JDK 8u501 Release Notes
Java™ SE Development Kit 8, Update 8u501 (JDK 8u501)
Release date: July 21, 2026
The full version string for this update release is 1.8.0_501-b08 (where "b" means "build"). The version number is 8u501. This JDK conforms to version 8.6 of the Java SE Specification (JSR 337 MR 6 2024-07-02).
IANA TZ Data 2026b
JDK 8u501 contains IANA time zone data 2026b which contains the following changes since the previous update.
- British Columbia last daylight saving time change was 2026-03-08 spring forward.
For more information, refer to Timezone Data Versions in the JRE Software.
Security Baselines
The security baselines for the Java Runtime Environment (JRE) at the time of the release of JDK 8u501 are specified in the following table:
| JRE Family Version | JRE Security Baseline (Full Version String) |
|---|---|
| 8 | 1.8.0_501-b08 |
Keeping the JDK up to Date
Oracle recommends that the JDK is updated with each Critical Patch Update. In order to determine if a release is the latest, the Security Baseline page can be used to determine which is the latest version for each release family.
Critical patch updates, which contain security vulnerability fixes, are announced one year in advance on Critical Patch Updates, Security Alerts and Bulletins. It is not recommended that this JDK (version 8u501) be used after the next Critical Security Patch Update scheduled for August 18, 2026. Oracle is transitioning to more frequent security updates, see the recently published blog for more information.
Java Management Service, available to all users, can help you find vulnerable Java versions in your systems. Java SE Subscribers and customers running in Oracle Cloud can use Java Management Service to update Java Runtimes and to do further security reviews like identifying potentially vulnerable third party libraries used by your Java programs. Existing Java Management Service user click here to log in to your dashboard. The Java Management Service Documentation provides a list of features available to everyone and those available only to customers. Learn more about using Java Management Service to monitor and secure your Java Installations.
For systems unable to reach the Oracle Servers, a secondary mechanism expires this JRE (version 8u501) on 2026-11-20. After either condition is met (new release becoming available or expiration date reached), the JRE will provide additional warnings and reminders to users to update to the newer version. For more information, see 23.1.2 JRE Expiration Date in the Java Platform, Standard Edition Deployment Guide.
Other Notes
The following root certificates have been added to the cacerts truststore:
+ WISeKey
+ wisekeyglobalrootgbca
DN: CN=OISTE WISeKey Global Root GB CA, OU=OISTE Foundation Endorsed, O=WISeKey, C=CH
+ WISeKey
+ wisekeyglobalrootgcca
DN: CN=OISTE WISeKey Global Root GC CA, OU=OISTE Foundation Endorsed, O=WISeKey, C=CH
A new system and security property, com.sun.security.crl.maxSize, has been added to limit the maximum length of a CRL that is downloaded through URIs in the CRL Distribution Points certificate extension during path validation. The value of these properties is the size in bytes of the DER-encoded CRL. For protocols that can return multivalue responses, such as LDAP, the size threshold is the sum of all CRLs downloaded from a single search query. CRLs that exceed this length will not be processed during certificate path validation. This size limit does not apply to CRLs that are imported through non-network-based means. A negative value disables this size limitation. A non-numeric value will be ignored, and the default size will be used instead. The default size limit is 20 MiB. For cases where both the security and system properties are set, the system property takes precedence. Enabling certificate path logging by setting java.security.debug=certpath will output the current size limit and note any discarded CRLs.
Fixes
This release also contains fixes for security vulnerabilities described in the Oracle Critical Patch Update.
The following table lists the bug fixes included in the JDK 8u501 release:
| # | BugId | Component | Summary |
|---|---|---|---|
| 1 | JDK-8369561 | client-libs/2d | sun/java2d/OpenGL/DrawBitmaskImage.java#id0: Incorrect color for first pixel (actual=ff000000) |
| 2 | JDK-8378201 | client-libs/2d | [OGL] glXMakeContextCurrent() drops the buffers of the unbound drawable |
| 3 | JDK-8297191 | client-libs/2d | [macos] Printing a page range with starting page > 1 results in missing pages |
| 4 | JDK-8376233 | client-libs/java.awt | Clean up code in Desktop native peer |
| 5 | JDK-8379256 | client-libs/java.awt | Update GIFlib to 6.1.1 |
| 6 | JDK-8380959 | client-libs/java.awt | Update Libpng to 1.6.56 |
| 7 | JDK-8380078 | client-libs/java.awt | Update GIFlib to 6.1.2 |
| 8 | JDK-8382047 | client-libs/java.awt | Update Libpng to 1.6.57 |
| 9 | JDK-8377526 | client-libs/java.awt | Update Libpng to 1.6.55 |
| 10 | JDK-8286258 | client-libs/javax.accessibility | [Accessibility,macOS,VoiceOver] VoiceOver reads the spinner value wrong and sometime partially |
| 11 | JDK-8365379 | client-libs/javax.swing | SU3.applyInsets may produce wrong results |
| 12 | JDK-8377727 | client-libs/javax.swing | Ghost caret and focus appear in non-editable text fields |
| 13 | JDK-8197812 | core-libs/java.lang | (ref) Data race in Finalizer |
| 14 | JDK-8202252 | core-libs/java.nio | (aio) Closed AsynchronousSocketChannel keeps completion handler alive |
| 15 | JDK-8366866 | core-libs/java.rmi | SslRMIClientSocketFactory#createSocket lacking priviledges (securitymanger) |
| 16 | JDK-8378631 | core-libs/java.util.jar | Update Zlib Data Compression Library to Version 1.3.2 |
| 17 | JDK-8348328 | core-libs/java.util:i18n | Update IANA Language Subtag Registry to Version 2025-05-15 |
| 18 | JDK-8275535 | core-libs/javax.naming | Retrying a failed authentication on multiple LDAP servers can lead to users blocked |
| 19 | JDK-8226919 | core-svc/tools | attach in linux hangs due to permission denied accessing /proc/pid/root |
| 20 | JDK-8380199 | docs/guides | Fix typos in Windows installation documentation in 8u |
| 21 | JDK-8324345 | hotspot/compiler | Stack overflow during C2 compilation when splitting memory phi |
| 22 | JDK-8376887 | hotspot/test | Add Ubuntu 24.04 to list of Linux execution platforms in 8u |
| 23 | JDK-8349256 | javafx/graphics | Update PipeWire to 1.3.81 |
| 24 | JDK-8379257 | javafx/graphics | Update JPEG Image Decoding Software to 10 |
| 25 | JDK-8379211 | javafx/graphics | Uninitialised memory in Java_com_sun_javafx_font_freetype_OSFreetype_FT_1Outline_1Decompose |
| 26 | JDK-8379209 | javafx/graphics | Uninitialised variable in pathApplierFunctionFast of coretext.c |
| 27 | JDK-8378510 | javafx/media | Provide media support for libavcodec version 62 |
| 28 | JDK-8379206 | javafx/media | 4 Null pointer dereference defect groups in 4 glib files |
| 29 | JDK-8381447 | javafx/media | Remove G_DISABLE_CHECKS compiler flag on Windows to align GLib/GStreamer compilation with macOS/Linux |
| 30 | JDK-8376282 | javafx/web | [linux, macos] JavaFX fails to build WebKit in DebugNative |
| 31 | JDK-8375084 | javafx/web | Update libxslt to 1.1.45 |
| 32 | JDK-8379336 | javafx/web | Update libxml2 to 2.15.2 |
| 33 | JDK-8378226 | javafx/web | Animated GIFs do not animate after WebKit 620.1 update |
| 34 | JDK-8335469 | javafx/window-toolkit | [XWayland] crash when an AWT ScreenCast session overlaps with an FX ScreenCast session |
| 35 | JDK-8357584 | javafx/window-toolkit | [XWayland] [OL10] Robot.mousePress() is delivered to wrong place |
| 36 | JDK-8273743 | javafx/window-toolkit | KeyCharacterCombination for "+" does not work on US QWERTY keyboard layout |
| 37 | JDK-8311546 | security-libs/java.security | Certificate name constraints improperly validated with leading period |
| 38 | JDK-8374109 | security-libs/javax.crypto | AES/RSA Ciphers not offered by UCrypto provider in JDK 8 |