Skip to content

Latest commit

 

History

History
1171 lines (853 loc) · 59.7 KB

CHANGELOG.md

File metadata and controls

1171 lines (853 loc) · 59.7 KB
Raw

Change Log for Amazon Corretto 11

The following sections describe the changes for each release of Amazon Corretto 11.

Corretto version: 11.0.24.8.1

Release Date: July 16, 2024

Target Platforms 1

  • RPM-based Linux using glibc 2.12 or later, x86, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Linux using glibc 2.25 or later, Arm
  • Linux using muslc 1.2.2 or later, Arm
  • Alpine-based Linux, x86_64
  • Alpine-based Linux, aarch64
  • Windows 10 or later, x86, x86_64
  • macOS 12.0 and later, x86_64
  • macOS 12.0 and later, aarch64

1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms

The following issues are addressed in 11.0.24.8.1:

Issue Name Platform Description Link
Import jdk-11.0.24+8 All Update Corretto baseline to OpenJDK 11.0.24+8 jdk-11.0.24+8
Re-enable DTLS1.0 All Re-enable DTLS to not change default TLS corretto-11/pull/366

The following CVEs are addressed in 11.0.24.8.1:

CVE CVSS Component
CVE-2024-21147 7.4 hotspot/compiler
CVE-2024-21145 4.8 client-libs/2d
CVE-2024-21140 4.8 hotspot/compiler
CVE-2024-21144 3.7 core-libs/java.util
CVE-2024-21131 3.7 hotspot/runtime
CVE-2024-21138 3.7 hotspot/runtime

Corretto version: 11.0.23.9.1

Release Date: April 16, 2024

Target Platforms 1

  • RPM-based Linux using glibc 2.12 or later, x86, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Linux using glibc 2.25 or later, Arm
  • Linux using muslc 1.2.2 or later, Arm
  • Alpine-based Linux, x86_64
  • Alpine-based Linux, aarch64
  • Windows 10 or later, x86, x86_64
  • macOS 12.0 and later, x86_64
  • macOS 12.0 and later, aarch64

1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms

The following issues are addressed in 11.0.23.9.1:

Issue Name Platform Description Link
Import jdk-11.0.23+9 All Update Corretto baseline to OpenJDK 11.0.23+9 jdk-11.0.23+9
(tz) Update Timezone Data to 2024a All Update Timezone Data to 2024a JDK-8325150

The following CVEs are addressed in 11.0.23.9.1:

CVE CVSS Component
CVE-2024-21094 3.7 hotspot/compiler
CVE-2024-21085 3.7 core-libs/java.util
CVE-2024-21011 3.7 hotspot/runtime
CVE-2024-21068 3.7 hotspot/compiler
CVE-2024-21012 3.7 core-libs/java.net

Corretto version: 11.0.22.7.1

Release Date: January 16, 2024

Target Platforms 1

  • RPM-based Linux using glibc 2.12 or later, x86, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Linux using glibc 2.25 or later, Arm
  • Linux using muslc 1.2.2 or later, Arm
  • Alpine-based Linux, x86_64
  • Alpine-based Linux, aarch64
  • Windows 10 or later, x86, x86_64
  • macOS 12.0 and later, x86_64
  • macOS 12.0 and later, aarch64

1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms

The following issues are addressed in 11.0.22.7.1:

Issue Name Platform Description Link
Import jdk-11.0.22+7 All Update Corretto baseline to OpenJDK 11.0.22+7 jdk-11.0.22+7
(tz) Update Timezone Data to 2023d All Update Timezone Data to 2023d JDK-8322725
NPE in PKCS7.parseOldSignedData All fixes exception PKCS7.parseOldSignedDat JDK-8315042
Disable build-ids in AL RPMs AL2023 Build-ids can conflict across versions N/A
Support dealing with standard assert macro All fix name clash of assert macro in debug.hpp with libc's assert macro JDK-8299254
Enable Neoverse N1 optimizations for Neoverse V2 All Enable Neoverse N1 optimizations for Neoverse V2 JDK-8321025

The following CVEs are addressed in 11.0.22.7.1:

CVE CVSS Component
CVE-2024-20918 7.4 hotspot/compiler
CVE-2024-20952 7.4 security-libs/java.security
CVE-2024-20926 5.9 core-libs/javax.script
CVE-2024-20919 5.9 hotspot/runtime
CVE-2024-20921 5.9 hotspot/compiler
CVE-2024-20945 4.7 security-libs/javax.xml.crypto

Corretto version: 11.0.21.9.1

Release Date: October 17, 2023

Target Platforms 1

  • RPM-based Linux using glibc 2.12 or later, x86, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Linux using glibc 2.25 or later, Arm
  • Linux using muslc 1.2.2 or later, Arm
  • Alpine-based Linux, x86_64
  • Alpine-based Linux, aarch64
  • Windows 10 or later, x86, x86_64
  • macOS 11.0 and later, x86_64
  • macOS 11.0 and later, aarch64

1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms

The following issues are addressed in 11.0.21.9.1:

Issue Name Platform Description Link
Import jdk-11.0.21+9 All Update Corretto baseline to OpenJDK 11.0.21+9 jdk-11.0.21+9
JDK-8168261 All Use Server Cipher Suites Preference by Default JDK-8168261

The following CVEs are addressed in 11.0.21.9.1:

CVE CVSS Component
CVE-2023-22081 5.3 security-libs/javax.net.ssl

Corretto version: 11.0.20.9.1

Release Date: August 22, 2023

Target Platforms 1

  • RPM-based Linux using glibc 2.12 or later, x86, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Linux using glibc 2.25 or later, Arm
  • Linux using muslc 1.2.2 or later, Arm
  • Alpine-based Linux, x86_64
  • Alpine-based Linux, aarch64
  • Windows 10 or later, x86, x86_64
  • macOS 11.0 and later, x86_64
  • macOS 11.0 and later, aarch64

1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms

The following issues are addressed in 11.0.20.9.1:

Issue Name Platform Description Link
8313765: Invalid CEN header (invalid zip64 extra data field size) All Fix ZipException that may be encountered when opening select APK, ZIP or JAR files JDK-8313765

Corretto version: 11.0.20.8.1

Release Date: July 18, 2023

Target Platforms 1

  • RPM-based Linux using glibc 2.12 or later, x86, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Linux using glibc 2.25 or later, Arm
  • Linux using muslc 1.2.2 or later, Arm
  • Alpine-based Linux, x86_64
  • Alpine-based Linux, aarch64
  • Windows 10 or later, x86_64
  • macOS 11.0 and later, x86_64
  • macOS 11.0 and later, aarch64

1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms

The following issues are addressed in 11.0.20.8.1:

Issue Name Platform Description Link
Import jdk-11.0.20+8 All Update Corretto baseline to OpenJDK 11.0.20+8 jdk-11.0.20+8
Dynamic link zlib for non armv7 linux All Dynamic link zlib for non armv7 linux #333
8302483: Enhance ZIP performance All This release of OpenJDK includes stronger checks on the Zip64 fields of zip files. In the event that these checks cause failures on trusted zip files, the checks can be disabled by setting the new system property 'jdk.util.zip.disableZip64ExtraFieldValidation' to 'true'.
8300596: Enhance Jar Signature validation All A System property "jdk.jar.maxSignatureFileSize" is introduced to configure the maximum number of bytes allowed for the signature-related files in a JAR file during verification. The default value is 8000000 bytes (8 MB).
The following CVEs are addressed in 11.0.20.8.1:
CVE CVSS Component
CVE-2023-22041 5.1 hotspot/compiler
CVE-2023-25193 3.7 client-libs/2d
CVE-2023-22045 3.7 hotspot/compiler
CVE-2023-22049 3.7 core-libs/java.io
CVE-2023-22036 3.7 core-libs/java.util
CVE-2023-22006 3.1 core-libs/java.net

Corretto version: 11.0.19.7.1

Release Date: April 18, 2023

Target Platforms 1

  • RPM-based Linux using glibc 2.12 or later, x86, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Linux using glibc 2.25 or later, Arm
  • Linux using muslc 1.2.2 or later, Arm
  • Alpine-based Linux, x86_64
  • Alpine-based Linux, aarch64
  • Windows 10 or later, x86_64
  • macOS 11.0 and later, x86_64
  • macOS 11.0 and later, aarch64

1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms

The following issues are addressed in 11.0.19.7.1:

Issue Name Platform Description Link
Import jdk-11.0.19+7 All Update Corretto baseline to OpenJDK 11.0.19+7 jdk-11.0.19+7
(tz) Update Timezone Data to 2023c All Update Timezone Data to 2023c #323
Update amazon cacerts All Update amazon cacerts file from amazonlinux #318 #321 #322

The following CVEs are addressed in 11.0.19.7.1:

CVE CVSS Component
CVE-2023-21930 7.4 security-libs/javax.net.ssl
CVE-2023-21954 5.9 hotspot/gc
CVE-2023-21967 5.9 security-libs/javax.net.ssl
CVE-2023-21939 5.3 client-libs/javax.swing
CVE-2023-21938 3.7 core-libs/java.lang
CVE-2023-21937 3.7 core-libs/java.net
CVE-2023-21968 3.7 core-libs/java.nio

Corretto version: 11.0.18.11.1

Release Date: Feb 2, 2023

Target Platforms 1

  • Alpine-based Linux, aarch64

1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms

The following issues are addressed in 11.0.18.11.1:

Issue Name Platform Description Link
Support for musl libc on aarch64 Alpine Linux aarch64 Add support for musl-based aarch64, such as Alpine Linux corretto-docker#46

Corretto version: 11.0.18.10.1

Release Date: January 17, 2023

Target Platforms 1

  • RPM-based Linux using glibc 2.12 or later, x86, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Linux using glibc 2.25 or later, Arm
  • Linux using muslc 1.2.2 or later, Arm
  • Alpine-based Linux, x86_64
  • Windows 10 or later, x86_64
  • macOS 10.15 and later, x86_64
  • macOS 11.0 and later, aarch64

1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms

The following issues are addressed in 11.0.18.10.1:

Issue Name Platform Description Link
Import jdk-11.0.18+10 All Update Corretto baseline to OpenJDK 11.0.18+10 jdk-11.0.18+10
Backport 8221351 All Backport 8221351: Crash in KlassFactory::check_shared_class_file_load_hook #298
Backport 8221621 All Backport 8221621: FindTests.gmk cannot handle "=" in TEST.groups comments #298
Fix java_home alternative Linux Alternative dir without architecture should be created on headless package #302
Update amazon cacerts All Update amazon cacerts file from amazonlinux
Relax VerifyCACerts All Relax VerifyCACerts expiry condition #294

The following CVEs are addressed in 11.0.18.10.1:

CVE CVSS Component
CVE-2023-21835 5.3 security-libs/javax.net.ssl
CVE-2023-21843 3.7 client-libs/javax.sound

Corretto version: 11.0.17.8.1

Release Date: October 18, 2022

Target Platforms 1

  • RPM-based Linux using glibc 2.12 or later, x86, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Linux using glibc 2.25 or later, Arm
  • Linux using muslc 1.2.2 or later, Arm
  • Alpine-based Linux, x86_64
  • Windows 7 or later, x86_64
  • macOS 10.15 and later, x86_64
  • macOS 11.0 and later, aarch64

1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms

The following issues are addressed in 11.0.17.8.1:

Issue Name Platform Description Link
Import jdk-11.0.17+8 All Update Corretto baseline to OpenJDK 11.0.17+8 jdk-11.0.17+8
Update Timezone Data to 2022e All All tzdata updates up to 2022e #292 #293
Add jpeg, alsa and fonts as headless dependencies Amazon Linux Add libraries that could be used in headless mode to RPM dependecies #287
Update amazon cacerts All Update amazon cacerts file from amazonlinux

The following CVEs are addressed in 11.0.17.8.1:

CVE CVSS Component
CVE-2022-21626 5.3 security-libs/java.security
CVE-2022-21618 5.3 security-libs/org.ietf.jgss
CVE-2022-21628 5.3 core-libs/java.net
CVE-2022-39399 3.7 core-libs/java.net
CVE-2022-21619 3.7 security-libs/java.security
CVE-2022-21624 3.7 core-libs/javax.naming

Corretto version: 11.0.16.9.1

Release Date: August 15, 2022

Target Platforms

  • RPM-based Linux using glibc 2.12 or later, x86, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Alpine-based Linux, x86_64
  • Windows 7 or later, x86_64
  • macos 10.15 and later, x86_64
  • macos 11.0 and later, aarch64

The following issues are addressed in 11.0.16.9.1

Issue Name Platform Description Link
Import jdk-11.0.16.1+1 All Updates Corretto baseline to OpenJDK 11.0.16.1+1 jdk-11.0.16.1+1
Resolve C2 compiler crash All JDK-8279219 caused regressions in the OpenJDK 11.0.16 and OpenJDK 17.0.4 releases and we are backing it out. See JDK-8291665. JDK-8292260
Unify Info.plist files with correct version strings macOS JDK-8252145

Corretto version: 11.0.16.8.3

Release Date: July 28, 2022

Target Platforms

  • macOS 10.15 and later, x86_64
  • macOS 11.0 and later, aarch64

The following issues are addressed in 11.0.16.8.3

Issue Name Platform Description Link
jlink error Hash of java.rmi differs to expected hash macOS jlink mods contained hashes calculated using the older format, no code changes #280
Fix macOS packaging macOS Update macos packaging logic to avoid duplicate paths after installation #277

Corretto version: 11.0.16.8.2

Release Date: July 25, 2022

Target Platforms

  • Amazon Linux 2022, x86_64
  • Amazon Linux 2022, aarch64

The following issues are addressed in 11.0.16.8.2

Issue Name Platform Description Link
Add provides java-devel AL2/AL2022 Adding provides java-devel as required by 3p packages

Corretto version: 11.0.16.8.1

Release Date: July 19, 2022

Target Platforms

  • RPM-based Linux using glibc 2.12 or later, x86, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Linux using glibc 2.25 or later, Arm
  • Alpine-based Linux, x86_64
  • Windows 7 or later, x86_64
  • macOS 10.15 and later, x86_64
  • macOS 11.0 and later, aarch64

The following issues are addressed in 11.0.16.8.1.

Issue Name Platform Description Link
Import jdk-11.0.16+8 All Update Corretto baseline to OpenJDK 11.0.16+8 jdk-11.0.16+8
Enable bundled zlib library on macOS aarch64 MacOS Updates to use bundled (not the system) version of the zlib library on macOS aarch64 #36
Update amazon cacerts All Update amazon cacerts file from amazonlinux

The following CVEs are addressed in 11.0.16.8.1

CVE CVSS Component
CVE-2022-34169 7.5 xml/jaxp
CVE-2022-21541 5.9 hotspot/runtime
CVE-2022-21540 5.3 hotspot/compiler

Corretto version: 11.0.15.9.1

Release Date: April 19, 2022

Target Platforms

  • RPM-based Linux using glibc 2.12 or later, x86, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Linux using glibc 2.25 or later, Arm
  • Alpine-based Linux, x86_64
  • Windows 7 or later, x86_64
  • macOS 10.13 and later, x86_64
  • macOS 11.0 and later, aarch64

The following CVEs are addressed in 11.0.15.9.1

CVE CVSS Component
CVE-2022-21476 7.5 security-libs/java.security
CVE-2022-21496 5.3 core-libs/javax.naming
CVE-2022-21434 5.3 core-libs/java.lang
CVE-2022-21426 5.3 xml/jaxp
CVE-2022-21443 3.7 security-libs/java.security

Corretto version: 11.0.14.10.1

Release Date: February 8, 2022

Target Platforms

  • RPM-based Linux using glibc 2.12 or later, x86, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Linux using glibc 2.25 or later, Arm
  • Alpine-based Linux, x86_64
  • Windows 7 or later, x86_64
  • macOS 10.13 and later, x86_64

The following issues are addressed in 11.0.14.10.1.

Issue Name Platform Description Link
Import jdk-11.0.14.1+1 All Update Corretto baseline to OpenJDK 11.0.14.1+1 jdk-11.0.14.1+1
Backport JDK-8218546 All Unable to connect to https://google.com using java.net.HttpClient JDK-8218546

Corretto version: 11.0.14.9.1

Release Date: January 18, 2022

Target Platforms

  • RPM-based Linux using glibc 2.12 or later, x86, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Linux using glibc 2.25 or later, Arm
  • Alpine-based Linux, x86_64
  • Windows 7 or later, x86_64
  • macOS 10.13 and later, x86_64

The following issues are addressed in 11.0.14.9.1.

Issue Name Platform Description Link
Import jdk-11.0.14+9 All Update Corretto baseline to OpenJDK 11.0.14+9 jdk-11.0.14+9
Use SHA256 hashes in RPM File Digest RPM-based Linux Update plugins to support FIPS compliant file digests in generated RPMs #344
Sign Mac bundle Macos x64 The Macos tgz contained signed files, but was not signed as a bundle
Update Amazon CACerts All Pull in the latest CA Certificates from Amazon Linux
64 bit .dll on Windows x86 Windows x86 64 bit .dll was used by the Corretto 11 on windows x86 corretto-11#238

The following CVEs are addressed in 11.0.14.9.1

CVE CVSS Component
CVE-2022-21341 5.3 core-libs/java.io:serialization
CVE-2022-21365 5.3 client-libs/javax.imageio
CVE-2022-21282 5.3 xml/jaxp
CVE-2022-21291 5.3 hotspot/runtime
CVE-2022-21277 5.3 client-libs/javax.imageio
CVE-2022-21305 5.3 hotspot/compiler
CVE-2022-21299 5.3 xml/jaxp
CVE-2022-21296 5.3 xml/jaxp
CVE-2022-21283 5.3 core-libs/java.util
CVE-2022-21340 5.3 security-libs/java.security
CVE-2022-21293 5.3 core-libs/java.lang
CVE-2022-21294 5.3 core-libs/java.util
CVE-2022-21360 5.3 client-libs/javax.imageio
CVE-2022-21248 3.7 core-libs/java.io:serialization
CVE-2022-21366 5.3 client-libs/javax.imageio

Corretto version: 11.0.13.8.1

Release Date: October 19, 2021

Target Platforms

  • RPM-based Linux using glibc 2.12 or later, x86, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Linux using glibc 2.25 or later, Arm
  • Alpine-based Linux, x86_64
  • Windows 7 or later, x86_64
  • macOS 10.13 and later, x86_64

The following issues are addressed in 11.0.13.8.1.

Issue Name Platform Description Link
Import jdk-11.0.13+8 All Update Corretto baseline to OpenJDK 11.0.13+8 jdk-11.0.13+8
Add audio-input entitlements Macos Package is missing entitlements to properly request access to microphone N/A

The following CVEs are addressed in 11.0.13.8.1

CVE CVSS Component
CVE-2021-35567 6.8 security-libs/java.security
CVE-2021-35550 5.9 security-libs/javax.net.ssl
CVE-2021-35586 5.3 client-libs/javax.imageio
CVE-2021-35564 5.3 security-libs/java.security
CVE-2021-35561 5.3 core-libs/java.util
CVE-2021-35565 5.3 core-libs/java.net
CVE-2021-35559 5.3 client-libs/javax.swing
CVE-2021-35578 5.3 security-libs/javax.net.ssl
CVE-2021-35556 5.3 client-libs/javax.swing
CVE-2021-35603 3.7 security-libs/javax.net.ssl
CVE-2021-35588 3.1 hotspot/runtime

Corretto version: 11.0.12.7.2

Release Date: July 20, 2021

Target Platforms

  • macOS 10.13 and later, x86_64

The following issues are addressed in 11.0.12.7.2.

Issue Name Platform Description Link
8266248: Compilation failure in PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5 MacOS Compilation failure in PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5 JDK-8266248

Corretto version: 11.0.12.7.1

Release Date: July 20, 2021

Target Platforms

  • RPM-based Linux using glibc 2.12 or later, x86, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Linux using glibc 2.25 or later, Arm
  • Alpine-based Linux, x86_64
  • Windows 7 or later, x86_64
  • macOS 10.13 and later, x86_64

The following issues are addressed in 11.0.12.7.1.

Issue Name Platform Description Link
Import jdk-11.0.12+6 All Update Corretto baseline to OpenJDK 11.0.12+6 jdk-11.0.12+6
Add support for GCC 10. All Add support for building corretto with gcc 10.
Aarch64 enhancements aarch64 8186670: Implement _onSpinWait() intrinsic for AArch64
8258604: Use 'isb' instruction in SpinPause on linux-aarch64
x86 enhancements x86 Fix missing code from 8222074: Enhance auto vectorization for x86
Update amazon cacerts All Update amazon cacerts file from amazonlinux
Serial GC Bugfix effecting Java-11 Runtime in Lambda All 8268635: Corrupt oop in ClassLoaderData

The following CVEs are addressed in 11.0.12.7.1

CVE CVSS Component
CVE-2021-2388 7.5 hotspot/compiler
CVE-2021-2369 4.3 security-libs/java.security
CVE-2021-2341 3.1 core-libs/java.net

Corretto version: 11.0.11.9.1

Release Date: April 20, 2021

Target Platforms

  • RPM-based Linux using glibc 2.12 or later, x86, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Linux using glibc 2.25 or later, Arm
  • Alpine-based Linux, x86_64
  • Windows 7 or later, x86_64
  • macOS 10.13 and later, x86_64

The following issues are addressed in 11.0.11.9.1.

Issue Name Platform Description Link
Import jdk-11.0.11.9.1 All Updates Corretto baseline to OpenJDK 11.0.10+9 jdk-11.0.11+9
Update Alpine flags to include Shenandoah and VM bug URL Alpine-based Linux Updating Corretto Alpine build flags to include Shenandoah garbage collector and to match up with the other Corretto platforms. corretto-11#180
Remove expired cacerts All Removes expired cacerts "thawtepremiumserverca" and "verisigntsaca" corretto-11#184
Fix C2 compilation failed with assert(!q->is_MergeMem()) All Include JDK-8221592 and JDK-8223581 to address C2 compilation failed with assert(!q->is_MergeMem()) JDK-8221592, JDK-8223581
Enable TLS 1.0 and 1.1 All Re-enable TLS 1.0 and 1.1 which has been disabled in upstream 11.0.11+9

The following CVEs are addressed in 11.0.11.9.1

CVE CVSS Component
CVE-2021-2161 5.9 core-libs/java.io
CVE-2021-2163 5.3 security-libs/java.security

Corretto version: 11.0.10.9.1

Release Date: January 19, 2021

Target Platforms

  • RPM-based Linux using glibc 2.12 or later, x86, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Linux using glibc 2.25 or later, Arm
  • Alpine-based Linux, x86_64
  • Windows 7 or later, x86_64
  • macOS 10.13 and later, x86_64

The following issues are addressed in 11.0.10.9.1.

Issue Name Platform Description Link
Import jdk-11.0.10+9 all Updates Corretto baseline to OpenJDK 11.0.10+9 jdk-11.0.10+9
Change directory structure of Corretto 11 repository All Move the contents of the src directory up one level. This enables simpler merges from upstream and better history tracking Move content of src one level up
Proper Detection of Graviton 2 CPUs linux aarch64 Includes JDK-8256488, JDK-8233912, JDK-8257436, JDK-8255351 Add detection for Graviton 2 CPUs
Support adaptive heuristic for Shenandoah Garbage Collector all Includes JDK-8255984 and JDK-8256912 Shenandoah: "adaptive" heuristic is prone to missing load spikes

This version addresses a number of security vulnerabilities that do not have an associated CVE.

Corretto version: 11.0.9.12.1

Release Date: November 4, 2020

Target Platforms

  • RPM-based Linux using glibc 2.12 or later, x86, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Linux using glibc 2.25 or later, Arm (Preview)
  • Alpine-based Linux, x86_64
  • Windows 7 or later, x86_64
  • macOS 10.13 and later, x86_64

The following issues are addressed in 11.0.9.12.1.

Issue Name Platform Description Link
Import jdk-11.0.9.1+1 all Updates Corretto baseline to OpenJDK 11.0.9.1+1 jdk-11.0.9.1+1
8255603: Memory/Performance regression after JDK-8210985 all Fixes a problem with the initial size of SSLSessionCache being too big JDK-8255603
Move files in root of tar.gz to subfolder linux Fixes an issue in some generic linux artifacts where some of the text included files were in the root directory or missing
Use default values for java.version all Stop overriding the java.version value (build only)
[mac] Use wildcard to match the JDK version number when renaming the artifacts mac Non-permanent fix to support building with a PATCH element in the java version (build only)
[mac] Temporarily update JVMVersion in Info.plist template to include the patch number for 11.0.9.1 mac Non-permanent fix to support generating a .pkg with a PATCH element in the java version (build only)

Corretto version: 11.0.9.11.2

Release Date: October 22, 2020

Target Platforms

  • Windows 7 or later, x86_64

The following issue is addressed in 11.0.9.11.2.

Issue Name Platform Description Link
jlink error hash of java.rmi differs to expected hash Windows The jlink failed to work due to wrong module hashes in java.base.jmod corretto-11#144

October 2020 critical patch update: Corretto version 11.0.9.11.1

Release Date: October 20, 2020

Target Platforms

  • RPM-based Linux using glibc 2.12 or later, x86, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Alpine-based Linux, x86_64
  • Windows 7 or later, x86_64
  • macOS 10.13 and later, x86_64

The following issues and enhancements are addressed in 11.0.9.11.1.

Issue Name Platform Description Link
Update Corretto to 11.0.9.11.1. All Update Corretto 11 patch set to 11.0.9.11.1.
Enable Shenandoah on build time All Corretto builds include the Shenandoah garbage collector
Add -moutline-atomics for linux aarch64 builds Linux aarch64 Improves performance on aarch64 systems
Need to eliminate excessive i2l conversions Linux aarch64 Improves performance on aarch64 systems JDK-8248043
AARCH64: I2L/L2I conversions can be skipped for masked positive values Linux aarch64 Improves performance on aarch64 systems JDK-8248870
AARCH64: Faster Math.signum(fp) Linux aarch64 Improves performance on aarch64 systems JDK-8251525
ARM64: save some words in itable stub Linux aarch64 Improves performance on aarch64 systems JDK-8252311
C2: Excessive RemoveUseless passes during incremental inlining All JDK-8059241
Remove unnecessary caching of Parker object in java.lang.Thread All JDK-8222518
AArch64: the const STUB_THRESHOLD in macroAssembler_aarch64.cpp needs to be tuned Linux aarch64 Optimize the stub thresholds of string_compare intrinsics JDK-8229351
Improve performance of InflaterOutputStream.write() All JDK-8242848
Set legal directory file permissions. Linux Ensures files under the legal folder are marked as read only
Fix GCC8 and GCC9 warnings All Multiple changes, including JDK-8215009, JDK-8214854, JDK-8220074, JDK-8219675, JDK-8244653, to eliminate newer GCC related warnings JDK-8215009, JDK-8214854, JDK-8220074, JDK-8219675, JDK-8244653

The following CVEs are addressed in 11.0.9.11.1

CVE CVSS Component
CVE-2020-14803 5.3 core-libs/java.io
CVE-2020-14792 4.2 hotspot/compiler
CVE-2020-14782 3.7 security-libs/java.security
CVE-2020-14797 3.7 core-libs/java.nio
CVE-2020-14781 3.7 core-libs/javax.naming
CVE-2020-14779 3.7 core-libs/java.io:serialization
CVE-2020-14796 3.1 core-libs/java.io
CVE-2020-14798 3.1 core-libs/java.io

July 2020 critical patch update: Corretto version 11.0.8.10.1

Release Date: July 14, 2020

Target Platforms

  • RPM-based Linux using glibc 2.12 or later, x86, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Alpine-based Linux, x86_64
  • Windows 7 or later, x86_64
  • macOS 10.13 and later, x86_64

The following issues and enhancements are addressed in 11.0.8.10.1.

Issue Name Platform Description Link
Update Corretto to 11.0.8.10.1. All Update Corretto 11 patch set to 11.0.8.10.1.
Add Corretto 11 x86 Linux Added Linux x86 32-bit as a supported platform
Add Corretto 11 alpine Linux Added Linux Alpine x86_64 as a supported platform corretto/corretto-11#99
Backport JDK-8247408 All 8247408: IdealGraph bit check expression canonicalization JDK-8247408
Update Amazon linux cacerts All Updates the set of certificates from Amazon Linux bundled with Corretto
Add provides to match openjdk Linux Update the provides clause for generic linux rpm and deb files
Remove expired certificates All Removed three expired CA certificates present in upstream

The following CVE are addressed in 11.0.8.10.1.

CVE CVSS Component
CVE-2020-14583 8.3 core-libs/java.io
CVE-2020-14593 7.4 client-libs/2d
CVE-2020-14562 5.3 client-libs/javax.imageio
CVE-2020-14621 5.3 xml/jaxp
CVE-2020-14556 4.8 core-libs/java.util.concurrent
CVE-2020-14573 3.7 hotspot/compiler
CVE-2020-14581 3.7 client-libs/2d
CVE-2020-14577 3.7 security-libs/javax.net.ssl

Corretto version: 11.0.7.10.1-1

Release Date: April 22, 2020

Target Platforms

  • macOS 10.13 and later, x86_64

The following issues and enhancements are addressed in 11.0.7.10.1-1.

Issue Name Platform Description Link
jlink error Hash of java.rmi differs to expected hash macOS java.base.jmod throws hash mismatch error when using jlink corretto-11#96
macOS 11.0.7.10.1 tgz is not signed macOS Binaries in macOS tgz are not properly signed

April 2020 critical patch update: Corretto version 11.0.7.10.1

Release Date: April 14, 2020

Target Platforms

  • RPM-based Linux using glibc 2.12 or later, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Windows 7 or later, x86_64
  • macOS 10.13 and later, x86_64

The following issues and enhancements are addressed in 11.0.7.10.1.

Issue Name Platform Description Link
Update Corretto to 11.0.7.10.1. All Update Corretto 11 patch set to 11.0.7.10.1.
Increase default value of maxInlineLevel All Backport from tip of JDK, performance improvement JDK-8234863
Fix missing Amazon cacerts in java.base.jmod All Ensures Corretto runtimes generated with jlink uses the proper cacerts instead of a partial set of certificates corretto/corretto-11#88
Add support for test image on linux Linux Build process generates additional artifacts to support native jtreg tests
Add support for test image on macOS macOS Build process generates additional artifacts to support native jtreg tests

The following CVE are addressed in 11.0.7.10.1.

CVE CVSS Component
CVE-2020-2803 8.3 core-libs/java.nio
CVE-2020-2805 8.3 core-libs/java.io
CVE-2020-2816 7.5 security-libs/javax.net.ssl
CVE-2020-2781 5.3 security-libs/java.security
CVE-2020-2830 5.3 core-libs/java.util
CVE-2020-2767 4.8 security-libs/javax.net.ssl
CVE-2020-2800 4.8 core-libs/java.net
CVE-2020-2778 3.7 security-libs/javax.net.ssl
CVE-2020-2754 3.7 core-libs/javax.script
CVE-2020-2755 3.7 core-libs/javax.script
CVE-2020-2773 3.7 security-libs/javax.xml.crypto
CVE-2020-2756 3.7 core-libs/java.io:serialization
CVE-2020-2757 3.7 core-libs/java.io:serialization

Corretto version: 11.0.6.10.1-2 (macOS)

Release Date: Jan 23, 2020

The following platforms are updated in this release.

Target Platforms

  • macOS 10.13 and later, x86_64

The following issue is addressed in 11.0.6.10.1-2.

Issue Name Platform Description Link
link fails with 'Invalid JMOD file' on macOS 10.15.2 macOS Java module files in macOS builds were broken in previous release corretto-11#77

Corretto version: 11.0.6.10.1-1 (macOS and Windows)

Release Date: Jan 16, 2020

The following platforms are updated in this release.

Target Platforms

  • Windows 7 or later, x86_64
  • macOS 10.13 and later, x86_64

The following issue is addressed in 11.0.6.10.1-1.

Issue Name Platform Description Link
SSL handshake error with 11.0.6.10.1(macOS and Windows Platforms) macOS, Windows Fixed bad cacerts file on Windows and macOS that was causing SSL connection errors corretto-11#73

January 2020 critical patch update: Corretto version 11.0.6.10.1

Release Date: Jan 15, 2020

The following platforms are updated in this release.

Target Platforms

  • RPM-based Linux using glibc 2.12 or later, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Windows 7 or later, x86_64
  • macOS 10.13 and later, x86_64

The following issues and enhancements are addressed in 11.0.6.10.1.

Issue Name Platform Description Link
Update Corretto to 11.0.6.10.1. All Update Corretto 11 patch set to 11.0.6.10.1.
Debian package doesn't provide java8-runtime like openjdk-11-jre from debian does. Linux，Debian Provides additional provide in corretto deb corretto-11#35
Backport JDK-8215396 All JTabbedPane preferred size calculation is wrong for SCROLL_TAB_LAYOUT. corretto-11#63
GPG key used to sign debian repository changed Linux GPG key of the Corretto Apt repo was updated during the release corretto-8#209

The following CVEs are addressed in 11.0.6.10.1.

CVE # Component Affected
CVE-2020-2604 Serialization
CVE-2020-2601 Security
CVE-2020-2655 JSSE
CVE-2020-2593 Networking
CVE-2020-2654 Libraries
CVE-2020-2590 Security
CVE-2020-2659 Networking
CVE-2020-2583 Serialization

Corretto version: 11.0.5.10.2

Release Date: Nov 20, 2019

The following platforms are updated in this release.

Target Platforms

  • macOS 10.10 and later, x86_64

The following issues and enhancements are addressed in 11.0.5.10.2.

Issue Name Platform Description Link
Java2D Queue Flusher crash when closing lid and/or switching away from external monitors macOS JVM crashes when closing the lid of the macbook or switching between different monitors. This issue was reproducible in both OpenJDK8 and 11. corretto-11#46

October 2019 critical patch update: Corretto version 11.0.5.10.1

Release Date: Oct 15, 2019

The following platforms are updated in this release.

Target Platforms

  • RPM-based Linux using glibc 2.12 or later, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Windows 7 or later, x86_64
  • macOS 10.13 and later, x86_64

The following issues and enhancements are addressed in 11.0.5.10.1.

Issue Name Platform Description Link
Update Corretto to 11.0.5.10.1. All Update Corretto 11 patch set to 11.0.5.10.1.

The following CVEs are addressed in 11.0.5.10.1.

CVE # Component Affected
CVE-2019-2949 security-libs/javax.net.ssl
CVE-2019-2989 core-libs/java.net
CVE-2019-2958 core-libs/java.lang
CVE-2019-2975 core-libs/javax.script
CVE-2019-2977 hotspot/compiler
CVE-2019-2999 tools/javadoc
CVE-2019-2964 core-libs/java.util.regex
CVE-2019-2962 client-libs/2d
CVE-2019-2973 xml/jaxp
CVE-2019-2978 core-libs/java.net
CVE-2019-2981 xml/jaxp
CVE-2019-2983 client-libs/2d
CVE-2019-2987 client-libs/2d
CVE-2019-2988 client-libs/2d
CVE-2019-2992 client-libs/2d
CVE-2019-2894 security-libs/javax.net.ssl
CVE-2019-2933 core-libs
CVE-2019-2945 core-libs/java.net

GA release: 11.0.4.11.1: Amazon Corretto 11

Release Date: Sept 17, 2019

The following platforms are updated in this release.

Target Platforms

  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64

The following issues and enhancements are addressed in 11.0.4.11.1.

Issue Name Platform Description Link
Update Corretto 11.0.4.11.1 RC to 11.0.4.11.1 GA. aarch64 Amazon Corretto 11.0.4.11.1 for aarch64 is now GA.

July 2019 critical patch update: Corretto version 11.0.4.11.1

Release Date: Jul 16, 2019

The following platforms are updated in this release.

Target Platforms

  • RPM-based Linux using glibc 2.12 or later, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86_64
  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64
  • Windows 7 or later, x86_64
  • macOS 10.13 and later, x86_64

The following issues and enhancements are addressed in 11.0.4.11.1.

Issue Name Platform Description Link
Update Corretto to 11.0.4.11.1. All Update Corretto 11 patch set to 11.0.4.11.1.
Include OpenJDK cacerts and Amazon specific cacerts in Corretto11. All Update cacerts in Corretto11 to include both OpenJDK cacerts and Amazon cacerts.
Debian jinfo file. Linux Provide jinfo file to make update-java-alternatives command works with Corretto11 on Debian. corretto-11#25
Fix the Windows Installer does not set file association for jar files. Windows Jar files can now be double clicked in Windows to open them like they can be with Oracle's JRE. corretto-11#21
Fix JAVA_HOME remains on uninstall of MSI package. Windows Fix the issue of the system variable JAVA_HOME remains in the path when uninstalling the MSI package on Windows. corretto-11#17

The following CVEs are addressed in 11.0.4.11.1.

CVE # Component Affected
CVE-2019-7317 AWT (libpng)
CVE-2019-2821 JSSE
CVE-2019-2766 Networking
CVE-2019-2816 Networking
CVE-2019-2745 Security
CVE-2019-2786 Security
CVE-2019-2818 Security
CVE-2019-2762 Utilities
CVE-2019-2769 Utilities

Corretto aarch64 preview: version 11.0.3.7.1

Release Date: June 28, 2019

The following platforms are updated in this release.

Target Platforms

  • RPM-based Linux using glibc 2.17 or later, aarch64
  • Debian-based Linux using glibc 2.17 or later, aarch64

The following issues and enhancements are addressed in 11.0.3.7.1.

Issue Name Platform Description Link
Corretto 11 aarch64 preview Linux aarch64 add Corretto 11 builds for aarch64.

April 2019 critical patch update: Corretto version 11.0.3.7.1

Release Date: Apr 16, 2019

The following platforms are updated in this release.

Target Platforms

  • RPM-based Linux using glibc 2.12 or later, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86_64
  • Windows 7 or later, x86_64
  • macOS 10.13 and later, x86_64

The following issues and enhancements are addressed in 11.0.3.7.1.

Issue Name Platform Description Link
Update Corretto to 11.0.3.7.1. All Update Corretto 11 patch set to 11.0.3.7.1.

11.0.2.9.3: Amazon Corretto 11

Release Date: Mar 19, 2019

The following platforms are updated in this release.

Target Platforms

  • macOS 10.13 and later, x86_64

The following issues and enhancements are addressed in 11.0.2.9.3.

Issue Name Platform Description Link
MacOS package installer shows as Corretto 8 instead of Corretto 11. macOS The message in the introduction session of the mac installer is incorrect. corretto-11#10
MacOS package installer unable to detect Corretto as a JDK package after installation. macOS After installing Corretto-11.0.2.3, /usr/libexec/java_home is unable to detect it as a JDK package. corretto-11#12

GA release: 11.0.2.9.3: Amazon Corretto 11

Release Date: Mar 14, 2019

The following platforms are updated in this release.

Target Platforms

  • RPM-based Linux using glibc 2.12 or later, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86_64
  • Windows 7 or later, x86_64
  • macOS 10.13 and later, x86_64

The following issues and enhancements are addressed in 11.0.2.9.3.

Issue Name Platform Description Link
Bump up version string to 11.0.2.9.3 for GA release. All Corretto 11 GA release.

11.0.2.9.2: Amazon Corretto 11

Release Date: Mar 4, 2019

The following platforms are updated in this release.

Target Platforms

  • RPM-based Linux using glibc 2.12 or later, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86_64

Added LTS as version-opt to the version string.

The following issues and enhancements are addressed in 11.0.2.9.2.

Issue Name Platform Description Link
Added LTS as version-opt to the version string. RPM-based Linux，Debian-based Linux Include LTS in the Java version string.

Initial release: Version Corretto-11.0.2.9.1

Release Date: Feb 12, 2019

The following platforms are compatible with this release.

Target Platforms

  • RPM-based Linux using glibc 2.12 or later, x86_64
  • Debian-based Linux using glibc 2.12 or later, x86_64
  • Windows 7 or later, x86_64
  • macOS 10.13 and later, x86_64

The following are the changes for this release.

Patch Description Release Date
Back port from OpenJDK 12, fixing JDK-8202353: "os::readdir should use readdir instead of readdir_r". Enables compilation on Amazon Linux 2, as readdir_r has been deprecated in glibc >= 2.24. Additionally, this also fixes JDK-8202835: "jfr/event/os/TestSystemProcess.java fails on missing events". 2019-02-12
Back port from OpenJDK 12, fixing JDK-8202794: "Native Unix code should use readdir rather than readdir_r". Enables compilation on Amazon Linux 2, as readdir_r has been deprecated in glibc >= 2.24. 2019-02-12
Back port from OpenJDK 12, fixing JDK-8207340: "UnixNativeDispatcher close and readdir usages should be fixed". Enables compilation on Amazon Linux 2, as readdir_r has been deprecated in glibc >= 2.24. 2019-02-12
Back port from OpenJDK 12, fixing JDK-8207748: "Fix for 8202794 breaks tier1 builds". Enables compilation on Amazon Linux 2, as readdir_r has been deprecated in glibc >= 2.24. 2019-02-12