New in release OpenJDK 11.0.12 (2021-07-20):

Live versions of these release notes can be found at:

• https://bitly.com/openjdk11012
• https://builds.shipilev.net/backports-monitor/release-notes-11.0.12.txt

Security fixes

• JDK-8256157: Improve bytecode assembly
• JDK-8256491: Better HTTP transport
• JDK-8258432, CVE-2021-2341: Improve file transfers
• JDK-8260453: Improve Font Bounding
• JDK-8260960: Signs of jarsigner signing
• JDK-8260967, CVE-2021-2369: Better jar file validation
• JDK-8262380: Enhance XML processing passes
• JDK-8262403: Enhanced data transfer
• JDK-8262410: Enhanced rules for zones
• JDK-8262477: Enhance String Conclusions
• JDK-8262967: Improve Zip file support
• JDK-8264066, CVE-2021-2388: Enhance compiler validation
• JDK-8264079: Improve abstractions
• JDK-8264460: Improve NTLM support

Major changes

• Customizing PKCS12 keystore Generation
• Removed Root Certificates with 1024-bit Keys
• Removed Telia Company's Sonera Class2 CA certificate
• Upgraded the Default PKCS12 Encryption and MAC Algorithms
• Improve Encoding of TLS Application-Layer Protocol Negotiation (ALPN) Values
• Support for certificate_authorities Extension