Java last version download for windows 10

Для запуска нашего лаунчера и самой игры Minecraft, у вас обязательно должен быть установлена Джава. На данной странице, вы узнаете все основные подробности установки. На всё это у вас уйдёт не много времени, а в результате получите доступ к одной из самых популярных игр в истории. Дополнительно, узнайте какие версии Java используют новые и старые версии игры.

Содержание:

Важная информация

Где скачать Java 8

Где скачать Java 16

Где скачать Java 17

Установка Java в Windows (XP, 7, 8, 10, 11)

Установка Java в MacOS

Установка Java в Linux

— Установка Java в Ubuntu для TLauncher/Minecraft

— Установка Java в Debian/Mint для TLauncher/Minecraft

— Установка Java в Fedora/CentOS для TLauncher/Minecraft

Решение проблем при установке Java

Обсуждение

---

Важная информация

Для TLauncher нужна именно Java 8! В некоторых Linux системах работает и с Java 11.

Рекомендованная версия Джава для Minecraft (1.16.5 и ниже) на Windows: Java 8 Update 51 (приоритет) или Java 8 Update 45.

Рекомендованная версия Java для Майнкрафт (1.16.5 и ниже) на MacOS/Linux: Java 8 Update Последний.

Рекомендованная версия Джава для Minecraft (1.17 и 1.17.1) на Windows: Java 16 (используемая разработчиками игры).

Рекомендованная версия Java для Майнкрафт (1.17 и 1.17.1) на MacOS/Linux: Java 16 (используемая разработчиками игры).

Рекомендованная версия Джава для Minecraft (1.18 и выше) на Windows: Java 17 (используемая разработчиками игры).

Рекомендованная версия Java для Майнкрафт (1.18 и выше) на MacOS/Linux: Java 17 (используемая разработчиками игры).

ВНИМАНИЕ: TLauncher автоматически* использует нужную версию Java рекомендованную разработчиками игры: для версии игры 1.18 — Java 17, для игры 1.17 — Java 1.16, для игры 1.16.5 и ниже — Java 8 Update 51. Поэтому, не нужно вручную устанавливать Java 16 или 17! Если происходит ошибка запуска связанная с Java, то проверьте в настройках лаунчера (Иконка «Шестеренки» -> «Настройки»), что стоит «Выбор Java» на «По умолчанию«. Если стоит другая версия, лаунчер будет пытаться запустить каждую версию от нее и может быть ошибка! Меняйте это, если понимаете для чего.

* Нужно использовать актуальную версию TLauncher 2.84 и выше.

---

Где скачать Java 8

Автоопределение системы для Java (Переход на внешний сайт);

Windows*: Java Windows x64; Java Windows x32

MacOS*: Java MacOS x64 (MacOS 10.7.3 и ВЫШЕ версии!);

Linux*: Java Linux x64 RPM; Java Linux x32 RPM; Java Linux x64; Java Linux x32

Где скачать Java 16

Windows*: Java Windows x64

MacOS*: Java MacOS x64

Linux*: Java Linux x64 RPM; Java Linux ARM x64 RPM; Java Linux x64 Deb

Где скачать Java 17

Windows*: Java Windows x64

MacOS*: Java MacOS x64; Java MacOS ARM x64

Linux*: Java Linux x64 RPM; Java Linux ARM x64 RPM; Java Linux x64 Deb

* Все версии взяты с официального сайта Java, не было внесено никаких изменений, подписаны цифровой подпись Oracle!

Установка Java в Windows (XP, 7, 8, 10, 11)

1) Определяем разрядность вашей системы — x32 или x64, если знаете, переходите к следующим пунктам. Если нет, то открываем «Мой компьютер» -> в верхнем меню (Компьютер) ищем «Свойства системы» и кликаем на эту кнопку.

2) Ищем пункт «Тип системы«, и возле него будет указана разрядность вашей системы.

2.1) Если указано «32-разрядная операционная система, процессор x64«, то рекомендуется переустановить Windows используя разрядность x64, так как процессор ваш поддерживает. В противном случаи, x32 обладает ограничениями на выделения оперативной памяти!

3) Определив вашу разрядность, скачиваем версию Java для x32 или x64 по ссылкам выше.

4) Запускаем скаченный установщик и нажимаем на кнопку «Install«. Произойдёт установка и теперь ваш компьютер готов к работе с Minecraft/TLauncher.

Установка Java в MacOS

1) Скачиваем версию Java под MacOS x64 по ссылке выше.

2) Запускаем скаченный образ DMG и запускаем в нём пакет установки PKG:

3) В первых двух окнах просто нажимаем «Продолжить«:

4) Как всегда, при установке в Мак ОС, вводим пароль:

5) Готово! Теперь у вас установлена Java на OS X.

Установка Java в Linux

Установка Java в Ubuntu для TLauncher/Minecraft

1) Открываем Терминал и выполняем стандартные sudo apt-get update , а после sudo apt-get upgrade .

2) Устанавливаем Java: sudo apt install openjdk-8-jdk и соглашаемся Y на установку.

3) Скачиваем Linux версию лаунчера и распаковываем архив с .jar файл в любое место (Архив .zip распаковываем, но не сам .jar!)

4) Запускаем лаунчер командой sudo java -jar /home/user/Downloads/TLauncher-2.83.jar . У вас будет другой путь, смотря куда положили файл! Будут скачены нужные файлы и запущен лаунчер:

Установка Java в Debian/Mint для TLauncher/Minecraft

1) Открываем Терминал и выполняем стандартные sudo apt-get update , а после sudo apt-get upgrade .

2) Устанавливаем саму Java: sudo apt install default-jdk и соглашаемся Y на установку.

3) Скачиваем Linux версию лаунчера и распаковываем архив с .jar файл в любое место (Архив .zip распаковываем, но не сам .jar!)

4) Запускаем лаунчер командой sudo java -jar /root/Downloads/TLauncher-2.83.jar . У вас будет другой путь, смотря куда положили файл! Будут скачены нужные файлы и запущен лаунчер:

Установка Java в Fedora/CentOS для TLauncher/Minecraft

1) Открываем Терминал и выполняем стандартные sudo yum update и обновляем.

2) Устанавливаем Java: sudo yum install java-11-openjdk и соглашаемся Y на установку.

3) Выполняем команду sudo update-alternatives —config java и указываем в поле число соответствующей версии Java 11, чтобы установить её по умолчанию. Проверяем с помощью java -version , что выводит Java 11:

4) Скачиваем Linux версию лаунчера и распаковываем архив с .jar файл в любое место (Архив .zip распаковываем, но не сам .jar!)

5) Запускаем лаунчер командой sudo java -jar /home/user/Downloads/TLauncher-2.84.jar . У вас будет другой путь, смотря куда положили файл! Будут скачены нужные файлы и запущен лаунчер.

Решение проблем при установке Java

1) Не запускается установщик Java, без ошибок и окон.

1.1) Пробуем полностью перезагрузить компьютер и запустить снова установщик.

1.2) Если перезагрузка не помогает, нужно переустановить вашу ОС (Windows и т.д.), так как она сломалась.

Обсуждение

Java Runtime Environment (JRE) allows you to play online games, chat with people around the world, calculate your mortgage interest, and view images in 3D, just to name a few. It’s also integral to the intranet applications and other e-business solutions that are the foundation of corporate computing.

It provides the libraries, the Java Virtual Machine, and other components to run applets and applications written in the Java programming language. In addition, two key deployment technologies are part of the JRE: Java Plug-in, which Enables Applets to Run in Popular Browsers; and Web Start, which deploys standalone applications over a network. Many cross-platform applications also require Java to operate properly.

It is a programming language and computing platform first released by Sun Microsystems in 1995. There are lots of applications and websites that will not work unless you have Java installed, and more are created every day. The program is fast, secure, and reliable. From laptops to datacenters, game consoles to scientific supercomputers, cell phones to the Internet, Java is everywhere! It is at the heart of the digital lifestyle. It’s the platform for launching careers, exploring human-to-digital interfaces, architecting the world’s best applications, and unlocking innovation everywhere—from garages to global organizations.

Why should I upgrade to the latest version?
The latest version contains important enhancements to improve the performance, stability, and security of the applications that run on your machine. Installing this free update will ensure that your applications continue to run safely and efficiently.

What will I get when I download software?
The Java Runtime Environment 64 bit (JRE app) is what you get when you download software. The JRE consists of the Java Virtual Machine (JVM), Java platform core classes, and supporting Java platform libraries. The JRE is the runtime portion of the software, which is all you need to run it in your Web browser.

What is Java Plug-in software?
The program is a component of the (JRE). The JRE allows applets written in the programming language to run inside various internet browsers. The Plug-in software is not a standalone program and cannot be installed separately.

I have heard the terms Virtual Machine and JVM. Is this software?
The Virtual Machine is only one aspect of software that is involved in web interaction. The Java Virtual Machine is built right into your software download and helps run Java apps.

Note: When your installation completes, you may need to restart your browser (close all browser windows and re-open) to enable the installation.

Also Available: Download Java Runtime Environment for Mac

Download Java Runtime Environment (64-bit) Latest Version

Java is a general-purpose, object-oriented, and class-based programming language that is widely used by numerous developers. Its very design ensures that few implementation dependencies are used whenever this language is deployed.

As a programmer, you can rely on it to create complex applications for single PCs or distribution networks. Nowadays, a lot of websites, services, and applications rely on Java JRE to run. Thus, not having the latest version on your PC may prevent you from accessing them altogether.

Thanks to its overall security, reliability, and flexibility, this language is a trustworthy instrument in several fields.

From gaming consoles, data centers, smartphones, websites, and laptops to super-powerful science computers, Java (JRE) is there to provide a strong backbone.

Java’s system requirements

Although it was designed to work on a wide range of devices, it’s wise to check if your system is eligible to run Java JRE before rushing to deploy it. Without further ado, here’s the prerequisite list:

• Operating system: Windows 10, 8.1, 8, 7, Vista, Server 2008, Server 2012 (including R2)
• Architecture: works on both 32-bit and 64-bit operating systems
• Memory: at least 128 MB RAM
• Space: minimum 124 MB free HDD space for JRE (Java Runtime Environment) + 2 MB for Java Update
• Processor: at least a Pentium II 266 MHz CPU
• Browsers: Internet Explorer versions 9 and higher, Mozilla Firefox

You can see for yourselves that you don’t need a supercomputer to deploy and run Java (JRE). Its wide device accessibility has proven to be true to form, and we can move on with our review.

Our Review

How to remove Java completely from your Windows PC

If you previously used Java (JRE) on your PC, chances are you still have some older version available somewhere on your system or at the very least some residual files.

In this case, you might want to remove the old Java files before you proceed with deploying the latest version.

You can tackle this situation in two different ways:

1. Use the Java Uninstall Tool
2. Remove Java manually, like any other program

1. Using the Java Uninstall Tool

This tool can come in very handy, as it automates the process of identifying and removing Java from your PC completely. There’s no need to search for remaining files, as this utility can take care of everything for you.

• You will see the versions of Java that the tool detected and wants to remove
• It’s possible to select all Java versions to remove or just some of them
• You can use it to detect and uninstall Java versions 1.4.2 and higher
• This tool detects only Java versions that were deployed through the official installer, and not bundled editions

It comes in especially handy if you’ve installed several editions of JRE on your PC and have no idea how to get rid of them all. You can download the Java Uninstall Tool from here.

2. Uninstalling Java manually

It’s not necessarily more complicated to remove Java manually, but there are a bunch more steps you need to take.

Additionally, if you have multiple versions available on your system, you might miss some of them, rendering the uninstallation process ineffective.

With that in mind, here’s how to uninstall JRE manually on Windows 10:

1. Click the Start button
2. Choose Settings from the Start menu
3. Press the Apps button in the Settings window
4. Locate the Java edition you want to uninstall and click it
5. Click the Uninstall button
6. Wait for the process to finish

That’s all. We can’t stress this enough, but make sure you have removed every trace of old JRE files before you install the latest Java version on your Windows 10 PC. Trust us, it will save you a lot of hassle.

How to install Java (JRE) on Windows

It’s critical that you always have the latest stable version of Java (JRE) if you want to avoid incompatibility issues, runtime errors, or even crashes.

We’ll show you how to install the latest Java (JRE) version on your Windows 10 PC. Follow these steps:

1. Go to the Java JRE download page
2. Check the recommended version at the top of the page
3. Scroll down to the Windows section
4. Choose the appropriate installer version for you
5. Wait for the download to complete
6. Double-click the installer executable
7. Follow the on-screen installer instructions

The installation part is not exactly difficult since all the configuration you need to do is choosing a destination path on your PC. However, you must be careful to choose the right installer from the website.

Currently, there’s an online installation tool, and two offline ones (one for 32-bit browsers, and another one for 64-bit ones).

Note: if you use 32-bit and 64-bit browsers on the same computer and want to use Java on each of them, you need to install both 32-bit and 64-bit versions of Java (JRE).

FAQ: Learn more about Java

• What is Java?

To put it shortly, Java is a great programming language that is used in a wide range of fields. You need to download its runtime environment (JRE) if you want to be able to run Java-based applications on your PC.

• How to update Java?

After you install it on your computer, Java will offer to keep itself updated automatically. Alternatively, you can set it to notify and remind you of updates without deploying them automatically, or you can download updates manually from the official website.

• How can I enable Java in Chrome?

Starting with version 42, you can no longer use Java in Chrome, since the browser no longer supports NPAPI (Java applet technology). You can still use it on versions 42 and earlier, but there’s really no point in doing so.

The full version string for this update release is 11.0.18+11 (where «+» means «build»). The version number is 11.0.18.

Complete release notes for Java 11 can be found here.

What is Java?

Java is a programming language and software platform. Examples of applications that use Java are numerous and widespread but include web browsers, office applications and even mainstream games like Minecraft are based on Java.

What is Java JDK?

The Java Development Kit (JDK) is the full-featured software development kit for Java developers. It has everything the JRE has, but adds the compiler (javac) and tools (like javadoc and jdb). The JDK allows you to create and compile Java programs.

Is Java free to use?

Yes, Java is free to use under the jdk.java.net license. This means anyone can download it for personal or development use at no cost. Oracle does charge for long term support, but this is optional.

IANA Data 2020a

JDK 11.0.16 contains IANA time zone data 2021a. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baselines

The security baselines for the Java Runtime Environment (JRE) at the time of the release of JDK 11.0.16 are specified in the following table:

JRE Family Version = JRE Security Baseline (Full Version String)

• 11 = 11.0.16+11
• 8 = 8u341-b10
• 7 = 7u351-b07

Keeping the JDK up to Date

Oracle recommends that the JDK is updated with each Critical Patch Update. In order to determine if a release is the latest, the Security Baseline page can be used to determine which is the latest version for each release family.

Critical patch updates, which contain security vulnerability fixes, are announced one year in advance on Critical Patch Updates, Security Alerts and Bulletins. It is not recommended that this JDK (version 11.0.13) be used after the next critical patch update scheduled for January 18, 2022.

What’s New

Oracle recommends that the JDK is updated with each Critical Patch Update. In order to determine if a release is the latest, the Security Baseline page can be used to determine which is the latest version for each release family.

Critical patch updates, which contain security vulnerability fixes, are announced one year in advance on Critical Patch Updates, Security Alerts and Bulletins. It is not recommended that this JDK (version 11.0.16) be used after the next critical patch update scheduled for October 18, 2022.

New Features

core-libs/java.net

➜ HTTPS Channel Binding Support for Java GSS/Kerberos

Support has been added for TLS channel binding tokens for Negotiate/Kerberos authentication over HTTPS through javax.net.HttpsURLConnection.

Channel binding tokens are increasingly required as an enhanced form of security which can mitigate certain kinds of socially engineered, man in the middle (MITM) attacks. They work by communicating from a client to a server the client’s understanding of the binding between connection security (as represented by a TLS server cert) and higher level authentication credentials (such as a username and password). The server can then detect if the client has been fooled by a MITM and shutdown the session/connection.

The feature is controlled through a new system property jdk.https.negotiate.cbt which is described fully on the Networking Properties page.

Other Notes

➜ JDK Bundle Extensions Truncated When Downloading Using Firefox 102

On oracle.com and java.com, certain JDK bundle extensions are getting truncated on download when using Firefox version 102. The downloaded bundles have no file extension like «.exe», «.rpm», «.deb». If you are not able to upgrade to Firefox ESR 102.0.1 or Firefox 103 when it is released, then as a workaround you can:

• manually add a file extension to the file name after download.
• use a different browser

Changes

core-libs/java.io

➜ Enable Windows Alternate Data Streams by default

The Windows implementation of java.io.File has been changed so that strict validity checks are not performed by default on file paths. This includes allowing colons (‘:’) in the path other than only immediately after a single drive letter. It also allows paths that represent NTFS Alternate Data Streams (ADS), such as «filename:streamname». This restores the default behavior of java.io.File to what it was prior to the April 2022 CPU in which strict validity checks were not performed by default on file paths on Windows. To re-enable strict path checking in java.io.File, the system property jdk.io.File.enableADS should be set to false (case ignored). This might be preferable, for example, if Windows special device paths such as NUL: are not used.

Bug Fixes

This release is based on the previous CPU and does not contain any additional security fixes. The following issues have also been resolved:

• JDK-8284920 Category: xml Subcategory: javax.xml.path Summary: Incorrect Token type causes XPath expression to return incorrect results
• JDK-8284548 Category:xml Subcategory: jaxpInvalid Summary: XPath expression causes StringIndexOutOfBoundsException

Java SE 11.0.15 Advanced — Bundled Patch Release (BPR) — Bug Fixes and Updates

The following sections summarize changes made in all Java SE 11.0.15 BPR releases. The BPR releases are listed below in date order, most current BPR first. Note that bug fixes in previous BPRs are also included in the current BPR.

• JDK-8221741 Category: client-libs Subcategory: 2d Description: ClassCastException can happen when fontconfig.properties is used
• JDK-8212904 Category: client-libs Subcategory: javax.swing Description: JTextArea line wrapping incorrect when using UI scale
• JDK-8282583 Category: xml Subcategory: jaxp Description: Update BCEL md to include the copyright notice
• JDK-8283350 Category: core-libs Subcategory: java.time Description: (tz) Update Timezone Data to 2022a

Previous release notes

security-libs/org.ietf.jgss:krb5

➜ Support cross-realm MSSFU

The support for the Kerberos MSSFU extensions [1] is now extended to cross-realm environments.

By leveraging the Kerberos cross-realm referrals enhancement introduced in the context of JDK-8215032, the ‘S4U2Self’ and ‘S4U2Proxy’ extensions may be used to impersonate user and service principals located on different realms.

security-libs/java.security

➜ Customizing PKCS12 keystore Generation

New system and security properties have been added to enable users to customize the generation of PKCS #12 keystores. This includes algorithms and parameters for key protection, certificate protection, and MacData. The detailed explanation and possible values for these properties can be found in the «PKCS12 KeyStore properties» section of the java.security file.

Also, support for the following SHA-2 based HmacPBE algorithms has been added to the SunJCE provider: HmacPBESHA224, HmacPBESHA256, HmacPBESHA384, HmacPBESHA512, HmacPBESHA512/224, HmacPBESHA512/256

Removed Features and Options

security-libs/java.security

➜ Removed Root Certificates with 1024-bit Keys

The following root certificates with weak 1024-bit RSA public keys have been removed from the cacerts keystore:

+ alias name «thawtepremiumserverca [jdk]» Distinguished Name: EMAILADDRESS=premium-server@thawte.com, CN=Thawte Premium Server CA, OU=Certification Services Division, O=Thawte Consulting cc, L=Cape Town, ST=Western Cape, C=ZA + alias name «verisignclass2g2ca [jdk]» Distinguished Name: OU=VeriSign Trust Network, OU=»(c) 1998 VeriSign, Inc. — For authorized use only», OU=Class 2 Public Primary Certification Authority — G2, O=»VeriSign, Inc.», C=US + alias name «verisignclass3ca [jdk]» Distinguished Name: OU=Class 3 Public Primary Certification Authority, O=»VeriSign, Inc.», C=US + alias name «verisignclass3g2ca [jdk]» Distinguished Name: OU=VeriSign Trust Network, OU=»(c) 1998 VeriSign, Inc. — For authorized use only», OU=Class 3 Public Primary Certification Authority — G2, O=»VeriSign, Inc.», C=US + alias name «verisigntsaca [jdk]» Distinguished Name: CN=Thawte Timestamping CA, OU=Thawte Certification, O=Thawte, L=Durbanville, ST=Western Cape, C=ZA

Previous release notes

security-libs/java.security

➜ -groupname Option Added to keytool Key Pair Generation

A new -groupname option has been added to keytool -genkeypair so that a user can specify a named group when generating a key pair. For example, keytool -genkeypair -keyalg EC -groupname secp384r1 will generate an EC key pair by using the secp384r1 curve. Because there might be multiple curves with the same size, using the -groupname option is preferred over the -keysize option.

security-libs/javax.net.ssl

➜ Support for certificate_authorities Extension

The «certificate_authorities» extension is an optional extension introduced in TLS 1.3. It is used to indicate the certificate authorities (CAs) that an endpoint supports and should be used by the receiving endpoint to guide certificate selection.

With this JDK release, the «certificate_authorities» extension is supported for TLS 1.3 in both the client and the server sides. This extension is always present for client certificate selection, while it is optional for server certificate selection.

Applications can enable this extension for server certificate selection by setting the jdk.tls.client.enableCAExtension system property to true. The default value of the property is false.

Note that if the client trusts more CAs than the size limit of the extension (less than 2^16 bytes), the extension is not enabled. Also, some server implementations do not allow handshake messages to exceed 2^14 bytes. Consequently, there may be interoperability issues when jdk.tls.client.enableCAExtension is set to true and the client trusts more CAs than the server implementation limit.

core-libs/java.lang

➜ POSIX_SPAWN Option on Linux

As an additional way to launch processes on Linux, the jdk.lang.Process.launchMechanism property can be set to POSIX_SPAWN. This option has been available for a long time on other *nix platforms. The default launch mechanism (VFORK) on Linux is unchanged, so this additional option does not affect existing installations.

POSIX_SPAWN mitigates rare pathological cases when spawning child processes, but it has not yet been excessively tested. Prudence is advised when using POSIX_SPAWN in productive installations.

security-libs/javax.net.ssl

➜ Support for X25519 and X448 in TLS

The named elliptic curve groups x25519 and x448 are now available for JSSE key agreement in TLS versions 1.0 to 1.3, with x25519 being the most preferred of the default enabled named groups. The default ordered list is now:

x25519, secp256r1, secp384r1, secp521r1, x448, ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192

The default list can be overridden by using the system property jdk.tls.namedGroups.

security-libs/java.security

➜ jarsigner Preserves POSIX File Permission and symlink Attributes

When signing a file that contains POSIX file permission or symlink attributes, jarsigner now preserves these attributes in the newly signed file but warns that these attributes are unsigned and not protected by the signature. The same warning is printed during the jarsigner -verify operation for such files.

Note that the jar tool does not read/write these attributes. This change is more visible to tools like unzip where these attributes are preserved.

client-libs/2d

➜ Oracle JDK11u for Solaris Now Requires harfbuzz to be Installed

Oracle JDK-11.0.10 and later for Solaris 11 requires that the OS provide the package library/desktop/harfbuzz as part of the system installation. This package is provided for Solaris 11.3 and later.

$ pkg info harfbuzz Name: library/desktop/harfbuzz Summary: HarfBuzz is an OpenType text shaping engine Description: HarfBuzz is a library for text shaping, which converts unicode text to glyph indices and positions. HarfBuzz is used directly by libraries such as Pango, and the layout engines in firefox. Category: Desktop (GNOME)/Libraries State: Installed Publisher: solaris

This is a desktop library, but the font processing it does is part of some common backend server workloads. It should always be considered as required.

If this library is missing, then the pkg mechanism will require it during installation of the JDK. If installing the JDK by using a tar.gz bundle (for example) and the library/desktop/harfbuzz package is missing, a runtime link failure will occur when this package is needed.

JDK-8251907 (not public)

core-libs/java.time

➜ JDK time-zone data upgraded to tzdata2020d

The JDK update incorporates tzdata2020d. The main change is

Palestine ends DST earlier than predicted, on 2020-10-24.

Please refer to https://mm.icann.org/pipermail/tz-announce/2020-October/000062.html for more information.

core-libs/java.time

➜ JDK time-zone data upgraded to tzdata2020c

The JDK update incorporates tzdata2020c. The main change is

Fiji starts DST later than usual, on 2020-12-20.

Please refer to https://mm.icann.org/pipermail/tz-announce/2020-October/000060.html for more information.

core-libs/java.time

➜ US/Pacific-New Zone Name Removed as Part of tzdata2020b

Following the JDK’s update to tzdata2020b, the long-obsolete files named pacificnew and systemv have been removed. As a result, the «US/Pacific-New» Zone name declared in the pacificnew data file is no longer available for use.

Information regarding this update can be viewed at https://mm.icann.org/pipermail/tz-announce/2020-October/000059.html.

Bug Fixes

• This release also contains fixes for security vulnerabilities described in the Oracle Critical Patch Update. For a more complete list of the bug fixes included in this release, see the JDK 11.0.10 Bug Fixes page.

security-libs/java.security

➜ Weak Named Curves in TLS, CertPath, and Signed JAR Disabled by Default

• Weak named curves are disabled by default by adding them to the following disabledAlgorithms security properties: jdk.tls.disabledAlgorithms, jdk.certpath.disabledAlgorithms, and jdk.jar.disabledAlgorithms. The named curves are listed below.
• With 47 weak named curves to be disabled, adding individual named curves to each disabledAlgorithms property would be overwhelming. To relieve this, a new security property, jdk.disabled.namedCurves, is implemented that can list the named curves common to all of the disabledAlgorithms properties. To use the new property in the disabledAlgorithms properties, precede the full property name with the keyword include. Users can still add individual named curves to disabledAlgorithms properties separate from this new property. No other properties can be included in the disabledAlgorithms properties.
• To restore the named curves, remove the include jdk.disabled.namedCurves either from specific or from all disabledAlgorithms security properties. To restore one or more curves, remove the specific named curve(s) from the jdk.disabled.namedCurves property.
• Curves that are disabled through jdk.disabled.namedCurves include the following: secp112r1, secp112r2, secp128r1, secp128r2, secp160k1, secp160r1, secp160r2, secp192k1, secp192r1, secp224k1, secp224r1, secp256k1, sect113r1, sect113r2, sect131r1, sect131r2, sect163k1, sect163r1, sect163r2, sect193r1, sect193r2, sect233k1, sect233r1, sect239k1, sect283k1, sect283r1, sect409k1, sect409r1, sect571k1, sect571r1, X9.62 c2tnb191v1, X9.62 c2tnb191v2, X9.62 c2tnb191v3, X9.62 c2tnb239v1, X9.62 c2tnb239v2, X9.62 c2tnb239v3, X9.62 c2tnb359v1, X9.62 c2tnb431r1, X9.62 prime192v2, X9.62 prime192v3, X9.62 prime239v1, X9.62 prime239v2, X9.62 prime239v3, brainpoolP256r1, brainpoolP320r1, brainpoolP384r1, brainpoolP512r1
• Curves that remain enabled are: secp256r1, secp384r1, secp521r1, X25519, X448. See JDK-8233228

security-libs/org.ietf.jgss:krb5

➜ Support for Kerberos Cross-Realm Referrals (RFC 6806)

• The Kerberos client has been enhanced with the support of principal name canonicalization and cross-realm referrals, as defined by the RFC 6806 protocol extension.
• As a result of this new feature, the Kerberos client can take advantage of more dynamic environment configurations and does not necessarily need to know (in advance) how to reach the realm of a target principal (user or service).
• Support is enabled by default and 5 is the maximum number of referral hops allowed. To turn it off, set the sun.security.krb5.disableReferrals security or system property to false. To configure a custom maximum number of referral hops, set the sun.security.krb5.maxReferrals security or system property to any positive value.

Previous versions:

• Java SE JDK 11.0.10 for Windows
• Java SE JDK 11.0.10 for macOS
• Java SE JDK 11.0.10 for Linux DEB
• Java SE JDK 11.0.10 for Linux RPM

• Java SE JDK 11.0.6 for Windows
• Java SE JDK 11.0.6 for macOS
• Java SE JDK 11.0.6 for Linux DEB
• Java SE JDK 11.0.6 for Linux RPM
• Java SE JDK 11.0.4 for Windows
• Java SE JDK 11.0.4 for macOS
• Java SE JDK 11.0.4 for Linux DEB
• Java SE JDK 11.0.4 for Linux RPM
• Java SE JDK 11.0.3 for Windows
• Java SE JDK 11.0.3 for macOS
• Java SE JDK 11.0.3 for Linux DEB
• Java SE JDK 11.0.3 for Linux RPM