{"id":230401,"date":"2024-01-24T11:30:38","date_gmt":"2024-01-24T19:30:38","guid":{"rendered":"https:\/\/devblogs.microsoft.com\/java\/?p=230401"},"modified":"2024-01-24T11:30:38","modified_gmt":"2024-01-24T19:30:38","slug":"microsoft-build-of-openjdk-january-2024-patch-security-update-release","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/java\/microsoft-build-of-openjdk-january-2024-patch-security-update-release\/","title":{"rendered":"Microsoft Build of OpenJDK &#8211; January 2024 Patch &#038; Security Update Release"},"content":{"rendered":"<h1 id=\"user-content-java-openjdk-january-2024-patch-%26-security-updates\">Java OpenJDK January 2024 Patch &amp; Security Updates<\/h2>\n<p>Happy New Year Java community!<\/p>\n<p>We are happy to announce the latest January 2024 patch &amp; security update release for the\u00a0<a href=\"https:\/\/aka.ms\/openjdk\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"Microsoft Build of OpenJDK (Opens in new window or tab)\">Microsoft Build of OpenJDK<\/a>\u00a0. See the\u00a0<a href=\"https:\/\/learn.microsoft.com\/en-us\/java\/openjdk\/release-notes\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"release notes (Opens in new window or tab)\">release notes<\/a>\u00a0\u00a0for detailed changes present in the Microsoft Build of OpenJDK binaries. And\u00a0<a href=\"https:\/\/aka.ms\/msopenjdk-dl\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"download (Opens in new window or tab)\">download<\/a>\u00a0\u00a0or\u00a0<a href=\"https:\/\/learn.microsoft.com\/java\/openjdk\/install\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"install (Opens in new window or tab)\">install<\/a>\u00a0\u00a0the binaries today. The latest versions are now:<\/p>\n<ul>\n<li>OpenJDK 21.0.2<\/li>\n<li>OpenJDK 17.0.10<\/li>\n<li>OpenJDK 11.0.22<\/li>\n<\/ul>\n<p>Check our\u00a0<a href=\"https:\/\/learn.microsoft.com\/java\/openjdk\/release-notes\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"release notes (Opens in new window or tab)\">release notes<\/a>\u00a0\u00a0page for details on fixes and enhancements. As a reminder, the source code of our builds are now available on GitHub for further inspection:\u00a0<a href=\"https:\/\/github.com\/microsoft\/openjdk-jdk21u\/tree\/release\/jdk-21.0.2-ga\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"jdk21u (Opens in new window or tab)\">jdk21u<\/a>\u00a0,\u00a0<a href=\"https:\/\/github.com\/microsoft\/openjdk-jdk17u\/tree\/release\/jdk-17.0.10-ga\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"jdk17u (Opens in new window or tab)\">jdk17u<\/a>\u00a0, and\u00a0<a href=\"https:\/\/github.com\/microsoft\/openjdk-jdk11u\/tree\/release\/jdk-11.0.22-ga\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"jdk11u (Opens in new window or tab)\">jdk11u<\/a>\u00a0.<\/p>\n<h2 id=\"user-content-microsoft-build-of-openjdk-specific-updates\">Microsoft Build of OpenJDK specific updates<\/h2>\n<h3 id=\"user-content-openjdk-21\">OpenJDK 21<\/h3>\n<ul>\n<li>Includes a new feature (see\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8287061\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8287061 (Opens in new window or tab)\">JDK-8287061<\/a>\u00a0\u00a0and\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8289943\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8289943 (Opens in new window or tab)\">JDK-8289943<\/a>\u00a0) to improve the performance of Escape Analysis by increasing the number of opportunities for Scalar Replacement. This feature is enabled by default. To disable it, developers must use the following JVM flags:\n<pre><code>`-XX:+UnlockDiagnosticVMOptions -XX:-ReduceAllocationMerges`\r\n<\/code><\/pre>\n<\/li>\n<li>Includes a new JFR event to track Compiler Queue Utilization (a backport of\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8317562\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8317562 (Opens in new window or tab)\">JDK-8317562<\/a>\u00a0).<\/li>\n<\/ul>\n<h3 id=\"user-content-openjdk-17\">OpenJDK 17<\/h3>\n<ul>\n<li>Includes a new feature (see\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8287061\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8287061 (Opens in new window or tab)\">JDK-8287061<\/a>\u00a0\u00a0and\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8289943\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8289943 (Opens in new window or tab)\">JDK-8289943<\/a>\u00a0) to improve the performance of Escape Analysis by increasing the number of opportunities for Scalar Replacement. This feature is enabled by default. To disable it, developers must use the following JVM flags:\n<pre><code>`-XX:+UnlockDiagnosticVMOptions -XX:-ReduceAllocationMerges`\r\n<\/code><\/pre>\n<\/li>\n<li>Added support for SST files as KeyStores on Windows (see\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8306688\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8306688 (Opens in new window or tab)\">JDK-8306688<\/a>\u00a0), which can be enabled by using the following property:\n<pre><code>`-Dsun.security.mscapi.enableSST=true`\r\n<\/code><\/pre>\n<\/li>\n<\/ul>\n<h3 id=\"user-content-openjdk-11\">OpenJDK 11<\/h3>\n<ul>\n<li>Includes a new feature (see\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8287061\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8287061 (Opens in new window or tab)\">JDK-8287061<\/a>\u00a0\u00a0and\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8289943\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8289943 (Opens in new window or tab)\">JDK-8289943<\/a>\u00a0) to improve the performance of Escape Analysis by increasing the number of opportunities for Scalar Replacement. This feature is enabled by default. To disable it, developers must use the following JVM flags:\n<pre><code>`-XX:+UnlockDiagnosticVMOptions -XX:-ReduceAllocationMerges`\r\n<\/code><\/pre>\n<\/li>\n<li>Added support for SST files as KeyStores on Windows (see\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8306688\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8306688 (Opens in new window or tab)\">JDK-8306688<\/a>\u00a0), which can be enabled by using the following property:\n<pre><code>`-Dsun.security.mscapi.enableSST=true`\r\n<\/code><\/pre>\n<\/li>\n<li>Backports of the following enhancements and bug fixes:\n<ul>\n<li><a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8250902\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8250902 (Opens in new window or tab)\">JDK-8250902<\/a>\u00a0\u00a0Implement MD5 Intrinsics on x86 &#8211; Java Bug System<\/li>\n<li>JDK Flight Recorder\n<ul>\n<li><a href=\"https:\/\/devdiv.visualstudio.com\/DevDiv\/_git\/jdk-release-comms?path=\/internal\/blog\/JDK-8226897&amp;version=GCdb8fb512a17eab687d936c6dc36a8a97910ebf80\">JDK-8226897<\/a>\u00a0Provide object age with JFR OldObjectSample event<\/li>\n<li><a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8232594\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8232594 (Opens in new window or tab)\">JDK-8232594<\/a>\u00a0\u00a0Make the output of the JFR command duration more user friendly<\/li>\n<li><a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8216041\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8216041 (Opens in new window or tab)\">JDK-8216041<\/a>\u00a0\u00a0Event Request Deoptimization<\/li>\n<li><a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8216995\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8216995 (Opens in new window or tab)\">JDK-8216995<\/a>\u00a0\u00a0Clean up JFR Command Line<\/li>\n<li><a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8217089\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8217089 (Opens in new window or tab)\">JDK-8217089<\/a>\u00a0\u00a0Lazy install os interface components for improved startup<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h4 id=\"user-content-known-issues-microsoft-openjdk-11\">Known issues Microsoft OpenJDK 11<\/h4>\n<ul>\n<li>Binaries for macOS\/AArch64 do not have Default CDS (JEP 341) archives.\n<ul>\n<li><em>Workaround<\/em>: Run java -Xshare:dump to produce them after installation.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h2 id=\"user-content-summary-of-upstream-updates\">Summary of Upstream Updates<\/h2>\n<h3 id=\"user-content-openjdk-21\">OpenJDK 21<\/h3>\n<p><em>For further details, please refer to\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8323311?jql=project%20%3D%20JDK%20AND%20issuetype%20in%20(standardIssueTypes()%2C%20subTaskIssueTypes())%20AND%20resolution%20in%20(Fixed%2C%20Migrated%2C%20Delivered)%20AND%20affectedVersion%20%3D%2021.0.2%20ORDER%20BY%20priority%20DESC%2C%20updated%20DESC\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"this query for fixed items in JDK 21.0.2 (Opens in new window or tab)\">this query for fixed items in JDK 21.0.2<\/a>\u00a0<\/em>.<\/p>\n<h3 id=\"user-content-openjdk-17\">OpenJDK 17<\/h3>\n<p><em>For further details, please refer to\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8321924?jql=project%20%3D%20JDK%20AND%20issuetype%20in%20(standardIssueTypes()%2C%20subTaskIssueTypes())%20AND%20resolution%20in%20(Fixed%2C%20Migrated%2C%20Delivered)%20AND%20affectedVersion%20%3D%2017.0.10%20ORDER%20BY%20priority%20DESC%2C%20updated%20DESC\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"this query for fixed items in JDK 17.0.10 (Opens in new window or tab)\">this query for fixed items in JDK 17.0.10<\/a>\u00a0<\/em>.<\/p>\n<h3 id=\"user-content-openjdk-11\">OpenJDK 11<\/h3>\n<p><em>For further details, please refer to\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8324224?jql=project%20%3D%20JDK%20AND%20issuetype%20in%20(standardIssueTypes()%2C%20subTaskIssueTypes())%20AND%20resolution%20in%20(Fixed%2C%20Migrated%2C%20Delivered)%20AND%20affectedVersion%20%3D%2011.0.22%20ORDER%20BY%20priority%20DESC%2C%20updated%20DESC\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"this query for fixed items in JDK 11.0.22 (Opens in new window or tab)\">this query for fixed items in JDK 11.0.22<\/a>\u00a0<\/em>.<\/p>\n<h2 id=\"user-content-openjdk-8\">OpenJDK 8<\/h2>\n<p>We continue to provide support on Azure and internal at Microsoft for OpenJDK 8 binaries of Eclipse Temurin built by the Eclipse Adoptium project. To facilitate its usage, we ship container images of OpenJDK 8 on top of CBL-Mariner and Ubuntu. Refer to our documentation.<\/p>\n<ul>\n<li><a href=\"https:\/\/adoptium.net\/temurin\/releases\/?version=8\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"OpenJDK 8 (8u401 b31) (Opens in new window or tab)\">OpenJDK 8 (8u401 b31)<\/a><\/li>\n<\/ul>\n<h2 id=\"user-content-questions%3F\">Questions?<\/h2>\n<p>Contact\u00a0<a href=\"mailto:openjdk-support@microsoft.com\">openjdk-support@microsoft.com<\/a>.<\/p>\n<p><em>Amplify the news!<\/em><\/p>\n<p>LinkedIn:\u00a0<a href=\"https:\/\/www.linkedin.com\/posts\/activity-7155992727178899458-HYbm?utm_source=share&amp;utm_medium=member_desktop\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"LinkedIn post from Java at Microsoft (Opens in new window or tab)\">LinkedIn post from Java at Microsoft<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Java OpenJDK January 2024 Patch &amp; Security Updates Happy New Year Java community! We are happy to announce the latest January 2024 patch &amp; security update release for the\u00a0Microsoft Build of OpenJDK\u00a0. See the\u00a0release notes\u00a0\u00a0for detailed changes present in the Microsoft Build of OpenJDK binaries. And\u00a0download\u00a0\u00a0or\u00a0install\u00a0\u00a0the binaries today. The latest versions are now: OpenJDK 21.0.2 [&hellip;]<\/p>\n","protected":false},"author":9388,"featured_media":227205,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1,249],"tags":[248,319],"class_list":["post-230401","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-java","category-openjdk","tag-java","tag-openjdk"],"acf":[],"blog_post_summary":"<p>Java OpenJDK January 2024 Patch &amp; Security Updates Happy New Year Java community! We are happy to announce the latest January 2024 patch &amp; security update release for the\u00a0Microsoft Build of OpenJDK\u00a0. See the\u00a0release notes\u00a0\u00a0for detailed changes present in the Microsoft Build of OpenJDK binaries. And\u00a0download\u00a0\u00a0or\u00a0install\u00a0\u00a0the binaries today. The latest versions are now: OpenJDK 21.0.2 [&hellip;]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/posts\/230401","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/users\/9388"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/comments?post=230401"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/posts\/230401\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/media\/227205"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/media?parent=230401"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/categories?post=230401"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/tags?post=230401"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}