ZULU OPENJDK VERSION 11 UPDATE
ZULU OPENJDK VERSION 11 PRO
ZULU OPENJDK VERSION 11 CODE
ZULU OPENJDK VERSION 11 SERIES
ZULU OPENJDK VERSION 11 DOWNLOAD

“Given the popularity of Macs among Java developers, when Apple announced the transition of MacBooks and Mac Desktops to Apple Silicon, we recognized the resulting gap in Java support and anticipated a broad developer need for Java JDKs for these new platforms,” said Scott Sellers, Azul president and CEO.

ZULU OPENJDK VERSION 11 DOWNLOAD

Azul Zulu builds of OpenJDK are free to download and use without restrictions, with optional support available from Azul via Zulu Enterprise subscription plans.

ZULU OPENJDK VERSION 11 PRO

At its “One More Thing” event on November 10 2020, Apple followed through on its promise and debuted new MacBook Air, MacBook Pro and Mac Mini Arm-based models powered by Apple Silicon.Īzul Zulu™ builds of OpenJDK are tested and certified open source JDKs, and cover the industry’s widest supported range of OpenJDK versions, target platforms, and package types. In June 2020, Apple announced a two-year plan to transition the CPUs in its Macintosh line of computers from Intel’s x86-64 processors to Apple-designed chips that use the ARM64 architecture. In addition to targeting future Java versions, such as Java 16 via JEP 391, Azul will make OpenJDK builds of currently popular Java versions, including Zulu builds of OpenJDK 8, 11, 13, and 15, widely available for use on Apple Silicon, Arm-based Macs.

ZULU OPENJDK VERSION 11 SERIES

Azul’s Platform Core product makes that as simple as possible.SUNNYVALE, Calif.-( BUSINESS WIRE)-Azul Systems, provider of the world’s most trusted open source Java platform, today announced plans to deliver OpenJDK builds for Apple’s series of Apple Silicon, Arm-based Macs, to provide developers and users of these new Macs with native Java support for current and popular Java versions.Īzul has been leading the OpenJDK community effort ( JEP 391) initiated in August 2020, to add support for Apple Silicon, Arm-based Macs in future versions of OpenJDK. This has since been superseded by version 2.16, which addresses a subsequently discovered edge-case vulnerability.Īs a more general recommendation, to ensure maximum security for your Java applications, it is best to keep all components, especially the JDK updated with all available patches. Version 2.15 was released when the vulnerability was made public.

ZULU OPENJDK VERSION 11 UPDATE

The implication is that not all JVM-based applications are exposed, only those that use Log4J.įor those applications that do use Log4J, it is vital that you update to the latest release of the library. The widely used Apache Struts framework is an excellent example of this.įortunately, this vulnerability does not affect the logging library included in OpenJDK.

ZULU OPENJDK VERSION 11 CODE

The impact of this is that, even though the code you’ve written may not make use of Log4J, there is a strong chance other libraries or frameworks you use do. Since logging is fundamental to monitoring and managing enterprise software, it needs to be pervasive in the code used. As a result, log4J, an Apache Foundation open source project, has become the defacto standard for recording messages about what an application is doing. However, as we’ve seen, this does not come without risk.Īlthough, as I mentioned, the JDK provides a logging API, many developers do not see it as powerful enough to handle all the scenarios required for complex enterprise applications. Not reinventing the same wheel each time when creating a new application has great appeal and reduces both the time and cost of developing applications. (It should also be noted that the JDK includes a logging API).Īlthough the core libraries in the JDK cover a broad range of functionality, there is an unparalleled richness of other libraries, many of which are open-source and free to use. In JDK 17, just the core classes number nearly 8,000, covering everything from basic input-output to handling cryptographic signatures. One of the reasons Java is so popular as a development platform is the availability of libraries of classes that provide almost any functionality you can think of. I’ve seen several ways of using this vulnerability that only require a particular string to be entered in a web form.

Unfortunately, this means it is a vulnerability that can be exploited quite easily and via a remote connection. The vulnerability is extremely serious, having been given a CVSS of 10.0, the highest possible value. It’s even being reported in mainstream media with headlines like “ The internet is on fire!” (Which seems a little unlikely).

Anyone who works in IT will, by now, be acutely aware of the critical security vulnerability that was revealed in the Log4J library last week.

Zulu openjdk version 11