{"id":230910,"date":"2024-04-22T10:06:43","date_gmt":"2024-04-22T17:06:43","guid":{"rendered":"https:\/\/devblogs.microsoft.com\/java\/?p=230910"},"modified":"2024-04-22T10:19:02","modified_gmt":"2024-04-22T17:19:02","slug":"microsoft-build-of-openjdk-april-2024-patch-security-update-release","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/java\/microsoft-build-of-openjdk-april-2024-patch-security-update-release\/","title":{"rendered":"Microsoft Build of OpenJDK &#8211; April 2024 Patch &#038; Security Update Release"},"content":{"rendered":"<h1 id=\"user-content-java-openjdk-january-2024-patch-%26-security-updates\">OpenJDK April 2024 Patch &amp; Security Updates<\/h2>\n<p>We are happy to announce the latest April 2024 patch &amp; security update release for the <a href=\"https:\/\/aka.ms\/openjdk\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"Microsoft Build of OpenJDK (Opens in new window or tab)\">Microsoft Build of OpenJDK<\/a>. See the\u00a0<a href=\"https:\/\/learn.microsoft.com\/en-us\/java\/openjdk\/release-notes\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"release notes (Opens in new window or tab)\">release notes<\/a> for detailed changes present in the Microsoft Build of OpenJDK binaries. And\u00a0<a href=\"https:\/\/aka.ms\/msopenjdk-dl\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"download (Opens in new window or tab)\">download<\/a> or\u00a0<a href=\"https:\/\/learn.microsoft.com\/java\/openjdk\/install\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"install (Opens in new window or tab)\">install<\/a> the binaries today. The latest versions are now:<\/p>\n<ul>\n<li>OpenJDK 21.0.3<\/li>\n<li>OpenJDK 17.0.11<\/li>\n<li>OpenJDK 11.0.23<\/li>\n<\/ul>\n<p>Check our\u00a0<a href=\"https:\/\/learn.microsoft.com\/java\/openjdk\/release-notes\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"release notes (Opens in new window or tab)\">release notes<\/a> page for details on fixes and enhancements. As a reminder, the source code of our builds is now available on GitHub for further inspection: <a href=\"https:\/\/github.com\/microsoft\/openjdk-jdk21u\/tree\/release\/jdk-21.0.3_9\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"jdk21u (Opens in new window or tab)\">jdk21u<\/a>,\u00a0<a href=\"https:\/\/github.com\/microsoft\/openjdk-jdk17u\/tree\/release\/jdk-17.0.11_9\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"jdk17u (Opens in new window or tab)\">jdk17u<\/a>, and <a href=\"https:\/\/github.com\/microsoft\/openjdk-jdk11u\/tree\/release\/jdk-11.0.23_9\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"jdk11u (Opens in new window or tab)\">jdk11u<\/a>.<\/p>\n<h2 id=\"user-content-microsoft-build-of-openjdk-specific-updates\">Microsoft Build of OpenJDK specific updates<\/h2>\n<h3 id=\"user-content-openjdk-21\">OpenJDK 21<\/h3>\n<ul>\n<li>Includes a new feature (see\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8287061\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8287061 (Opens in new window or tab)\">JDK-8287061<\/a>\u00a0\u00a0and\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8289943\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8289943 (Opens in new window or tab)\">JDK-8289943<\/a>\u00a0) to improve the performance of Escape Analysis by increasing the number of opportunities for Scalar Replacement. This feature is enabled by default. To disable it, developers must use the following JVM flags:\n<pre><code>`-XX:+UnlockDiagnosticVMOptions -XX:-ReduceAllocationMerges`\r\n<\/code><\/pre>\n<\/li>\n<li>Includes a new JFR event to track Compiler Queue Utilization (a backport of\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8317562\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8317562 (Opens in new window or tab)\">JDK-8317562<\/a>\u00a0).<\/li>\n<\/ul>\n<h3 id=\"user-content-openjdk-17\">OpenJDK 17<\/h3>\n<ul>\n<li>Includes a new feature (see\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8287061\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8287061 (Opens in new window or tab)\">JDK-8287061<\/a>\u00a0\u00a0and\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8289943\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8289943 (Opens in new window or tab)\">JDK-8289943<\/a>\u00a0) to improve the performance of Escape Analysis by increasing the number of opportunities for Scalar Replacement. This feature is enabled by default. To disable it, developers must use the following JVM flags:\n<pre><code>`-XX:+UnlockDiagnosticVMOptions -XX:-ReduceAllocationMerges`\r\n<\/code><\/pre>\n<\/li>\n<li>Added support for SST files as KeyStores on Windows (see\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8306688\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8306688 (Opens in new window or tab)\">JDK-8306688<\/a>\u00a0), which can be enabled by using the following property:\n<pre><code>`-Dsun.security.mscapi.enableSST=true`\r\n<\/code><\/pre>\n<\/li>\n<\/ul>\n<h3 id=\"user-content-openjdk-11\">OpenJDK 11<\/h3>\n<ul>\n<li>Includes a new feature (see\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8287061\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8287061 (Opens in new window or tab)\">JDK-8287061<\/a>\u00a0\u00a0and\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8289943\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8289943 (Opens in new window or tab)\">JDK-8289943<\/a>\u00a0) to improve the performance of Escape Analysis by increasing the number of opportunities for Scalar Replacement. This feature is enabled by default. To disable it, developers must use the following JVM flags:\n<pre><code>`-XX:+UnlockDiagnosticVMOptions -XX:-ReduceAllocationMerges`\r\n<\/code><\/pre>\n<\/li>\n<li>Added support for SST files as KeyStores on Windows (see\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8306688\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8306688 (Opens in new window or tab)\">JDK-8306688<\/a>\u00a0), which can be enabled by using the following property:\n<pre><code>`-Dsun.security.mscapi.enableSST=true`\r\n<\/code><\/pre>\n<\/li>\n<li>Backports of the following enhancements and bug fixes:\n<ul>\n<li><a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8250902\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8250902 (Opens in new window or tab)\">JDK-8250902<\/a> Implement MD5 Intrinsics on x86 &#8211; Java Bug System<\/li>\n<li>JDK Flight Recorder\n<ul>\n<li><a href=\"https:\/\/devdiv.visualstudio.com\/DevDiv\/_git\/jdk-release-comms?path=\/internal\/blog\/JDK-8226897&amp;version=GCdb8fb512a17eab687d936c6dc36a8a97910ebf80\">JDK-8226897<\/a>\u00a0Provide object age with JFR OldObjectSample event<\/li>\n<li><a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8232594\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8232594 (Opens in new window or tab)\">JDK-8232594<\/a> Make the output of the JFR command duration more user friendly<\/li>\n<li><a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8216041\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8216041 (Opens in new window or tab)\">JDK-8216041<\/a> Event Request Deoptimization<\/li>\n<li><a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8216995\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8216995 (Opens in new window or tab)\">JDK-8216995<\/a> Clean up JFR Command Line<\/li>\n<li><a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8217089\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"JDK-8217089 (Opens in new window or tab)\">JDK-8217089<\/a> Lazy install os interface components for improved startup<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h4 id=\"user-content-known-issues-microsoft-openjdk-11\">Known issues Microsoft OpenJDK 11<\/h4>\n<ul>\n<li>Binaries for macOS\/AArch64 do not have Default CDS (JEP 341) archives.\n<ul>\n<li><em>Workaround<\/em>: Run java -Xshare:dump to produce them after installation.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h2 id=\"user-content-summary-of-upstream-updates\">Summary of Upstream Updates<\/h2>\n<h3 id=\"user-content-openjdk-21\">OpenJDK 21<\/h3>\n<p><em>For further details, please refer to\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8327265?jql=project%20%3D%20JDK%20AND%20issuetype%20in%20(standardIssueTypes()%2C%20subTaskIssueTypes())%20AND%20resolution%20in%20(Fixed%2C%20Migrated%2C%20Delivered)%20AND%20fixVersion%20%3D%2021.0.3%20ORDER%20BY%20priority%20DESC%2C%20updated%20DESC\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"this query for fixed items in JDK 21.0.2 (Opens in new window or tab)\">this query for fixed items in JDK 21.0.3<\/a><\/em>.<\/p>\n<h3 id=\"user-content-openjdk-17\">OpenJDK 17<\/h3>\n<p><em>For further details, please refer to\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8327292?jql=project%20%3D%20JDK%20AND%20issuetype%20in%20(standardIssueTypes()%2C%20subTaskIssueTypes())%20AND%20resolution%20in%20(Fixed%2C%20Migrated%2C%20Delivered)%20AND%20fixVersion%20%3D%2017.0.11%20ORDER%20BY%20priority%20DESC%2C%20updated%20DESC\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"this query for fixed items in JDK 17.0.10 (Opens in new window or tab)\">this query for fixed items in JDK 17.0.11<\/a><\/em>.<\/p>\n<h3 id=\"user-content-openjdk-11\">OpenJDK 11<\/h3>\n<p><em>For further details, please refer to\u00a0<a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8323778?jql=project%20%3D%20JDK%20AND%20issuetype%20in%20(standardIssueTypes()%2C%20subTaskIssueTypes())%20AND%20resolution%20in%20(Fixed%2C%20Migrated%2C%20Delivered)%20AND%20affectedVersion%20%3D%2011.0.23%20AND%20fixVersion%20%3D%2011.0.23%20ORDER%20BY%20priority%20DESC%2C%20updated%20DESC\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"this query for fixed items in JDK 11.0.22 (Opens in new window or tab)\">this query for fixed items in JDK 11.0.23<\/a><\/em>.<\/p>\n<h2 id=\"user-content-openjdk-8\">OpenJDK 8<\/h2>\n<p>We continue to provide support on Azure and internally at Microsoft for OpenJDK 8 by adopting binaries of Eclipse Temurin built by the <a href=\"https:\/\/adoptium.net\">Eclipse Adoptium<\/a> project. To facilitate its usage, we ship container images of OpenJDK 8 on top of Azure Linux (previously known as CBL-Mariner) and Ubuntu. Please refer to our <a href=\"https:\/\/learn.microsoft.com\/java\/openjdk\/containers\">container documentation<\/a>.<\/p>\n<ul>\n<li><a href=\"https:\/\/adoptium.net\/temurin\/releases\/?version=8\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"OpenJDK 8 (8u401 b31) (Opens in new window or tab)\">OpenJDK 8<\/a><\/li>\n<\/ul>\n<h2>Upcoming Changes<\/h2>\n<ul>\n<li>Debian 9 and Debian 10 <a href=\"https:\/\/learn.microsoft.com\/en-us\/java\/openjdk\/install#install-on-debian\">install packages<\/a> will be deprecated and no longer receive updates starting with the next Patch Set Update scheduled for July 2024, as these versions of Debian have reached their End of Life.<\/li>\n<li>We are also happy to share that it is in our roadmap to publish installation packages for SUSE Linux. If you are interested in knowing more, please contact us.<\/li>\n<\/ul>\n<h2 id=\"user-content-questions%3F\">Questions?<\/h2>\n<p>Contact\u00a0<a href=\"mailto:openjdk-support@microsoft.com\">openjdk-support@microsoft.com<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>OpenJDK April 2024 Patch &amp; Security Updates We are happy to announce the latest April 2024 patch &amp; security update release for the Microsoft Build of OpenJDK. See the\u00a0release notes for detailed changes present in the Microsoft Build of OpenJDK binaries. And\u00a0download or\u00a0install the binaries today. The latest versions are now: OpenJDK 21.0.3 OpenJDK 17.0.11 [&hellip;]<\/p>\n","protected":false},"author":8937,"featured_media":227205,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-230910","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-java"],"acf":[],"blog_post_summary":"<p>OpenJDK April 2024 Patch &amp; Security Updates We are happy to announce the latest April 2024 patch &amp; security update release for the Microsoft Build of OpenJDK. See the\u00a0release notes for detailed changes present in the Microsoft Build of OpenJDK binaries. And\u00a0download or\u00a0install the binaries today. The latest versions are now: OpenJDK 21.0.3 OpenJDK 17.0.11 [&hellip;]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/posts\/230910","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/users\/8937"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/comments?post=230910"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/posts\/230910\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/media\/227205"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/media?parent=230910"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/categories?post=230910"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/tags?post=230910"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}