{"id":232360,"date":"2025-07-21T15:07:07","date_gmt":"2025-07-21T22:07:07","guid":{"rendered":"https:\/\/devblogs.microsoft.com\/java\/?p=232360"},"modified":"2025-07-21T15:07:07","modified_gmt":"2025-07-21T22:07:07","slug":"java-openjdk-july-2025-patch-security-update","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/java\/java-openjdk-july-2025-patch-security-update\/","title":{"rendered":"Java OpenJDK July 2025 Patch &#038; Security Update"},"content":{"rendered":"<p>Hello Java customers!<\/p>\n<p>We are happy to announce the latest July 2025 patch &amp; security update release for the Microsoft Build of OpenJDK. <a href=\"https:\/\/aka.ms\/msopenjdk-dl\">Download and install<\/a> the binaries today.<\/p>\n<ul>\n<li>OpenJDK 21.0.8<\/li>\n<li>OpenJDK 17.0.16<\/li>\n<li>OpenJDK 11.0.28<\/li>\n<\/ul>\n<p>Check our <a href=\"https:\/\/learn.microsoft.com\/en-us\/java\/openjdk\/release-notes\">release notes page<\/a> for details on fixes and enhancements. The source code of our builds is available now on GitHub for further inspection: <a href=\"https:\/\/github.com\/microsoft\/openjdk-jdk21u\/tree\/release\/jdk-21.0.8_9\">jdk21u<\/a>, <a href=\"https:\/\/github.com\/microsoft\/openjdk-jdk17u\/tree\/release\/jdk-17.0.16_8\">jdk17u<\/a>, <a href=\"https:\/\/github.com\/microsoft\/openjdk-jdk11u\/tree\/release\/jdk-11.0.28_6\">jdk11u<\/a>.<\/p>\n<h2>Microsoft Build of OpenJDK specific updates<\/h2>\n<h3>OpenJDK21<\/h3>\n<div class=\"heading-wrapper\" data-heading-level=\"h4\"><\/div>\n<ul>\n<li>Implemented <a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8357445\" data-linktype=\"external\">JDK-8357445<\/a>: G1: Time-Based Heap Uncommit During Idle Periods\n<ul>\n<li>Added experimental support for automatic uncommitting of unused G1 heap regions during idle periods to reduce memory footprint in containerized and cloud environments<\/li>\n<li>Enable with <code>-XX:+UnlockExperimentalVMOptions -XX:+G1UseTimeBasedHeapSizing<\/code><\/li>\n<li>Particularly beneficial for:\n<ul>\n<li>Containerized applications with variable workloads<\/li>\n<li>Cloud deployments where memory usage affects billing<\/li>\n<li>Applications needing memory footprint optimization with no impact on GC pause times<\/li>\n<\/ul>\n<\/li>\n<li>For configuration details: <a href=\"https:\/\/github.com\/microsoft\/openjdk-workstreams\/tree\/main\/G1-time-based-uncommit\" data-linktype=\"external\">https:\/\/github.com\/microsoft\/openjdk-workstreams\/tree\/main\/G1-time-based-uncommit<\/a><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h3>OpenJDK17<\/h3>\n<div class=\"heading-wrapper\" data-heading-level=\"h4\"><\/div>\n<ul>\n<li>Implemented <a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8357445\" data-linktype=\"external\">JDK-8357445<\/a>: G1: Time-Based Heap Uncommit During Idle Periods\n<ul>\n<li>Added experimental support for automatic uncommitting of unused G1 heap regions during idle periods to reduce memory footprint in containerized and cloud environments<\/li>\n<li>Enable with <code>-XX:+UnlockExperimentalVMOptions -XX:+G1UseTimeBasedHeapSizing<\/code><\/li>\n<li>Particularly beneficial for:\n<ul>\n<li>Containerized applications with variable workloads<\/li>\n<li>Cloud deployments where memory usage affects billing<\/li>\n<li>Applications needing memory footprint optimization with no impact on GC pause times<\/li>\n<\/ul>\n<\/li>\n<li>For configuration details: <a href=\"https:\/\/github.com\/microsoft\/openjdk-workstreams\/tree\/main\/G1-time-based-uncommit\" data-linktype=\"external\">https:\/\/github.com\/microsoft\/openjdk-workstreams\/tree\/main\/G1-time-based-uncommit<\/a><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h3>OpenJDK11<\/h3>\n<ul>\n<li>No Microsoft-specific updates for this release.<\/li>\n<\/ul>\n<h2>Summary of Upstream Updates<\/h2>\n<h3>OpenJDK 21<\/h3>\n<ul>\n<li><a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8361672?jql=project%20%3D%20JDK%20AND%20status%20in%20(Closed%2C%20Resolved)%20AND%20fixVersion%20%3D%2021.0.8\" data-linktype=\"external\">List of fixes<\/a><\/li>\n<li>See the <a href=\"https:\/\/openjdk.org\/groups\/vulnerability\/advisories\/2025-07-15\" data-linktype=\"external\">OpenJDK Vulnerability Advisory<\/a><\/li>\n<\/ul>\n<h3>OpenJDK 17<\/h3>\n<ul>\n<li><a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8361674?jql=project%20%3D%20JDK%20AND%20status%20in%20(Closed%2C%20Resolved)%20AND%20fixVersion%20%3D%2017.0.16\" data-linktype=\"external\">List of fixes<\/a><\/li>\n<li>See the <a href=\"https:\/\/openjdk.org\/groups\/vulnerability\/advisories\/2025-07-15\" data-linktype=\"external\">OpenJDK Vulnerability Advisory<\/a><\/li>\n<\/ul>\n<h3>OpenJDK 11<\/h3>\n<ul>\n<li><a href=\"https:\/\/bugs.openjdk.org\/browse\/JDK-8359434?jql=project%20%3D%20JDK%20AND%20status%20in%20(Resolved%2C%20Closed)%20AND%20fixVersion%20%3D%2011.0.28%20ORDER%20BY%20created%20DESC\" data-linktype=\"external\">List of fixes<\/a><\/li>\n<li>See the <a href=\"https:\/\/openjdk.org\/groups\/vulnerability\/advisories\/2025-07-15\" data-linktype=\"external\">OpenJDK Vulnerability Advisory<\/a><\/li>\n<\/ul>\n<h3>OpenJDK 8<\/h3>\n<p>We continue to provide support on Azure and internally at Microsoft for OpenJDK 8 binaries of Eclipse Temurin built by the Eclipse Adoptium project. To facilitate its usage, we ship <a href=\"https:\/\/mcr.microsoft.com\/en-us\/product\/openjdk\/jdk\/tags\">container images of OpenJDK 8<\/a> on top of CBL-Mariner and Ubuntu. Refer to our documentation.<\/p>\n<p><a href=\"https:\/\/adoptium.net\/temurin\/releases\/?version=8\">OpenJDK 8 (latest)<\/a><\/p>\n<h4>Questions?<\/h4>\n<p>Contact <a href=\"mailto:openjdk-support@microsoft.com\">openjdk-support@microsoft.com<\/a>.<\/p>\n<h4>Amplify the news!<\/h4>\n<p><a href=\"https:\/\/www.linkedin.com\/posts\/joshmjaffe_download-the-microsoft-build-of-openjdk-activity-7353170812578791425-TAVm?utm_source=share&amp;utm_medium=member_desktop&amp;rcm=ACoAACSVMzcBPb-uFpJGqUtCMsuCqDsfIwseudY\">LinkedIn<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hello Java customers! We are happy to announce the latest July 2025 patch &amp; security update release for the Microsoft Build of OpenJDK. Download and install the binaries today. OpenJDK 21.0.8 OpenJDK 17.0.16 OpenJDK 11.0.28 Check our release notes page for details on fixes and enhancements. The source code of our builds is available now [&hellip;]<\/p>\n","protected":false},"author":9388,"featured_media":227205,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1,249],"tags":[],"class_list":["post-232360","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-java","category-openjdk"],"acf":[],"blog_post_summary":"<p>Hello Java customers! We are happy to announce the latest July 2025 patch &amp; security update release for the Microsoft Build of OpenJDK. Download and install the binaries today. OpenJDK 21.0.8 OpenJDK 17.0.16 OpenJDK 11.0.28 Check our release notes page for details on fixes and enhancements. The source code of our builds is available now [&hellip;]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/posts\/232360","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/users\/9388"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/comments?post=232360"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/posts\/232360\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/media\/227205"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/media?parent=232360"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/categories?post=232360"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/java\/wp-json\/wp\/v2\/tags?post=232360"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}