Software-update: Oracle Java 11.0.1 / 8 update 192 / 191

Oracle heeft versie 11.0.1 van Java Standard Edition uitgebracht, die ook het label LTS heeft meegekregen. Vanaf deze versie brengt Oracle alleen nog maar de Java SE Development Kit (JDK) uit, in zowel de Oracle JDK- als OpenJDK-smaak, waarbij de laatste onder de gpl-licentie wordt aangeboden. Er worden geen Java Runtime Environment (JRE) en Server Java Runtime Environment (Server JRE) meer uitgebracht. Wel is het mogelijk om met jlink een kleinere runtime samen te stellen. Ook heeft Oracle Java 8 update 192 en 191 uitgebracht. De releasenotes van deze versies zien er als volgt uit:

JDK 11.0.1 Release Notes

The full version string for this update release is 11.0.1+13 (where "+" means "build"). The version number is 11.0.1.

IANA Data 2018e
JDK 11.0.1 contains IANA time zone data version 2018e. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baselines
The security baselines for the Java Runtime Environment (JRE) at the time of the release of JDK 11.0.1 are specified in the following table:

JRE Family Version	JRE Security Baseline
11	11.0.1+13
10	10.0.99
9	9.0.99
8	1.8.0_191-b12
7	1.7.0_201-b11
6	1.6.0_211-b11

Oracle JDK Expiration Date
The JDK expires whenever a new release with security vulnerability fixes becomes available. Critical patch updates, which contain security vulnerability fixes, are announced one year in advance on Critical Patch Updates, Security Alerts and Bulletins. This JDK (version 11.0.1) will expire with the release of the next critical patch update scheduled for January 15, 2019.

Changes

• security-libs/java.security - Added Additional TeliaSonera Root Certificate
• core-libs/javax.naming - Improve LDAP support
• core-svc - Changed Central File System Location for usagetracker.properties File
• security-libs/javax.net.ssl - Disabled all DES TLS Cipher Suites
• security-libs/javax.crypto - Improved Cipher Inputs

Bug Fixes

The following are some of the notable bug fixes included in this release:

• core-libs/javax.naming - LDAPS Communication Failure
• core-libs/java.net - Better HTTP Redirection Support

This release also contains fixes for security vulnerabilities described in the Oracle Critical Patch Update. For a more complete list of the bug fixes included in this release, see the JDK 11.0.1 Bug Fixes page.

JDK 8u192 Update Release Notes

The full version string for this update release is 1.8.0_192-b12 (where "b" means "build"). The version number is 8u192.

IANA Data 2018e
JDK 8u192 contains IANA time zone data version 2018e. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baselines
The security baselines for the Java Runtime Environment (JRE) at the time of the release of JDK 8u192 are specified in the following table:

JRE Family Version	JRE Security Baseline
8	1.8.0_191-b12
7	1.7.0_201-b11
6	1.6.0_211-b11

JRE Expiration Date
The JRE expires whenever a new release with security vulnerability fixes becomes available. Critical patch updates, which contain security vulnerability fixes, are announced one year in advance on Critical Patch Updates, Security Alerts and Third Party Bulletin. This JRE (version 8u192) will expire with the release of the next critical patch update scheduled for January 15, 2019.

For systems unable to reach the Oracle Servers, a secondary mechanism expires this JRE (version 8u192) on February 15, 2019. After either condition is met (new release becoming available or expiration date reached), the JRE will provide additional warnings and reminders to users to update to the newer version. For more information, see JRE Expiration Date.

New Features

• security-libs/javax.net.ssl - Support for Customization of Default Enabled Cipher Suites via System Properties

Bug Fixes
This release contains fixes for security vulnerabilities described in the Oracle Critical Patch Update. For a more complete list of the bug fixes included in this release, see the JDK 8u192 Bug Fixes page.

JDK 8u191 Update Release Notes

The full version string for this update release is 1.8.0_191-b12 (where "b" means "build"). The version number is 8u191.

IANA Data 2018e
JDK 8u191 contains IANA time zone data version 2018e. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baselines
The security baselines for the Java Runtime Environment (JRE) at the time of the release of JDK 8u191 are specified in the following table:

JRE Family Version	JRE Security Baseline
8	1.8.0_191-b12
7	1.7.0_201-b11
6	1.6.0_211-b11

JRE Expiration Date
The JRE expires whenever a new release with security vulnerability fixes becomes available. Critical patch updates, which contain security vulnerability fixes, are announced one year in advance on Critical Patch Updates, Security Alerts and Bulletins. This JRE (version 8u191) will expire with the release of the next critical patch update scheduled for January 15, 2019.

For systems unable to reach the Oracle Servers, a secondary mechanism expires this JRE (version 8u191) on February 15, 2019. After either condition is met (new release becoming available or expiration date reached), the JRE will provide additional warnings and reminders to users to update to the newer version. For more information, see JRE Expiration Date.

New Features

• infrastructure/build - Build Environment Update Linux x86/x64 Moved to gcc 7.3

Changes

• core-svc - Changed Central File System Location for usagetracker.properties File
• security-libs/javax.net.ssl - Disabled all DES TLS Cipher Suites
• security-libs/java.security - Removal of Several Symantec Root CAs
• security-libs/java.security - Removal of Baltimore Cybertrust Code Signing CA
• security-libs/java.security - Removal of SECOM Root Certificate
• hotspot/runtime - Java Improvements for Docker Containers
• security-libs/javax.crypto - Improved Cipher Inputs

Bug Fixes

The following are some of the notable bug fixes included in this release:

• core-libs/javax.naming - LDAPS Communication Failure
• core-libs/java.net - Better HTTP Redirection Support

This release also contains fixes for security vulnerabilities described in the Oracle Critical Patch Update. For a more complete list of the bug fixes included in this release, see the JDK 8u191 Bug Fixes page.