The Liberty-for-Java Buildpack v3.51 now includes Liberty runtime 20.0.0.12 as the alternate and default runtime and an updated IBM JRE 8.0.6.15.
The AdoptOpenJDK OpenJ9 alternate JRE was updated to version 11.0.9_11_openj9-0.23.0. The default and alternate Liberty runtime version 20.0.0.12 includes a fix for the CVE-2020-10693 that affects WAS Liberty 17.0.0.3 – 20.0.0.10 using beanValidation-2.0 feature.
This buildpack contains two production versions of Liberty — a default version that remains constant for approximately three months and the latest version, as an alternate.
An existing application will not be affected by the new buildpack until you redeploy or restage it. After redeployment, existing applications should continue to run “as is” without any additional changes. New applications will automatically use the new buildpack.