Corretto version: 8.452.09.1$$$Release Date: April 15; 2025$$$$$$Target Platforms 1$$$$$$RPM-based Linux using glibc 2.12 or later; x86_64$$$Debian-based Linux using glibc 2.12 or later; x86_64$$$RPM-based Linux using glibc 2.17 or later; aarch64$$$Debian-based Linux using glibc 2.17 or later; aarch64$$$Alpine-based Linux; x86_64$$$Alpine-based Linux; aarch64$$$Windows 10 or later; x86; x86_64$$$macOS 13.0 and later; x86_64$$$macOS 13.0 and later; aarch64$$$1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms$$$$$$The following issues are addressed in 8.452.09.1:$$$$$$Issue NametPlatformtDescriptiontLink$$$Import jdk8u452-b09tAlltUpdates Corretto baseline to OpenJDK 8u452-b09tjdk8u452-b09$$$JDK-8352716tAlltUpdate Timezone Data to 2025btJDK-8352716$$$InternaltLinuxtFix alternatives to not conflict with OpenJDK8 packagetPR-520

Corretto version: 8.442.06.1$$$Release Date: January 21; 2025$$$$$$Target Platforms 1$$$$$$RPM-based Linux using glibc 2.12 or later; x86_64$$$Debian-based Linux using glibc 2.12 or later; x86_64$$$RPM-based Linux using glibc 2.17 or later; aarch64$$$Debian-based Linux using glibc 2.17 or later; aarch64$$$Alpine-based Linux; x86_64$$$Alpine-based Linux; aarch64$$$Windows 10 or later; x86; x86_64$$$macOS 13.0 and later; x86_64$$$macOS 13.0 and later; aarch64$$$1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms$$$$$$The following issues are addressed in 8.442.06.1:$$$$$$Issue NametPlatformtDescriptiontLink$$$Import jdk8u442-b06tAlltUpdates Corretto baseline to OpenJDK 8u442-b06tjdk8u442-b06$$$JDK-8339637tAlltUpdate timezone data to 2024b.tJDK-8339637$$$JDK-8339632tAlltImprove parsing of Day/Month in tzdata rules.tJDK-8339632$$$JDK-8341117tAlltChange Entrust TLS distrust date to November 12; 2024tJDK-8341117$$$JDK-8341104tAlltAdd 2 SSL.com TLS roots.tJDK-8341104$$$JDK-8338166tAlltDistrust TLS server certificates issued after Oct 2024 and anchored by Entrust Root CAstJDK-8338166

Change Log for Amazon Corretto 8$$$The following sections describe the changes for each release of Amazon Corretto 8.$$$$$$Corretto version: 8.432.06.1$$$Release Date: October 15; 2024$$$$$$Target Platforms 1$$$$$$RPM-based Linux using glibc 2.12 or later; x86_64$$$Debian-based Linux using glibc 2.12 or later; x86_64$$$RPM-based Linux using glibc 2.17 or later; aarch64$$$Debian-based Linux using glibc 2.17 or later; aarch64$$$Alpine-based Linux; x86_64$$$Alpine-based Linux; aarch64$$$Windows 10 or later; x86; x86_64$$$macOS 12.0 and later; x86_64$$$macOS 12.0 and later; aarch64$$$1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms$$$$$$The following issues are addressed in 8.432.06.1:$$$$$$Issue NametPlatformtDescriptiontLink$$$Import jdk8u432-b06tAlltUpdates Corretto baseline to OpenJDK 8u432-b06tjdk8u432-b06$$$JDK-8279164tAlltThe TLS_ECDH cipher suites do not preserve forward secrecy and are rarely used in practice. With this release; they are disabled by adding ECDH to the jdk.tls.disabledAlgorithms security property in the java.security configuration file. Attempts to use these suites with this release will result in a SSLHandshakeException being thrown. Note that ECDH cipher suites which use RC4 were already disabled prior to this change. Users can; at their own risk; remove this restriction by modifying the java.security configuration file (or override it by using the java.security.properties system property) so ECDH is no longer listed in the jdk.tls.disabledAlgorithms security property. This change has no effect on TLS_ECDHE cipher suites; which remain enabled by default.tJDK-8279164$$$JDK-8341059tAlltIn accordance with similar plans recently announced by Google and Mozilla; the JDK will not trust Transport Layer Security (TLS) certificates issued after the 12th of November 2024 which are anchored by Entrust root certificates. This includes certificates branded as AffirmTrust; which are managed by Entrust. Certificates issued on or before November 12th; 2024 will continue to be trusted until they expire. If a servers certificate chain is anchored by an affected certificate; attempts to negotiate a TLS session will fail with an Exception that indicates the trust anchor is not trusted.tJDK-8341059$$$JDK-8307779tAlltThis release of OpenJDK 8 updates to the latest maintenance release of the Java 8 specification. This relaxes the specification of three methods in the java.awt.Robot class - mouseMove(int;int); getPixelColor(int;int) and createScreenCapture(Rectangle) - to allow these methods to fail when the desktop environment does not permit moving the mouse pointer or capturing screen content.tJDK-8307779$$$JDK-8290367tAlltWith this OpenJDK release; the JDK implementation of the LDAP provider no longer supports the deserialisation of Java objects by default. This is achieved by the system property com.sun.jndi.ldap.object.trustSerialData being set to false by default. Note that this release also increases the scope of the com.sun.jndi.ldap.object.trustSerialData to cover the reconstruction of RMI remote objects from the javaRemoteLocation LDAP attribute. The result of this change is that transparent deserialisation of Java objects will require an explicit opt-in. Applications that wish to reconstruct Java objects and RMI stubs from LDAP attributes will need to set the com.sun.jndi.ldap.object.trustSerialData to true.tJDK-8290367$$$JDK-8328286tAlltThis OpenJDK release limits the maximum header field size accepted by the HTTP client within the JDK for all supported versions of the HTTP protocol. The header field size is computed as the sum of the size of the uncompressed header name; the size of the uncompressed header value and a overhead of 32 bytes for each field section line. If a peer sends a field section that exceeds this limit; a java.net.ProtocolException will be raised. This release also introduces a new system property; jdk.http.maxHeaderS

Corretto version: 8.422.05.1$$$Release Date: July 16; 2024$$$$$$Target Platforms 1$$$$$$RPM-based Linux using glibc 2.12 or later; x86_64$$$Debian-based Linux using glibc 2.12 or later; x86_64$$$RPM-based Linux using glibc 2.17 or later; aarch64$$$Debian-based Linux using glibc 2.17 or later; aarch64$$$Alpine-based Linux; x86_64$$$Alpine-based Linux; aarch64$$$Windows 10 or later; x86; x86_64$$$macOS 12.0 and later; x86_64$$$macOS 12.0 and later; aarch64

Corretto version: 8.412.08.1$$$Release Date: April 16; 2024$$$$$$Target Platforms 1$$$$$$RPM-based Linux using glibc 2.12 or later; x86_64$$$Debian-based Linux using glibc 2.12 or later; x86_64$$$RPM-based Linux using glibc 2.17 or later; aarch64$$$Debian-based Linux using glibc 2.17 or later; aarch64$$$Alpine-based Linux; x86_64$$$Alpine-based Linux; aarch64$$$Windows 10 or later; x86; x86_64$$$macOS 12.0 and later; x86_64$$$macOS 12.0 and later; aarch64$$$1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms$$$$$$The following issues are addressed in 8.412.08.1:$$$$$$Issue NametPlatformtDescriptiontLink$$$Import jdk8u412-b08tAlltUpdates Corretto baseline to OpenJDK 8u412-b08tjdk8u412-b08$$$Backport 8296654tmacOSt[macos] Crash when launching JavaFX app with JDK that targets SDK 13t8296654$$$The following CVEs are addressed in 8.412.08.1:$$$$$$CVEtCVSStComponent$$$CVE-2024-21011t3.7thotspot/runtime$$$CVE-2024-21068t3.7thotspot/compiler$$$CVE-2024-21085t3.7tcore-libs/java.util$$$CVE-2024-21094t3.7thotspot/compiler$$$CVE-2024-21002t2.5tjavafx/graphics$$$CVE-2024-21003t3.1tjavafx/graphics$$$CVE-2024-21004t2.5tjavafx/window-toolkit$$$CVE-2024-21005t3.1tjavafx/graphics

The following CVEs are addressed in 8.402.08.1:$$$$$$CVEtCVSStComponent$$$CVE-2024-20952t7.4tsecurity-libs/java.security

Change Log for Amazon Corretto 8$$$The following sections describe the changes for each release of Amazon Corretto 8.$$$$$$Corretto version: 8.392.08.1$$$Release Date: October 17; 2023$$$$$$Target Platforms 1$$$$$$RPM-based Linux using glibc 2.12 or later; x86_64$$$Debian-based Linux using glibc 2.12 or later; x86_64$$$RPM-based Linux using glibc 2.17 or later; aarch64$$$Debian-based Linux using glibc 2.17 or later; aarch64$$$Alpine-based Linux; x86_64$$$Alpine-based Linux; aarch64$$$Windows 10 or later; x86; x86_64$$$macOS 11.0 and later; x86_64$$$macOS 11.0 and later; aarch64$$$1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms$$$$$$The following issues are addressed in 8.392.08.1:$$$$$$Issue Namett PlatformtDescriptionttttt Link$$$Import jdk8u392-b08t AllttUpdates Corretto baseline to OpenJDK 8u392-b08tjdk8u392-b08$$$Backport of JDK-8139348tAllttDeprecate 3DES and RC4 in Kerberostt JDK-8139348$$$$$$The following CVEs are addressed in 8.392.08.1:$$$$$$CVEtt CVSStComponent$$$CVE-2023-22067t5.3t other-libs/corba$$$CVE-2023-22081t5.3t security-libs/javax.net.ssl

Change Log for Amazon Corretto 8$$$The following sections describe the changes for each release of Amazon Corretto 8.$$$$$$Corretto version: 8.382.05.1$$$Release Date: July 18; 2023$$$$$$Target Platforms 1$$$$$$RPM-based Linux using glibc 2.12 or later; x86_64$$$Debian-based Linux using glibc 2.12 or later; x86_64$$$RPM-based Linux using glibc 2.17 or later; aarch64$$$Debian-based Linux using glibc 2.17 or later; aarch64$$$Alpine-based Linux; x86_64$$$Alpine-based Linux; aarch64$$$Windows 10 or later; x86; x86_64$$$macOS 11.0 and later; x86_64$$$macOS 11.0 and later; aarch64$$$1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms$$$$$$The following issues are addressed in 8.382.05.1:$$$$$$Issue NametPlatformtDescriptiontLink$$$Import jdk8u382-b05tAlltUpdates Corretto baseline to OpenJDK 8u382-b05tjdk8u382-b05$$$The following CVEs are addressed in 8.382.05.1:$$$$$$CVEtCVSStComponent$$$CVE-2023-22045t3.7thotspot/compiler$$$CVE-2023-22049t3.7tcore-libs/java.io$$$CVE-2023-22043t5.9tjavafx/graphics

Change Log for Amazon Corretto 8$$$The following sections describe the changes for each release of Amazon Corretto 8.$$$$$$Corretto version: 8.372.07.1$$$Release Date: April 18; 2023$$$$$$Target Platforms 1$$$$$$RPM-based Linux using glibc 2.12 or later; x86_64$$$Debian-based Linux using glibc 2.12 or later; x86_64$$$RPM-based Linux using glibc 2.17 or later; aarch64$$$Debian-based Linux using glibc 2.17 or later; aarch64$$$Alpine-based Linux; x86_64$$$Alpine-based Linux; aarch64$$$Windows 10 or later; x86; x86_64$$$macOS 11.0 and later; x86_64$$$macOS 11.0 and later; aarch64$$$1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms$$$$$$The following issues are addressed in 8.372.07.1:$$$$$$Issue NametPlatformtDescriptiontLink$$$Import jdk8u372-b07tAlltUpdates Corretto baseline to OpenJDK 8u372-b07tjdk8u372-b07$$$(tz) Update Timezone Data to 2023ctAlltUpdate Timezone Data to 2023ct#459$$$Update amazon cacertstAlltUpdate amazon cacerts file from amazonlinuxt#456 #457 #458$$$Backport 8262896tmacOS aarch64tFix crash in rash in jni_fast_GetLongFieldt8262896$$$Backport 8285515tmacOStFix DatagramChannel.disconnect fails with Invalid argument on macOS 12.4t8285515$$$The following CVEs are addressed in 8.372.07.1:$$$$$$CVEtCVSStComponent$$$CVE-2023-21930t7.4tsecurity-libs/javax.net.ssl$$$CVE-2023-21954t5.9thotspot/gc$$$CVE-2023-21967t5.9tsecurity-libs/javax.net.ssl$$$CVE-2023-21939t5.3tclient-libs/javax.swing$$$CVE-2023-21938t3.7tcore-libs/java.lang$$$CVE-2023-21937t3.7tcore-libs/java.net$$$CVE-2023-21968t3.7tcore-libs/java.nio

Corretto version: 8.362.08.1$$$Release Date: January 17; 2023$$$$$$Target Platforms 1$$$$$$RPM-based Linux using glibc 2.12 or later; x86_64$$$Debian-based Linux using glibc 2.12 or later; x86_64$$$RPM-based Linux using glibc 2.17 or later; aarch64$$$Debian-based Linux using glibc 2.17 or later; aarch64$$$Alpine-based Linux; x86_64$$$Windows 10 or later; x86; x86_64$$$macOS 10.15 and later; x86_64$$$macOS 11.0 and later; aarch64$$$1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms$$$$$$The following issues are addressed in 8.362.08.1:$$$$$$Issue NametPlatformtDescriptiontLink$$$Import jdk8u362-b08tAlltUpdates Corretto baseline to OpenJDK 8u362-b08tjdk8u362-b08$$$Fix gradle setting LD_LIBRARY_PATH and configuretAlltFix gradle setting LD_LIBRARY_PATH and configuret#437$$$Fix java_home alternativetLinuxtAlternative dir without architecture should be created on headless packaget#436$$$Relax VerifyCACertstAlltRelax VerifyCACerts expiry conditiont#428$$$Update amazon cacertstAlltUpdate amazon cacerts file from amazonlinuxt$$$The following CVEs are addressed in 8.362.08.1:$$$$$$CVEtCVSStComponent$$$CVE-2023-21835t8287411t5.3$$$CVE-2023-21830t8285021t5.3$$$CVE-2023-21843t8293742t3.7

The following issues are addressed in 8.352.08.1:$$$$$$| Issue Name | Platform | Description | Link | |------------------------------------------|-----------------------------------------------------------|------| | Import jdk8u352-b08 | All | Updates Corretto baseline to OpenJDK 8u352-b08 | jdk8u352-b08 | | JSR 337 MR4 Changes | All | All JSR 337 Maintenance Release 4 related release changes | JSR 337 MR4 | | Update Timezone Data to 2022e | All | All tzdata updates up to 2022e | #426 #427 | | Update amazon cacerts | All | Update amazon cacerts file from amazonlinux | |$$$$$$The following CVEs are addressed in 8.352.08.1:$$$$$$CVEtCVSStComponent$$$CVE-2022-21626t5.3tsecurity-libs/java.security$$$CVE-2022-21628t5.3tcore-libs/java.net$$$CVE-2022-21619t3.7tsecurity-libs/java.security$$$CVE-2022-21624t3.7tcore-libs/javax.naming

The following issues are addressed in 8.342.07.3$$$$$$Issue NametPlatformtDescriptiontLink$$$Revert JDK-8194154tAlltRevert 8194154: System property user.dir should not be changedtJDK-8290832 / JDK-8194154$$$Fix macOS packagingtmacOStUpdate macos packaging logic to avoid duplicate paths after installationt#409