New in release OpenJDK 8u292 (2021-04-20):

Live versions of these release notes can be found at:

• https://bitly.com/openjdk8u292
• https://builds.shipilev.net/backports-monitor/release-notes-openjdk8u292.txt

Security fixes

• JDK-8227467: Better class method invocations
• JDK-8244473: Contextualize registration for JNDI
• JDK-8244543: Enhanced handling of abstract classes
• JDK-8249906, CVE-2021-2163: Enhance opening JARs
• JDK-8250568, CVE-2021-2161: Less ambiguous processing
• JDK-8253799: Make lists of normal filenames

Other significant changes

• JDK-8236730: Weak Named Curves in TLS, CertPath, and Signed JAR Disabled by Default
• JDK-8244286: Tools Warn If Weak Algorithms Are Used
• JDK-8256490: Disable TLS 1.0 and 1.1
• JDK-8242147: New System Properties to Configure the TLS Signature Schemes
• JDK-8177368: Several incorporation steps are silently failing when an error should be reported
• ATK accessibility bridge bindings removed

Full release notes can also be found in the NEWS file in the installed RPM.