OpenJDK 11.0.29 Released

Andrew Hughes gnu.andrew at redhat.com
Wed Oct 22 23:48:38 UTC 2025 

We are pleased to announce the release of OpenJDK 11.0.29.

The source tarball is available from:

* https://openjdk-sources.osci.io/openjdk11/openjdk-11.0.29+7.tar.xz

The tarball is accompanied by a digital signature available at:

* https://openjdk-sources.osci.io/openjdk11/openjdk-11.0.29+7.tar.xz.sig

This is signed by our Red Hat OpenJDK key (openjdk at redhat.com):

PGP Key: rsa4096/0x92EF8D39DC13168F (hkp://keys.gnupg.net)
Fingerprint = CA5F 11C6 CE22 644D 42C6  AC44 92EF 8D39 DC13 168F

SHA256 checksums:

073db4d6b93bed8526e43ce2f3c61992c749d1fe2559e1a8677c4d119b449930  openjdk-11.0.29+7.tar.xz
3a09d5b627a77b4fc45821c5875fca2a4eceac7e8463754e161ba4bf9436b5e9  openjdk-11.0.29+7.tar.xz.sig

SHA512 checksums:

f3d5c4f07fe0b8c62b22acfc128a38d8aa98cf25594787801fabab5d4b028409f0e9412a31fd507ca2b0c707169c388bff590d5c4389e586a473c40248a7d7b3  openjdk-11.0.29+7.tar.xz
9dcfc5fceef06c3b039930a17b860ce218c3983f053aa99732443d5fabe230993e72aee2d0f4a3b4455c1b3987eb4f22e94c362af180e3fe468fdade36c0bc00  openjdk-11.0.29+7.tar.xz.sig

The checksums can be downloaded from:

* https://openjdk-sources.osci.io/openjdk11/openjdk-11.0.29+7.sha256
* https://openjdk-sources.osci.io/openjdk11/openjdk-11.0.29+7.sha512

New in release OpenJDK 11.0.29 (2025-10-21):
============================================
Live versions of these release notes can be found at:
  * https://bit.ly/openjdk11029

* CVEs
  - CVE-2025-53057
  - CVE-2025-53066
* Changes
  - JDK-8211328: Different declaration and definition of ClassLoaderData::classes_do() leads to build failures
  - JDK-8211804: Constant AO_UNUSED_MBZ uses left shift of negative value
  - JDK-8212155: Race condition when posting dynamic_code_generated event leads to JVM crash
  - JDK-8231943: ZGC: Enable serviceability/dcmd/gc/RunGCTest
  - JDK-8247362: HeapDumpCompressedTest.java#id0 fails due to "Multiple garbage collectors selected"
  - JDK-8268463: Windows 32bit build fails in DynamicCodeGenerated\libDynamicCodeGenerated.cpp
  - JDK-8274453: (sctp) com/sun/nio/sctp/SctpChannel/CloseDescriptors.java test should be resilient to lsof warnings
  - JDK-8312518: [macos13] setFullScreenWindow() shows black screen on macOS 13 & above
  - JDK-8315774: Enable parallelism in vmTestbase/gc/g1/unloading tests
  - JDK-8316497: ColorConvertOp - typo for non-ICC conversions needs one-line fix
  - JDK-8318605: Enable parallelism in vmTestbase/nsk/stress/stack tests
  - JDK-8319197: Exclude hb-subset and hb-style from compilation
  - JDK-8322920: Some ProcessTools.execute* functions are declared to throw Throwable
  - JDK-8340185: Use make -k on GHA to catch more build errors
  - JDK-8343618: Stack smashing in awt_InputMethod.c on Linux s390x
  - JDK-8345414: Google CAInterop test failures
  - JDK-8348328: Update IANA Language Subtag Registry to Version 2025-05-15
  - JDK-8348597: Update HarfBuzz to 10.4.0
  - JDK-8348760: RadioButton is not shown if JRadioButtonMenuItem is rendered with ImageIcon in WindowsLookAndFeel
  - JDK-8350540: [17u,11u] B8312065.java fails Network is unreachable
  - JDK-8352637: Enhance bytecode verification
  - JDK-8352942: jdk/jfr/startupargs/TestMemoryOptions.java fails with 32-bit build
  - JDK-8355051: Problemlist java/awt/Graphics2D/CopyAreaOOB.java on macosx-aarch64
  - JDK-8355249: Remove the use of WMIC from the entire source code
  - JDK-8356053: Test java/awt/Toolkit/Headless/HeadlessToolkit.java fails by timeout
  - JDK-8356294: Enhance Path Factories
  - JDK-8357193: [VS 2022 17.14] Warning C5287 in debugInit.c: enum type mismatch during build
  - JDK-8358325: Bump update version of OpenJDK: 11.0.29
  - JDK-8358538: Update GHA Windows runner to 2025
  - JDK-8360042: GHA: Bump MSVC to 14.44
  - JDK-8360816: [11u] Use default value for ProgramFiles(x86) in GHA
  - JDK-8360937: Enhance certificate handling
  - JDK-8361212: Remove AffirmTrust root CAs
  - JDK-8363965: GHA: Switch cross-compiling sysroots to Debian bookworm
  - JDK-8365375: Method SU3.setAcceleratorSelectionForeground assigns to acceleratorForeground
  - JDK-8365389: Remove static color fields from SwingUtilities3 and WindowsMenuItemUI
  - JDK-8365811: test/jdk/java/net/CookieHandler/B6644726.java failure - "Should have 5 cookies. Got only 4, expires probably didn't parse correctly"
  - JDK-8368308: ISO 4217 Amendment 180 Update

Notes on individual issues:
===========================

security-libs/java.security:

JDK-8361212: Remove AffirmTrust root CAs
========================================
The following root certificates from AffirmTrust, which were
deactivated in the 11.0.25 release of October 2024, have been removed
from the `cacerts` keystore:

Alias name: affirmtrustcommercialca [jdk]
CN=AffirmTrust Commercial
O=AffirmTrust
C=US
SHA256: 03:76:AB:1D:54:C5:F9:80:3C:E4:B2:E2:01:A0:EE:7E:EF:7B:57:B6:36:E8:A9:3C:9B:8D:48:60:C9:6F:5F:A7

Alias name: affirmtrustnetworkingca [jdk]
CN=AffirmTrust Networking
O=AffirmTrust
C=US
SHA256: 0A:81:EC:5A:92:97:77:F1:45:90:4A:F3:8D:5D:50:9F:66:B5:E2:C5:8F:CD:B5:31:05:8B:0E:17:F3:F0B4:1B

Alias name: affirmtrustpremiumca [jdk]
CN=AffirmTrust Premium
O=AffirmTrust
C=US
SHA256: 70:A7:3F:7F:37:6B:60:07:42:48:90:45:34:B1:14:82:D5:BF:0E:69:8E:CC:49:8D:F5:25:77:EB:F2:E9:3B:9A

Alias name: affirmtrustpremiumeccca [jdk]
CN=AffirmTrust Premium ECC
O=AffirmTrust
C=US
SHA256: BD:71:FD:F6:DA:97:E4:CF:62:D1:64:7A:DD:25:81:B0:7D:79:AD:F8:39:7E:B4:EC:BA:9C:5E:84:88:82:14:23

Happy hacking,
-- 
Andrew :)
Pronouns: he / him or they / them
Red Hat, Inc. (http://www.redhat.com)

PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
Fingerprint = 5132 579D D154 0ED2 3E04  C5A0 CFDA 0F9B 3596 4222

Please contact via e-mail, not proprietary chat networks
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/jdk-updates-dev/attachments/20251023/784a34b9/signature.asc>

More information about the jdk-updates-dev mailing list