RELEASE NOTES: JDK 21.0.8

java.net.http.HttpClient Is Enhanced to Report HTTP/2 Flow Control Errors to the Server

The java.net.http.HttpClient will now report HTTP/2 flow control errors to the server when they are detected. This is an implementation detail that should be transparent to users of the HttpClient API, but could result in streams being reset or connections being closed if connecting to a non-conformant HTTP/2 server.

New System.map and System.dump_map Diagnostic Commands Have Been Added

New System.map and System.dump_map diagnostic commands have been added to jcmd. When executed, these commands print the virtual memory map of the JVM process, together with Native Memory Tracking information about the virtual memory segments. For the latter information to be displayed, Native Memory Tracking must be enabled.

jcmd <pid> System.map will print the virtual memory map of the JVM indicated by <pid> to the stdout of jcmd.

jcmd <pid> System.dump_map will cause the target JVM indicated by <pid> to print the virtual memory map to a file named vm_memory_map_<pid>.txt into the current directory of the target JVM.

Removed Baltimore CyberTrust Root Certificate after expiry date

The following expired root certificate has been removed from the cacerts keystore: ` + alias name "baltimorecybertrustca [jdk]" Distinguished Name: CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE `

Jarsigner Should Print a Warning If an Entry Is Removed

If an entry is removed from a signed JAR file, there is no mechanism to detect that it has been removed using the JarFile API, since the getJarEntry method returns null as if the entry had never existed. With this change, the jarsigner -verify command analyzes the signature files and if some sections do not have matching file entries, it prints out the following warning: "This JAR contains signed entries for files that do not exist". Users can further find out the names of these entries by adding the -verbose option to the command.