$Changes to code$$$An unset TZ is no longer invalid when /etc/localtime is missing; and is abbreviated UTC not -00. This reverts to 2024b behavior.$$$$$$New function offtime_r; short for fixed-offset localtime_rz. It is defined if STD_INSPIRED is defined.$$$$$$Changes to commentary$$$The leapseconds file contains commentary about the IERS and NIST last-modified and expiration timestamps for leap second data.$$$$$$For more information; see JDK-8373476.$$$$$$3. Known Issues$$$This release does not contain any known issues.$$$$$$4. Fixed CVEs$$$This is the list of the security issues fixed in this release. CVSS scores are provided using the CVSS version 3.1 scoring system.$$$$$$CVE IDtCVSS scoretComponenttModuletAttack VectortComplexitytPrivilegestUser InteractiontScopetConfidentialitytIntegritytAvailability$$$CVE-2026-20652$$$$$$7.5$$$$$$javafx$$$$$$web$$$$$$network$$$$$$low$$$$$$none$$$$$$none$$$$$$unchanged$$$$$$none$$$$$$none$$$$$$high$$$$$$CVE-2026-22007$$$$$$2.9$$$$$$security-libs$$$$$$java.security$$$$$$local$$$$$$high$$$$$$none$$$$$$none$$$$$$unchanged$$$$$$low$$$$$$none$$$$$$none$$$$$$CVE-2026-22013$$$$$$5.3$$$$$$security-libs$$$$$$org.ietf.jgss$$$$$$network$$$$$$high$$$$$$none$$$$$$required$$$$$$unchanged$$$$$$high$$$$$$none$$$$$$none$$$$$$CVE-2026-22016$$$$$$7.5$$$$$$xml$$$$$$jaxp$$$$$$network$$$$$$low$$$$$$none$$$$$$none$$$$$$unchanged$$$$$$high$$$$$$none$$$$$$none$$$$$$CVE-2026-22018$$$$$$3.7$$$$$$core-libs$$$$$$java.util$$$$$$network$$$$$$high$$$$$$none$$$$$$none$$$$$$unchanged$$$$$$none$$$$$$none$$$$$$low$$$$$$CVE-2026-22021$$$$$$5.3$$$$$$security-libs$$$$$$java.security$$$$$$network$$$$$$low$$$$$$none$$$$$$none$$$$$$unchanged$$$$$$none$$$$$$none$$$$$$low$$$$$$CVE-2026-23865$$$$$$5.3$$$$$$client-libs$$$$$$2d$$$$$$local$$$$$$low$$$$$$none$$$$$$required$$$$$$unchanged$$$$$$low$$$$$$low$$$$$$low$$$$$$CVE-2026-34268$$$$$$2.9$$$$$$security-libs$$$$$$java.secur

Liberica JDK 8u482+10: Release Notes$$$Published: January 20; 2026$$$$$$1. Version information$$$This document provides information about Liberica JDK 8u482 release. The full version string for this update release is 8u482+10. The version number is 8.$$$$$$Liberica JDK 8 is distributed as .apk; .rpm; .zip; .deb; .pkg; and .tar.gz packages. Please select the most appropriate for your purposes.$$$$$$$$$2. What’s New$$$This release contains the following updates and new features.$$$$$$Notable Changes$$$This is the list of the notable issues fixed in this release.$$$$$$$$$$$$JDK-8182577$$$$$$Summary: Exception when Tab key moves focus to a JCheckbox with a custom ButtonModel$$$$$$Description: As stated in JDK-8182577; when a custom ButtonModel is used and keyboard focus is moved by pressing TAB key; then in LayoutFocusTraversalPolicy.accept() method it typecasts buttonmodel object to JToggleButton.ToggleButtonModel which results in ClassCastException. Added getModel() method to ButtonModel interface; which results in custom ButtonModel to implement this method. Also; LayoutFocusTraversalPolicy.accept() has been modified to store the model object as ButtonModel object instead of wrongly assuming as JToggleButton.ToggleButtonModel.$$$$$$$$$IANA TZ Data version$$$This release of Liberica JDK 8u482 comes with the 2025b version of the in-tree copy of the IANA timezone database. The following are the key features of this version.$$$$$$Future Timestamps$$$New Time Zone:$$$$$$A new time zone; America/Coyhaique; is created for Chile’s Aysén Region; which will now observe UTC-03 year-round (no daylight saving time).$$$$$$This diverges from America/Santiago starting March 20; 2025.$$$$$$Aysén will not change clocks on April 5; 2025.$$$$$$This aligns Aysén with Magallanes Region.$$$$$$Past Timestamps$$$Iran Time Change Correction:$$$$$$Iran changed from UTC+04 to UTC+03:30 on November 10; 1978; not at the end of the year as previously recorded.$$$$$$Code Fixes$$$Improved behavior for the zic tool:$$$$$$It no longer creates invalid symlinks when using -l with multiple arguments.$$$$$$A buffer underflow issue is resolved.$$$$$$For more information; see JDK-8352716.$$$$$$3. Known Issues$$$This release does not contain any known issues.$$$$$$4. Fixed CVEs$$$This is the list of the security issues fixed in this release. CVSS scores are provided using the CVSS version 3.1 scoring system.$$$$$$$$$CVE-2025-43368 - 5.9$$$$$$CVE-2025-47219 - 3.1$$$$$$CVE-2025-6021 - 5.9$$$$$$CVE-2025-6052 - 3.7$$$$$$CVE-2025-7424 - 5.5$$$$$$CVE-2025-7425 - 7.5$$$$$$CVE-2026-21925 - 4.8$$$$$$CVE-2026-21932 - 7.4$$$$$$CVE-2026-21933 - 6.1$$$$$$CVE-2026-21945 - 7.5$$$$$$CVE-2026-21947 - 3.1$$$$$$For more details on CVEs and other issues refer - https://docs.bell-sw.com/liberica-jdk/8u482b10/general/release-notes/

Liberica JDK 8u482+10: Release Notes$$$Published: January 20; 2026$$$$$$1. Version information$$$This document provides information about Liberica JDK 8u482 release. The full version string for this update release is 8u482+10. The version number is 8.$$$$$$Liberica JDK 8 is distributed as .apk; .rpm; .zip; .deb; .pkg; and .tar.gz packages. Please select the most appropriate for your purposes.$$$$$$$$$2. What’s New$$$This release contains the following updates and new features.$$$$$$Notable Changes$$$This is the list of the notable issues fixed in this release.$$$$$$$$$$$$JDK-8182577$$$$$$Summary: Exception when Tab key moves focus to a JCheckbox with a custom ButtonModel$$$$$$Description: As stated in JDK-8182577; when a custom ButtonModel is used and keyboard focus is moved by pressing TAB key; then in LayoutFocusTraversalPolicy.accept() method it typecasts buttonmodel object to JToggleButton.ToggleButtonModel which results in ClassCastException. Added getModel() method to ButtonModel interface; which results in custom ButtonModel to implement this method. Also; LayoutFocusTraversalPolicy.accept() has been modified to store the model object as ButtonModel object instead of wrongly assuming as JToggleButton.ToggleButtonModel.$$$$$$$$$IANA TZ Data version$$$This release of Liberica JDK 8u482 comes with the 2025b version of the in-tree copy of the IANA timezone database. The following are the key features of this version.$$$$$$Future Timestamps$$$New Time Zone:$$$$$$A new time zone; America/Coyhaique; is created for Chile’s Aysén Region; which will now observe UTC-03 year-round (no daylight saving time).$$$$$$This diverges from America/Santiago starting March 20; 2025.$$$$$$Aysén will not change clocks on April 5; 2025.$$$$$$This aligns Aysén with Magallanes Region.$$$$$$Past Timestamps$$$Iran Time Change Correction:$$$$$$Iran changed from UTC+04 to UTC+03:30 on November 10; 1978; not at the end of the year as previously recorded.$$$$$$Code Fixes$$$Improved behavior for the zic tool:$$$$$$It no longer creates invalid symlinks when using -l with multiple arguments.$$$$$$A buffer underflow issue is resolved.$$$$$$For more information; see JDK-8352716.$$$$$$3. Known Issues$$$This release does not contain any known issues.$$$$$$4. Fixed CVEs$$$This is the list of the security issues fixed in this release. CVSS scores are provided using the CVSS version 3.1 scoring system.$$$$$$$$$CVE-2025-43368 - 5.9$$$$$$CVE-2025-47219 - 3.1$$$$$$CVE-2025-6021 - 5.9$$$$$$CVE-2025-6052 - 3.7$$$$$$CVE-2025-7424 - 5.5$$$$$$CVE-2025-7425 - 7.5$$$$$$CVE-2026-21925 - 4.8$$$$$$CVE-2026-21932 - 7.4$$$$$$CVE-2026-21933 - 6.1$$$$$$CVE-2026-21945 - 7.5$$$$$$CVE-2026-21947 - 3.1$$$$$$For more details on CVEs and other issues refer - https://docs.bell-sw.com/liberica-jdk/8u482b10/general/release-notes/

Liberica JDK 8u472+11: Release Notes$$$Published: November 20; 2025$$$$$$1. Version information$$$This document provides information about Liberica JDK 8u472 release. This is a cumulative release of Liberica JDK that includes all fixed bugs and CVEs from Liberica JDK 8u472+9. For the list of updates; see What’s New.$$$$$$The full version string for this update release is 8u472+11. The version number is 8.$$$$$$Liberica JDK 8 is distributed as .apk; .rpm; .zip; .deb; .pkg; and .tar.gz packages. Please select the most appropriate for your purposes.$$$$$$2. What’s New$$$This release contains the following updates and new features.$$$$$$IANA TZ Data update$$$This release of Liberica JDK 8u472 upgrades the in-tree copy of the IANA timezone database to 2025b. The following are the key changes of this update:$$$$$$Future Timestamps:$$$New Time Zone:$$$$$$A new time zone; America/Coyhaique; is created for Chile’s Aysén Region; which will now observe UTC-03 year-round (no daylight saving time).$$$$$$This diverges from America/Santiago starting March 20; 2025.$$$$$$Aysén will not change clocks on April 5; 2025.$$$$$$This aligns Aysén with Magallanes Region.$$$$$$Past Timestamps:$$$Iran Time Change Correction:$$$$$$Iran changed from UTC+04 to UTC+03:30 on November 10; 1978; not at the end of the year as previously recorded.$$$$$$Code Fixes:$$$Improved behavior for the zic tool:$$$$$$It no longer creates invalid symlinks when using -l with multiple arguments.$$$$$$A buffer underflow issue is resolved.$$$$$$For more information; see JDK-8352716.$$$$$$3. Known Issues$$$This release does not contain any known issues.$$$$$$4. Fixed CVEs$$$This is the list of the security issues fixed in this release. CVSS scores are provided using the CVSS version 3.1 scoring system.$$$$$$CVE IDtCVSS scoretComponenttModuletAttack VectortComplexitytPrivilegestUser InteractiontScopetConfidentialitytIntegritytAvailability$$$CVE-2025-10911$$$$$$5.5$$$$$$javafx$$$$$$libxslt$$$$$$local$$$$$$low$$$$$$none$$$$$$required$$$$$$unchanged$$$$$$none$$$$$$none$$$$$$high$$$$$$CVE-2025-6021$$$$$$7.5$$$$$$javafx$$$$$$libxml2$$$$$$network$$$$$$low$$$$$$none$$$$$$none$$$$$$unchanged$$$$$$none$$$$$$none$$$$$$high$$$$$$CVE-2025-7424$$$$$$7.8$$$$$$javafx$$$$$$libxslt$$$$$$local$$$$$$high$$$$$$none$$$$$$none$$$$$$changed$$$$$$none$$$$$$high$$$$$$high$$$$$$CVE-2025-7425$$$$$$7.8$$$$$$javafx$$$$$$libxslt$$$$$$local$$$$$$high$$$$$$none$$$$$$none$$$$$$changed$$$$$$none$$$$$$high$$$$$$high$$$$$$5. Resolved Issues$$$JFX issues$$$This is the list of JFX issues fixed in this release.$$$$$$Issue IDtSummary$$$JDK-8361893$$$$$$Update libxml2 to 2.14.5$$$$$$JDK-8368691$$$$$$Update libxml2 to 2.14.6$$$$$$JDK-8370632$$$$$$Additional libxslt 1.1.43 fixes$$$$$$6. Updates to Third Party Libraries$$$This release does not contain any changes in the third party libraries.$$$$$$7. Upgrading to the New Version$$$To keep your Liberica JDK up-to-date and secure; always upgrade to the newest available version once it is released. To upgrade; install the new version over the previous one. For the installation instructions; see Liberica JDK Installation Guide.

Liberica JDK 8u472+11: Release Notes$$$Published: November 20; 2025$$$$$$1. Version information$$$This document provides information about Liberica JDK 8u472 release. This is a cumulative release of Liberica JDK that includes all fixed bugs and CVEs from Liberica JDK 8u472+9. For the list of updates; see What’s New.$$$$$$The full version string for this update release is 8u472+11. The version number is 8.$$$$$$Liberica JDK 8 is distributed as .apk; .rpm; .zip; .deb; .pkg; and .tar.gz packages. Please select the most appropriate for your purposes.$$$$$$2. What’s New$$$This release contains the following updates and new features.$$$$$$IANA TZ Data update$$$This release of Liberica JDK 8u472 upgrades the in-tree copy of the IANA timezone database to 2025b. The following are the key changes of this update:$$$$$$Future Timestamps:$$$New Time Zone:$$$$$$A new time zone; America/Coyhaique; is created for Chile’s Aysén Region; which will now observe UTC-03 year-round (no daylight saving time).$$$$$$This diverges from America/Santiago starting March 20; 2025.$$$$$$Aysén will not change clocks on April 5; 2025.$$$$$$This aligns Aysén with Magallanes Region.$$$$$$Past Timestamps:$$$Iran Time Change Correction:$$$$$$Iran changed from UTC+04 to UTC+03:30 on November 10; 1978; not at the end of the year as previously recorded.$$$$$$Code Fixes:$$$Improved behavior for the zic tool:$$$$$$It no longer creates invalid symlinks when using -l with multiple arguments.$$$$$$A buffer underflow issue is resolved.$$$$$$For more information; see JDK-8352716.$$$$$$3. Known Issues$$$This release does not contain any known issues.$$$$$$4. Fixed CVEs$$$This is the list of the security issues fixed in this release. CVSS scores are provided using the CVSS version 3.1 scoring system.$$$$$$CVE IDtCVSS scoretComponenttModuletAttack VectortComplexitytPrivilegestUser InteractiontScopetConfidentialitytIntegritytAvailability$$$CVE-2025-10911$$$$$$5.5$$$$$$javafx$$$$$$libxslt$$$$$$local$$$$$$low$$$$$$none$$$$$$required$$$$$$unchanged$$$$$$none$$$$$$none$$$$$$high$$$$$$CVE-2025-6021$$$$$$7.5$$$$$$javafx$$$$$$libxml2$$$$$$network$$$$$$low$$$$$$none$$$$$$none$$$$$$unchanged$$$$$$none$$$$$$none$$$$$$high$$$$$$CVE-2025-7424$$$$$$7.8$$$$$$javafx$$$$$$libxslt$$$$$$local$$$$$$high$$$$$$none$$$$$$none$$$$$$changed$$$$$$none$$$$$$high$$$$$$high$$$$$$CVE-2025-7425$$$$$$7.8$$$$$$javafx$$$$$$libxslt$$$$$$local$$$$$$high$$$$$$none$$$$$$none$$$$$$changed$$$$$$none$$$$$$high$$$$$$high$$$$$$5. Resolved Issues$$$JFX issues$$$This is the list of JFX issues fixed in this release.$$$$$$Issue IDtSummary$$$JDK-8361893$$$$$$Update libxml2 to 2.14.5$$$$$$JDK-8368691$$$$$$Update libxml2 to 2.14.6$$$$$$JDK-8370632$$$$$$Additional libxslt 1.1.43 fixes$$$$$$6. Updates to Third Party Libraries$$$This release does not contain any changes in the third party libraries.$$$$$$7. Upgrading to the New Version$$$To keep your Liberica JDK up-to-date and secure; always upgrade to the newest available version once it is released. To upgrade; install the new version over the previous one. For the installation instructions; see Liberica JDK Installation Guide.

Liberica JDK 8u472+11: Release Notes$$$Published: November 20; 2025$$$$$$1. Version information$$$This document provides information about Liberica JDK 8u472 release. This is a cumulative release of Liberica JDK that includes all fixed bugs and CVEs from Liberica JDK 8u472+9. For the list of updates; see What’s New.$$$$$$The full version string for this update release is 8u472+11. The version number is 8.$$$$$$Liberica JDK 8 is distributed as .apk; .rpm; .zip; .deb; .pkg; and .tar.gz packages. Please select the most appropriate for your purposes.$$$$$$2. What’s New$$$This release contains the following updates and new features.$$$$$$IANA TZ Data update$$$This release of Liberica JDK 8u472 upgrades the in-tree copy of the IANA timezone database to 2025b. The following are the key changes of this update:$$$$$$Future Timestamps:$$$New Time Zone:$$$$$$A new time zone; America/Coyhaique; is created for Chile’s Aysén Region; which will now observe UTC-03 year-round (no daylight saving time).$$$$$$This diverges from America/Santiago starting March 20; 2025.$$$$$$Aysén will not change clocks on April 5; 2025.$$$$$$This aligns Aysén with Magallanes Region.$$$$$$Past Timestamps:$$$Iran Time Change Correction:$$$$$$Iran changed from UTC+04 to UTC+03:30 on November 10; 1978; not at the end of the year as previously recorded.$$$$$$Code Fixes:$$$Improved behavior for the zic tool:$$$$$$It no longer creates invalid symlinks when using -l with multiple arguments.$$$$$$A buffer underflow issue is resolved.$$$$$$For more information; see JDK-8352716.$$$$$$3. Known Issues$$$This release does not contain any known issues.$$$$$$4. Fixed CVEs$$$This is the list of the security issues fixed in this release. CVSS scores are provided using the CVSS version 3.1 scoring system.$$$$$$CVE IDtCVSS scoretComponenttModuletAttack VectortComplexitytPrivilegestUser InteractiontScopetConfidentialitytIntegritytAvailability$$$CVE-2025-10911$$$$$$5.5$$$$$$javafx$$$$$$libxslt$$$$$$local$$$$$$low$$$$$$none$$$$$$required$$$$$$unchanged$$$$$$none$$$$$$none$$$$$$high$$$$$$CVE-2025-6021$$$$$$7.5$$$$$$javafx$$$$$$libxml2$$$$$$network$$$$$$low$$$$$$none$$$$$$none$$$$$$unchanged$$$$$$none$$$$$$none$$$$$$high$$$$$$CVE-2025-7424$$$$$$7.8$$$$$$javafx$$$$$$libxslt$$$$$$local$$$$$$high$$$$$$none$$$$$$none$$$$$$changed$$$$$$none$$$$$$high$$$$$$high$$$$$$CVE-2025-7425$$$$$$7.8$$$$$$javafx$$$$$$libxslt$$$$$$local$$$$$$high$$$$$$none$$$$$$none$$$$$$changed$$$$$$none$$$$$$high$$$$$$high$$$$$$5. Resolved Issues$$$JFX issues$$$This is the list of JFX issues fixed in this release.$$$$$$Issue IDtSummary$$$JDK-8361893$$$$$$Update libxml2 to 2.14.5$$$$$$JDK-8368691$$$$$$Update libxml2 to 2.14.6$$$$$$JDK-8370632$$$$$$Additional libxslt 1.1.43 fixes$$$$$$6. Updates to Third Party Libraries$$$This release does not contain any changes in the third party libraries.$$$$$$7. Upgrading to the New Version$$$To keep your Liberica JDK up-to-date and secure; always upgrade to the newest available version once it is released. To upgrade; install the new version over the previous one. For the installation instructions; see Liberica JDK Installation Guide.

. Version information$$$This document provides information about Liberica JDK 8u472 release.$$$$$$The full version string for this update release is 8u472+9. The version number is 8.$$$$$$Liberica JDK 8 is distributed as .apk; .rpm; .zip; .deb; .pkg; and .tar.gz packages. Please select the most appropriate for your purposes.$$$$$$2. What’s New$$$This release contains the following updates and new features.$$$$$$Notable Changes$$$This is the list of the notable issues fixed in this release.$$$$$$Issue IDt$$$JDK-8361212$$$$$$Summary: Removed Four AffirmTrust Root Certificates

. Version information$$$This document provides information about Liberica JDK 8u472 release.$$$$$$The full version string for this update release is 8u472+9. The version number is 8.$$$$$$Liberica JDK 8 is distributed as .apk; .rpm; .zip; .deb; .pkg; and .tar.gz packages. Please select the most appropriate for your purposes.$$$$$$2. What’s New$$$This release contains the following updates and new features.$$$$$$Notable Changes$$$This is the list of the notable issues fixed in this release.$$$$$$Issue IDt$$$JDK-8361212$$$$$$Summary: Removed Four AffirmTrust Root Certificates

Liberica JDK 8u462+11: Release Notes$$$Published: July 16; 2025$$$$$$1. Version information$$$This document provides information about Liberica JDK 8u462 release.$$$$$$The full version string for this update release is 8u462+11. The version number is 8.$$$$$$Liberica JDK 8 is distributed as .apk; .rpm; .zip; .deb; and .tar.gz packages. Please select the most appropriate for your purposes.$$$$$$2. What’s New$$$This release contains the following updates and new features.$$$$$$Notable Changes$$$This is the list of the notable issues fixed in this release.$$$$$$Issue IDt$$$JDK-8303770$$$$$$Summary: Removed Baltimore CyberTrust Root Certificate After Expiry Date$$$$$$Description: The following expired root certificate has been removed from the cacerts keystore: alias name baltimorecybertrustca [jdk]; Distinguished Name: CN=Baltimore CyberTrust Root; OU=CyberTrust; O=Baltimore; C=IE.$$$$$$JDK-8350498$$$$$$Summary: Removed Two Camerfirma Root Certificates$$$$$$Description: The following root certificates; which are terminated and no longer in use; have been removed from the cacerts keystore: alias name camerfirmachamberscommerceca [jdk]; Distinguished Name: CN=Chambers of Commerce Root; OU=http://www.chambersign.org; O=AC Camerfirma SA CIF A82743287; C=EU; alias name camerfirmachambersignca [jdk]; Distinguished Name: CN=Global Chambersign Root - 2008; O=AC Camerfirma S.A.; SERIALNUMBER=A82743287; L=Madrid (see current address at www.camerfirma.com/address); C=EU.$$$$$$JDK-8352716$$$$$$Summary: Update Timezone Data to 2025b$$$$$$Description: The 2025b release of the tz code and data contains the following changes: New zone for Aysén Region in Chile which moves from -04/-03 to -03.$$$$$$JDK-8359170$$$$$$Summary: Added 4 New Root Certificates from Sectigo Limited$$$$$$Description: The following Sectigo Limited root certificates have been added to the cacerts truststore: sectigocodesignroote46; DN: CN=Sectigo Public Code Signing Root E46; O=Sectigo Limited; C=GB; sectigocodesignrootr46; DN: CN=Sectigo Public Code Signing Root R46; O=Sectigo Limited; C=GB; sectigotlsroote46; DN: CN=Sectigo Public Server Authentication Root E46; O=Sectigo Limited; C=GB; sectigotlsrootr46; DN: CN=Sectigo Public Server Authentication Root R46; O=Sectigo Limited; C=GB.$$$$$$IANA TZ Data update$$$This release of Liberica JDK 8u462 upgrades the in-tree copy of the IANA timezone database to 2025b. The following are the key changes of this update:$$$$$$Future Timestamps:$$$New Time Zone:$$$$$$A new time zone; America/Coyhaique; is created for Chile’s Aysén Region; which will now observe UTC-03 year-round (no daylight saving time).$$$$$$This diverges from America/Santiago starting March 20; 2025.$$$$$$Aysén will not change clocks on April 5; 2025.$$$$$$This aligns Aysén with Magallanes Region.$$$$$$Past Timestamps:$$$Iran Time Change Correction:$$$$$$Iran changed from UTC+04 to UTC+03:30 on November 10; 1978; not at the end of the year as previously recorded.$$$$$$Code Fixes:$$$Improved behavior for the zic tool:$$$$$$It no longer creates invalid symlinks when using -l with multiple arguments.$$$$$$A buffer underflow issue is resolved.$$$$$$For more information; see JDK-8352716.$$$$$$3. Known Issues$$$This release does not contain any known issues.$$$$$$4. Fixed CVEs$$$This is the list of the security issues fixed in this release. CVSS scores are provided using the CVSS version 3.1 scoring system.$$$$$$CVE IDtCVSS scoretComponenttModuletAttack VectortComplexitytPrivilegestUser InteractiontScopetConfidentialitytIntegritytAvailability$$$CVE-2025-24855$$$$$$7.5$$$$$$javafx$$$$$$web$$$$$$network$$$$$$high$$$$$$none$$$$$$required$$$$$$unchanged$$$$$$high$$$$$$high$$$$$$high$$$$$$CVE-2025-27113$$$$$$7.5$$$$$$javafx$$$$$$web$$$$$$network$$$$$$high$$$$$$none$$$$$$required$$$$$$unchanged$$$$$$high$$$$$$high$$$$$$high$$$$$$CVE-2025-30749$$$$$$8.1$$$$$$client-libs$$$$$$2d$$$$$$network$$$$$$high$$$$$$none$$$$$$none$$$$$$unchanged$$$$$$high$$$$$$high$$$$$$high$$$$$$CVE-2025-30754$$$$$$4.8$$$$$$security-libs$$$$$$javax.net.ssl$$$$$$network$$$$$$high$$$$$$none$$$$$$none$$$$$$unchanged$$$$$$low$$$$$$low$$$$$$none$$$$$$CVE-2025-30761$$$

Liberica JDK 8u462+11: Release Notes$$$Published: July 16; 2025$$$$$$1. Version information$$$This document provides information about Liberica JDK 8u462 release.$$$$$$The full version string for this update release is 8u462+11. The version number is 8.$$$$$$Liberica JDK 8 is distributed as .apk; .rpm; .zip; .deb; and .tar.gz packages. Please select the most appropriate for your purposes.$$$$$$2. What’s New$$$This release contains the following updates and new features.$$$$$$Notable Changes$$$This is the list of the notable issues fixed in this release.$$$$$$Issue IDt$$$JDK-8303770$$$$$$Summary: Removed Baltimore CyberTrust Root Certificate After Expiry Date$$$$$$Description: The following expired root certificate has been removed from the cacerts keystore: alias name baltimorecybertrustca [jdk]; Distinguished Name: CN=Baltimore CyberTrust Root; OU=CyberTrust; O=Baltimore; C=IE.$$$$$$JDK-8350498$$$$$$Summary: Removed Two Camerfirma Root Certificates$$$$$$Description: The following root certificates; which are terminated and no longer in use; have been removed from the cacerts keystore: alias name camerfirmachamberscommerceca [jdk]; Distinguished Name: CN=Chambers of Commerce Root; OU=http://www.chambersign.org; O=AC Camerfirma SA CIF A82743287; C=EU; alias name camerfirmachambersignca [jdk]; Distinguished Name: CN=Global Chambersign Root - 2008; O=AC Camerfirma S.A.; SERIALNUMBER=A82743287; L=Madrid (see current address at www.camerfirma.com/address); C=EU.$$$$$$JDK-8352716$$$$$$Summary: Update Timezone Data to 2025b$$$$$$Description: The 2025b release of the tz code and data contains the following changes: New zone for Aysén Region in Chile which moves from -04/-03 to -03.$$$$$$JDK-8359170$$$$$$Summary: Added 4 New Root Certificates from Sectigo Limited$$$$$$Description: The following Sectigo Limited root certificates have been added to the cacerts truststore: sectigocodesignroote46; DN: CN=Sectigo Public Code Signing Root E46; O=Sectigo Limited; C=GB; sectigocodesignrootr46; DN: CN=Sectigo Public Code Signing Root R46; O=Sectigo Limited; C=GB; sectigotlsroote46; DN: CN=Sectigo Public Server Authentication Root E46; O=Sectigo Limited; C=GB; sectigotlsrootr46; DN: CN=Sectigo Public Server Authentication Root R46; O=Sectigo Limited; C=GB.$$$$$$IANA TZ Data update$$$This release of Liberica JDK 8u462 upgrades the in-tree copy of the IANA timezone database to 2025b. The following are the key changes of this update:$$$$$$Future Timestamps:$$$New Time Zone:$$$$$$A new time zone; America/Coyhaique; is created for Chile’s Aysén Region; which will now observe UTC-03 year-round (no daylight saving time).$$$$$$This diverges from America/Santiago starting March 20; 2025.$$$$$$Aysén will not change clocks on April 5; 2025.$$$$$$This aligns Aysén with Magallanes Region.$$$$$$Past Timestamps:$$$Iran Time Change Correction:$$$$$$Iran changed from UTC+04 to UTC+03:30 on November 10; 1978; not at the end of the year as previously recorded.$$$$$$Code Fixes:$$$Improved behavior for the zic tool:$$$$$$It no longer creates invalid symlinks when using -l with multiple arguments.$$$$$$A buffer underflow issue is resolved.$$$$$$For more information; see JDK-8352716.$$$$$$3. Known Issues$$$This release does not contain any known issues.$$$$$$4. Fixed CVEs$$$This is the list of the security issues fixed in this release. CVSS scores are provided using the CVSS version 3.1 scoring system.$$$$$$CVE IDtCVSS scoretComponenttModuletAttack VectortComplexitytPrivilegestUser InteractiontScopetConfidentialitytIntegritytAvailability$$$CVE-2025-24855$$$$$$7.5$$$$$$javafx$$$$$$web$$$$$$network$$$$$$high$$$$$$none$$$$$$required$$$$$$unchanged$$$$$$high$$$$$$high$$$$$$high$$$$$$CVE-2025-27113$$$$$$7.5$$$$$$javafx$$$$$$web$$$$$$network$$$$$$high$$$$$$none$$$$$$required$$$$$$unchanged$$$$$$high$$$$$$high$$$$$$high$$$$$$CVE-2025-30749$$$$$$8.1$$$$$$client-libs$$$$$$2d$$$$$$network$$$$$$high$$$$$$none$$$$$$none$$$$$$unchanged$$$$$$high$$$$$$high$$$$$$high$$$$$$CVE-2025-30754$$$$$$4.8$$$$$$security-libs$$$$$$javax.net.ssl$$$$$$network$$$$$$high$$$$$$none$$$$$$none$$$$$$unchanged$$$$$$low$$$$$$low$$$$$$none$$$$$$CVE-2025-30761$$$

Liberica JDK 8u462+11: Release Notes$$$Published: July 16; 2025$$$$$$1. Version information$$$This document provides information about Liberica JDK 8u462 release.$$$$$$The full version string for this update release is 8u462+11. The version number is 8.$$$$$$Liberica JDK 8 is distributed as .apk; .rpm; .zip; .deb; and .tar.gz packages. Please select the most appropriate for your purposes.$$$$$$2. What’s New$$$This release contains the following updates and new features.$$$$$$Notable Changes$$$This is the list of the notable issues fixed in this release.$$$$$$Issue IDt$$$JDK-8303770$$$$$$Summary: Removed Baltimore CyberTrust Root Certificate After Expiry Date$$$$$$Description: The following expired root certificate has been removed from the cacerts keystore: alias name baltimorecybertrustca [jdk]; Distinguished Name: CN=Baltimore CyberTrust Root; OU=CyberTrust; O=Baltimore; C=IE.$$$$$$JDK-8350498$$$$$$Summary: Removed Two Camerfirma Root Certificates$$$$$$Description: The following root certificates; which are terminated and no longer in use; have been removed from the cacerts keystore: alias name camerfirmachamberscommerceca [jdk]; Distinguished Name: CN=Chambers of Commerce Root; OU=http://www.chambersign.org; O=AC Camerfirma SA CIF A82743287; C=EU; alias name camerfirmachambersignca [jdk]; Distinguished Name: CN=Global Chambersign Root - 2008; O=AC Camerfirma S.A.; SERIALNUMBER=A82743287; L=Madrid (see current address at www.camerfirma.com/address); C=EU.$$$$$$JDK-8352716$$$$$$Summary: Update Timezone Data to 2025b$$$$$$Description: The 2025b release of the tz code and data contains the following changes: New zone for Aysén Region in Chile which moves from -04/-03 to -03.$$$$$$JDK-8359170$$$$$$Summary: Added 4 New Root Certificates from Sectigo Limited$$$$$$Description: The following Sectigo Limited root certificates have been added to the cacerts truststore: sectigocodesignroote46; DN: CN=Sectigo Public Code Signing Root E46; O=Sectigo Limited; C=GB; sectigocodesignrootr46; DN: CN=Sectigo Public Code Signing Root R46; O=Sectigo Limited; C=GB; sectigotlsroote46; DN: CN=Sectigo Public Server Authentication Root E46; O=Sectigo Limited; C=GB; sectigotlsrootr46; DN: CN=Sectigo Public Server Authentication Root R46; O=Sectigo Limited; C=GB.$$$$$$IANA TZ Data update$$$This release of Liberica JDK 8u462 upgrades the in-tree copy of the IANA timezone database to 2025b. The following are the key changes of this update:$$$$$$Future Timestamps:$$$New Time Zone:$$$$$$A new time zone; America/Coyhaique; is created for Chile’s Aysén Region; which will now observe UTC-03 year-round (no daylight saving time).$$$$$$This diverges from America/Santiago starting March 20; 2025.$$$$$$Aysén will not change clocks on April 5; 2025.$$$$$$This aligns Aysén with Magallanes Region.$$$$$$Past Timestamps:$$$Iran Time Change Correction:$$$$$$Iran changed from UTC+04 to UTC+03:30 on November 10; 1978; not at the end of the year as previously recorded.$$$$$$Code Fixes:$$$Improved behavior for the zic tool:$$$$$$It no longer creates invalid symlinks when using -l with multiple arguments.$$$$$$A buffer underflow issue is resolved.$$$$$$For more information; see JDK-8352716.$$$$$$3. Known Issues$$$This release does not contain any known issues.$$$$$$4. Fixed CVEs$$$This is the list of the security issues fixed in this release. CVSS scores are provided using the CVSS version 3.1 scoring system.$$$$$$CVE IDtCVSS scoretComponenttModuletAttack VectortComplexitytPrivilegestUser InteractiontScopetConfidentialitytIntegritytAvailability$$$CVE-2025-24855$$$$$$7.5$$$$$$javafx$$$$$$web$$$$$$network$$$$$$high$$$$$$none$$$$$$required$$$$$$unchanged$$$$$$high$$$$$$high$$$$$$high$$$$$$CVE-2025-27113$$$$$$7.5$$$$$$javafx$$$$$$web$$$$$$network$$$$$$high$$$$$$none$$$$$$required$$$$$$unchanged$$$$$$high$$$$$$high$$$$$$high$$$$$$CVE-2025-30749$$$$$$8.1$$$$$$client-libs$$$$$$2d$$$$$$network$$$$$$high$$$$$$none$$$$$$none$$$$$$unchanged$$$$$$high$$$$$$high$$$$$$high$$$$$$CVE-2025-30754$$$$$$4.8$$$$$$security-libs$$$$$$javax.net.ssl$$$$$$network$$$$$$high$$$$$$none$$$$$$none$$$$$$unchanged$$$$$$low$$$$$$low$$$$$$none$$$$$$CVE-2025-30761$$$

Liberica JDK 8u462+11: Release Notes$$$Published: July 16; 2025$$$$$$1. Version information$$$This document provides information about Liberica JDK 8u462 release.$$$$$$The full version string for this update release is 8u462+11. The version number is 8.$$$$$$Liberica JDK 8 is distributed as .apk; .rpm; .zip; .deb; and .tar.gz packages. Please select the most appropriate for your purposes.$$$$$$2. What’s New$$$This release contains the following updates and new features.$$$$$$Notable Changes$$$This is the list of the notable issues fixed in this release.$$$$$$Issue IDt$$$JDK-8303770$$$$$$Summary: Removed Baltimore CyberTrust Root Certificate After Expiry Date$$$$$$Description: The following expired root certificate has been removed from the cacerts keystore: alias name baltimorecybertrustca [jdk]; Distinguished Name: CN=Baltimore CyberTrust Root; OU=CyberTrust; O=Baltimore; C=IE.$$$$$$JDK-8350498$$$$$$Summary: Removed Two Camerfirma Root Certificates$$$$$$Description: The following root certificates; which are terminated and no longer in use; have been removed from the cacerts keystore: alias name camerfirmachamberscommerceca [jdk]; Distinguished Name: CN=Chambers of Commerce Root; OU=http://www.chambersign.org; O=AC Camerfirma SA CIF A82743287; C=EU; alias name camerfirmachambersignca [jdk]; Distinguished Name: CN=Global Chambersign Root - 2008; O=AC Camerfirma S.A.; SERIALNUMBER=A82743287; L=Madrid (see current address at www.camerfirma.com/address); C=EU.$$$$$$JDK-8352716$$$$$$Summary: Update Timezone Data to 2025b$$$$$$Description: The 2025b release of the tz code and data contains the following changes: New zone for Aysén Region in Chile which moves from -04/-03 to -03.$$$$$$JDK-8359170$$$$$$Summary: Added 4 New Root Certificates from Sectigo Limited$$$$$$Description: The following Sectigo Limited root certificates have been added to the cacerts truststore: sectigocodesignroote46; DN: CN=Sectigo Public Code Signing Root E46; O=Sectigo Limited; C=GB; sectigocodesignrootr46; DN: CN=Sectigo Public Code Signing Root R46; O=Sectigo Limited; C=GB; sectigotlsroote46; DN: CN=Sectigo Public Server Authentication Root E46; O=Sectigo Limited; C=GB; sectigotlsrootr46; DN: CN=Sectigo Public Server Authentication Root R46; O=Sectigo Limited; C=GB.$$$$$$IANA TZ Data update$$$This release of Liberica JDK 8u462 upgrades the in-tree copy of the IANA timezone database to 2025b. The following are the key changes of this update:$$$$$$Future Timestamps:$$$New Time Zone:$$$$$$A new time zone; America/Coyhaique; is created for Chile’s Aysén Region; which will now observe UTC-03 year-round (no daylight saving time).$$$$$$This diverges from America/Santiago starting March 20; 2025.$$$$$$Aysén will not change clocks on April 5; 2025.$$$$$$This aligns Aysén with Magallanes Region.$$$$$$Past Timestamps:$$$Iran Time Change Correction:$$$$$$Iran changed from UTC+04 to UTC+03:30 on November 10; 1978; not at the end of the year as previously recorded.$$$$$$Code Fixes:$$$Improved behavior for the zic tool:$$$$$$It no longer creates invalid symlinks when using -l with multiple arguments.$$$$$$A buffer underflow issue is resolved.$$$$$$For more information; see JDK-8352716.$$$$$$3. Known Issues$$$This release does not contain any known issues.$$$$$$4. Fixed CVEs$$$This is the list of the security issues fixed in this release. CVSS scores are provided using the CVSS version 3.1 scoring system.$$$$$$CVE IDtCVSS scoretComponenttModuletAttack VectortComplexitytPrivilegestUser InteractiontScopetConfidentialitytIntegritytAvailability$$$CVE-2025-24855$$$$$$7.5$$$$$$javafx$$$$$$web$$$$$$network$$$$$$high$$$$$$none$$$$$$required$$$$$$unchanged$$$$$$high$$$$$$high$$$$$$high$$$$$$CVE-2025-27113$$$$$$7.5$$$$$$javafx$$$$$$web$$$$$$network$$$$$$high$$$$$$none$$$$$$required$$$$$$unchanged$$$$$$high$$$$$$high$$$$$$high$$$$$$CVE-2025-30749$$$$$$8.1$$$$$$client-libs$$$$$$2d$$$$$$network$$$$$$high$$$$$$none$$$$$$none$$$$$$unchanged$$$$$$high$$$$$$high$$$$$$high$$$$$$CVE-2025-30754$$$$$$4.8$$$$$$security-libs$$$$$$javax.net.ssl$$$$$$network$$$$$$high$$$$$$none$$$$$$none$$$$$$unchanged$$$$$$low$$$$$$low$$$$$$none$$$$$$CVE-2025-30761$$$

JDK-8335912-Summary: Add an operation mode to the jar command when extracting to not overwriting existing files$$$$$$Description: The jar tool’s extract operation has been enhanced to allow the --keep-old-files and the -k options to be used in preventing the overwriting of existing files. Examples: jar xkf foo.jar or jar --extract --keep-old-files --file foo.jar. Either of these commands will extract the contents of foo.jar. If an entry with the same name already exists in the target directory; then the existing file will not be overwritten.$$$$$$Refer-https://docs.bell-sw.com/liberica-jdk/8u452b11/general/release-notes/

JDK-8335912-Summary: Add an operation mode to the jar command when extracting to not overwriting existing files$$$$$$Description: The jar tool’s extract operation has been enhanced to allow the --keep-old-files and the -k options to be used in preventing the overwriting of existing files. Examples: jar xkf foo.jar or jar --extract --keep-old-files --file foo.jar. Either of these commands will extract the contents of foo.jar. If an entry with the same name already exists in the target directory; then the existing file will not be overwritten.$$$$$$Refer-https://docs.bell-sw.com/liberica-jdk/8u452b11/general/release-notes/