RELEASE NOTES: JDK openjdk8u512

Notes generated: Mon Sep 21 05:06:11 CEST 2026

JEPs

None.

RELEASE NOTES

security-libs/javax.net.ssl

Issue Description
JDK-8259662

SocketExceptions Are Not Wrapped Into SSLExceptions in SSLSocketImpl


This release reverts the behavior of SSLSocketImpl and SSLTransport introduced by JDK-8196584. SocketException will now be thrown as is instead of being suppressed into an SSLException.

hotspot/runtime

Issue Description
JDK-8313083

Print 'rss' and 'cache' As Part of the Container Information


The HotSpot runtime code has been updated to additionally print a container's 'rss' and 'cache'. The additional output can be found in the JVM's response to a "jcmd [PID] VM.info" request and in the hs_err file generated in case of JVM abrupt termination.

This will help monitoring and troubleshooting OutOfMemory situations as OOM killer can terminate a process if its rss + cache usage reaches the max memory limit of the container.

security-libs/java.security

Issue Description
JDK-8387123

LuxTrust Global Root CA removed


The following root certificate has been removed from the cacerts keystore: ``` + alias name "luxtrustglobalrootca [jdk]" Distinguished Name: CN=LuxTrust Global Root, O=LuxTrust s.a., C=LU

```

FIXED ISSUES

client-libs

Priority Bug Summary
P4 JDK-8388811 [8u] VS2010 build broken by JDK-8374058

client-libs/2d

Priority Bug Summary
P3 JDK-8385390 Update FreeType to 2.14.3
P4 JDK-8369032 Add test to ensure serialized ICC_Profile stores only necessary optional data

client-libs/java.awt

Priority Bug Summary
P3 JDK-8384902 Update GIFlib to 6.1.3

client-libs/javax.sound

Priority Bug Summary
P4 JDK-8345149 [8u] javax/sound/midi/Soundbanks/GetSoundBankSecurityException/GetSoundBankSecurityException.java fails with FileSystemException

core-libs/java.util.jar

Priority Bug Summary
P1 JDK-8378823 AIX build fails after zlib updated by JDK-8378631
P3 JDK-8186464 ZipFile cannot read some InfoZip ZIP64 zip files

hotspot/runtime

Priority Bug Summary
P3 JDK-8349988 Change cgroup version detection logic to not depend on /proc/cgroups
P3 JDK-8347811 Container detection code for cgroups v2 should use cgroup.controllers
P3 JDK-8347129 cpuset cgroups controller is required for no good reason
P3 JDK-8354878 File Leak in CgroupSubsystemFactory::determine_type of cgroupSubsystem_linux.cpp:300
P3 JDK-8303215 Make thread stacks not use huge pages
P3 JDK-8313083 Print 'rss' and 'cache' as part of the container information
P4 JDK-8252250 isnanf is obsolete
P4 JDK-8298730 Refactor subsystem_file_line_contents and add docs and tests

infrastructure/release_eng

Priority Bug Summary
P4 JDK-8389477 Bump update version for OpenJDK: 8u504
P4 JDK-8386275 Bump update version of OpenJDK: 8u512

security-libs/java.security

Priority Bug Summary
P4 JDK-8387123 Remove LuxTrust Global Root CA

security-libs/javax.net.ssl

Priority Bug Summary
P2 JDK-8239798 SSLSocket closes socket both socket endpoints on a SocketTimeoutException
P3 JDK-8250839 Improve test template SSLEngineTemplate with SSLContextTemplate
P4 JDK-8259662 Don't wrap SocketExceptions into SSLExceptions in SSLSocketImpl

security-libs/jdk.security

Priority Bug Summary
P4 JDK-8388142 [8u] Path to PreferredKey.java exclusion is wrong