If and when Java 9 arrives, the current version and default download on the official website is still Java 8. But just like other kinds of software, a major version release will get several updates. Since its initial release in 2014, Java 8 has had 112 updates, including the recently released build, 8u112.
Here’s what you need to know about the latest release:
- This update has a full version string of 1.8.0_112-b15. The b here stands for build.
- This update has a version number of 8u112.
Since bug fixes and changes are major parts of any update, here’s what’s new with 8u112:
- The SunPKCS11 Provider doesn’t offer SecureRandom by default anymore. This particular change is implemented for the Solaris system given the poor performance of the native PKCS11 implementation. As such, its use is not recommended. Developers whose applications needs SecureRandom.PKCS1 can enable it by opening the conf/security/sunpkcs11-solaris.cfg file then taking out SecureRandom from the disabledMechanisms list.
- The java.security.SecureRandom class has been improved. The enhancements allow synchronization to be taken out of the method java.security.SecureRandom.nextBytes(byte bytes).
- The update fixes several security vulnerabilities – 139 to be exact. The complete list can be found in the Oracle site.
Oracle suggests that all those using Java 8 bump up their versions to this one as it contains a lot of important security fixes. Since this is a patch-set update, all the fixes and changes from 8u111 was also included with this release.
Apart from this release, Oracle also announced that the next JRE update is planned for January 2017. Specifically, that update will be treating MD-5 signed JARs as unsigned.
Java is one of the widely used platforms in the world. Not only is it free, there are a number of tools to make development such a breeze.