Eclipse Temurin 8u422, 11.0.24, 17.0.12, 21.0.4 and 22.0.2 Available

July 26, 2024 – posted by   Adoptium PMC

Adoptium is happy to announce the immediate availability of Eclipse Temurin 8u422-b05, 11.0.24+8, 17.0.12+7, 21.0.4+7 and 22.0.2+9. As always, all binaries are thoroughly tested and available free of charge without usage restrictions on a wide range of platforms. Binaries, installers, and source code are available from the Temurin download page, official container images are available at DockerHub, and installable packages are available for various operating systems.

This is by far our biggest release to date with 56 version/platform combinations with five major versions of OpenJDK currently being supported where JDK17 has 12 platforms and the other versions have 11 platforms being delivered. By comparison, the April release had 54 combinations. There was also a ~50% decrease in the number of people available to help with the July release activities due to vacations and other commitments. Despite this, we still managed to complete the releases more quickly than in the previous cycles.

Security Vulnerabilities Resolved

The following table summarizes security vulnerabilities fixed in this release cycle. The affected Temurin version streams are noted by an ‘X’ in the table. Each line shows the Common Vulnerabilities and Exposures (CVE) vulnerability database reference and Common Vulnerability Scoring System (CVSS) v3.1 base score provided by the OpenJDK Vulnerability Group. Note that defense-in-depth issues are not assigned CVEs.

Users should follow the Adoptium policy for reporting vulnerability concerns with this release.

Fixes and Updates

This release contains the following fixes and updates.

• Temurin 8u422 release notes, including fixes in OpenJDK 8u422

• Temurin 11.0.24 release notes, including fixes in OpenJDK 11.0.24

• Temurin 17.0.11 release notes, including fixes in OpenJDK 17.0.12

• Temurin 21.0.4 release notes, including fixes in OpenJDK 21.0.4

• Temurin 22.0.2 release notes, including fixes in OpenJDK 22.0.2

New and Noteworthy

JDK8 x64 macOS Respin

Eclipse Temurin jdk8u422 x64 macOS is in a separate release named jdk8u422-b05.1 due to a respin that was required to fix a signing issue.

Container Updates

Changes to Docker image external CA certs handling

There are slightly modified instructions to answer the question ‘Can I add my internal CA certificates to the truststore?’ in my Temurin container, especially when running your containers in a restricted-by-default non-root environment.

If this describes your use case, please take a look at the updated documentation.

Removal of CentOS 7 Eclipse Temurin Images

CentOS 7 reached its End of Life (EOL) on June 30th, 2024. Given that end date, no further updates or support will be provided for CentOS 7, and to ensure the continued security and stability of your applications, we recommend migrating to the UBI9-minimal images. For additional details, please read our recent blog post regarding this update.

Ubuntu Noble (24.04) is included and is now the default

Support for Ubuntu Noble (24.04) was added alongside the others, with a view to making it the only option for Temurin 23. Noble is now the default latest tag for Temurin containers.

This change could impact users as Ubuntu are no longer including the adduser package by default in the container images for 24.04 (Noble) where they were present in 22.04 (Jammy) so our switch from presenting 24.04 as the default for our images now has shown this issue.

The three ways to work around are:

1. Switch to using useradd - it is there by default and supplied as part of in the passwd package.

2. Install the adduser package in your images - though this requires an apt update in your Dockerfile first to pull down the repository information (which will add about 35MB to the size of your image) then apt install adduser to add in the package containing adduser (and addgroup).

3. Switch back to explicitly use the eclipse-temurin -jammy images, by appending -jammy to the end of their tag, for example, eclipse-temurin:21-jdk-jammy.

All are valid options but it may be beneficial for users start updating Dockerfiles to use the adduser command where possible to increase compatibility with a range of glibc-based base images. Fedora, for example, has an adduser command which is a symlink to useradd which operates in the same way as the Ubuntu useradd.

Elevated security for Windows Installers now using Wix5

There are updates to the Temurin Windows installer to implement some security-related fixes and as part of these, the installer is now using Wix5. There should be no behavioural differences, but users are asked to report any unknown side-effects by raising an adoptium-support issue.

ppc64 AIX JDK22 now available

We are pleased to announce the availability of JDK22 on ppc64 AIX. It was awaiting a compiler update in our infrastructure to allow being built on OpenXL 17. Since Infrastructure issue 3208 was addressed, we were able to build, test, and deliver this platform. For those planning on using this binary, it should be noted that it requires the OpenXL 17 runtime (which also requires AIX 7.2 TL5 SP3 or later), as opposed to the XLC16 runtime required by JDK8 through JDK21.

Ubuntu 24.04 added as a supported platform

Ubuntu 24.04 is added as a supported platform after extensive testing on our Temurin build on it. It is also available as an Temurin Docker image, as mentioned in the Container Updates section above.

Do you have questions or want to discuss this post? Hit us up on the Adoptium Slack workspace!