The following sections describe the changes for each release of Amazon Corretto 8.
Release Date: April 16, 2024
Target Platforms 1
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Alpine-based Linux, x86_64
- Alpine-based Linux, aarch64
- Windows 10 or later, x86, x86_64
- macOS 12.0 and later, x86_64
- macOS 12.0 and later, aarch64
1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms
The following issues are addressed in 8.412.08.1:
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Import jdk8u412-b08 | All | Updates Corretto baseline to OpenJDK 8u412-b08 | jdk8u412-b08 |
| Backport 8296654 | macOS | [macos] Crash when launching JavaFX app with JDK that targets SDK 13 | 8296654 |
The following CVEs are addressed in 8.412.08.1:
| CVE | CVSS | Component |
|---|---|---|
| CVE-2024-21011 | 3.7 | hotspot/runtime |
| CVE-2024-21068 | 3.7 | hotspot/compiler |
| CVE-2024-21085 | 3.7 | core-libs/java.util |
| CVE-2024-21094 | 3.7 | hotspot/compiler |
| CVE-2024-21002 | 2.5 | javafx/graphics |
| CVE-2024-21003 | 3.1 | javafx/graphics |
| CVE-2024-21004 | 2.5 | javafx/window-toolkit |
| CVE-2024-21005 | 3.1 | javafx/graphics |
Release Date: January 19, 2024
Target Platforms 1
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Alpine-based Linux, x86_64
- Alpine-based Linux, aarch64
- Windows 10 or later, x86, x86_64
- macOS 12.0 and later, x86_64
- macOS 12.0 and later, aarch64
1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms
The following CVEs are addressed in 8.402.08.1:
| CVE | CVSS | Component |
|---|---|---|
| CVE-2024-20952 | 7.4 | security-libs/java.security |
Release Date: January 16, 2024
Target Platforms 1
- macOS 12.0 and later, x86_64
- macOS 12.0 and later, aarch64
1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms
The following issues are addressed in 8.402.07.1:
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Import jdk8u402-b06 | All | Updates Corretto baseline to OpenJDK 8u402-b06 | jdk8u402-b06 |
| (tz) Update Timezone Data to 2023d | All | Update Timezone Data to 2023d | 483 |
| NPE in PKCS7.parseOldSignedData | All | fixes exception PKCS7.parseOldSignedDat | JDK-8315042 |
| Disable build-ids in AL RPMs | AL2023 | Build-ids can conflict across versions | N/A |
| Add APPLE to ADCLFlags | MacOS aarch64 | Add APPLE define and exclude R18 from usable registers | N/A |
| On the latest macOS+XCode the Robot API may report wrong colors | MacOS all | Xcode 14+ and MacOS 13+ cause some tests to fail | JDK-8298887 |
| macOS Monterey does not have the font Times needed by Serif | MacOS all | macOS Monterey does not have the font Times needed by Serif | JDK-8273358 |
The following CVEs are addressed in 8.402.07.1:
| CVE | CVSS | Component |
|---|---|---|
| CVE-2024-20918 | 7.4 | hotspot/compiler |
| CVE-2024-20952 | 7.4 | security-libs/java.security |
| CVE-2024-20926 | 5.9 | core-libs/javax.script |
| CVE-2024-20919 | 5.9 | hotspot/runtime |
| CVE-2024-20921 | 5.9 | hotspot/compiler |
| CVE-2024-20945 | 4.7 | security-libs/javax.xml.crypto |
| CVE-2024-20925 | 3.1 | javafx/media |
| CVE-2024-20923 | 3.1 | javafx/graphics |
| CVE-2024-20922 | 2.5 | javafx/window-toolkit |
Release Date: January 16, 2024
Target Platforms 1
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Alpine-based Linux, x86_64
- Alpine-based Linux, aarch64
- Windows 10 or later, x86, x86_64
1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms
The following issues are addressed in 8.402.06.1:
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Import jdk8u402-b06 | All | Updates Corretto baseline to OpenJDK 8u402-b06 | jdk8u402-b06 |
| (tz) Update Timezone Data to 2023d | All | Update Timezone Data to 2023d | 483 |
| NPE in PKCS7.parseOldSignedData | All | fixes exception PKCS7.parseOldSignedDat | JDK-8315042 |
| Disable build-ids in AL RPMs | AL2023 | Build-ids can conflict across versions | N/A |
The following CVEs are addressed in 8.402.06.1:
| CVE | CVSS | Component |
|---|---|---|
| CVE-2024-20918 | 7.4 | hotspot/compiler |
| CVE-2024-20952 | 7.4 | security-libs/java.security |
| CVE-2024-20926 | 5.9 | core-libs/javax.script |
| CVE-2024-20919 | 5.9 | hotspot/runtime |
| CVE-2024-20921 | 5.9 | hotspot/compiler |
| CVE-2024-20945 | 4.7 | security-libs/javax.xml.crypto |
| CVE-2024-20925 | 3.1 | javafx/media |
| CVE-2024-20923 | 3.1 | javafx/graphics |
| CVE-2024-20922 | 2.5 | javafx/window-toolkit |
Release Date: October 17, 2023
Target Platforms 1
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Alpine-based Linux, x86_64
- Alpine-based Linux, aarch64
- Windows 10 or later, x86, x86_64
- macOS 11.0 and later, x86_64
- macOS 11.0 and later, aarch64
1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms
The following issues are addressed in 8.392.08.1:
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Import jdk8u392-b08 | All | Updates Corretto baseline to OpenJDK 8u392-b08 | jdk8u392-b08 |
| Backport of JDK-8139348 | All | Deprecate 3DES and RC4 in Kerberos | JDK-8139348 |
The following CVEs are addressed in 8.392.08.1:
| CVE | CVSS | Component |
|---|---|---|
| CVE-2023-22067 | 5.3 | other-libs/corba |
| CVE-2023-22081 | 5.3 | security-libs/javax.net.ssl |
Release Date: July 18, 2023
Target Platforms 1
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Alpine-based Linux, x86_64
- Alpine-based Linux, aarch64
- Windows 10 or later, x86, x86_64
- macOS 11.0 and later, x86_64
- macOS 11.0 and later, aarch64
1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms
The following issues are addressed in 8.382.05.1:
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Import jdk8u382-b05 | All | Updates Corretto baseline to OpenJDK 8u382-b05 | jdk8u382-b05 |
The following CVEs are addressed in 8.382.05.1:
| CVE | CVSS | Component |
|---|---|---|
| CVE-2023-22045 | 3.7 | hotspot/compiler |
| CVE-2023-22049 | 3.7 | core-libs/java.io |
| CVE-2023-22043 | 5.9 | javafx/graphics |
Release Date: April 18, 2023
Target Platforms 1
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Alpine-based Linux, x86_64
- Alpine-based Linux, aarch64
- Windows 10 or later, x86, x86_64
- macOS 11.0 and later, x86_64
- macOS 11.0 and later, aarch64
1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms
The following issues are addressed in 8.372.07.1:
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Import jdk8u372-b07 | All | Updates Corretto baseline to OpenJDK 8u372-b07 | jdk8u372-b07 |
| (tz) Update Timezone Data to 2023c | All | Update Timezone Data to 2023c | #459 |
| Update amazon cacerts | All | Update amazon cacerts file from amazonlinux | #456 #457 #458 |
| Backport 8262896 | macOS aarch64 | Fix crash in rash in jni_fast_GetLongField | 8262896 |
| Backport 8285515 | macOS | Fix DatagramChannel.disconnect fails with "Invalid argument" on macOS 12.4 | 8285515 |
The following CVEs are addressed in 8.372.07.1:
| CVE | CVSS | Component |
|---|---|---|
| CVE-2023-21930 | 7.4 | security-libs/javax.net.ssl |
| CVE-2023-21954 | 5.9 | hotspot/gc |
| CVE-2023-21967 | 5.9 | security-libs/javax.net.ssl |
| CVE-2023-21939 | 5.3 | client-libs/javax.swing |
| CVE-2023-21938 | 3.7 | core-libs/java.lang |
| CVE-2023-21937 | 3.7 | core-libs/java.net |
| CVE-2023-21968 | 3.7 | core-libs/java.nio |
Release Date: February 2, 2023
Target Platforms 1
- Alpine-based Linux, aarch64
1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms
The following issues are addressed in 8.362.10.1:
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Support for musl libc on aarch64 | Alpine Linux aarch64 | Add support for musl-based aarch64, such as Alpine Linux | corretto-docker#46 |
Release Date: January 17, 2023
Target Platforms 1
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Alpine-based Linux, x86_64
- Windows 10 or later, x86, x86_64
- macOS 10.15 and later, x86_64
- macOS 11.0 and later, aarch64
1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms
The following issues are addressed in 8.362.08.1:
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Import jdk8u362-b08 | All | Updates Corretto baseline to OpenJDK 8u362-b08 | jdk8u362-b08 |
| Fix gradle setting LD_LIBRARY_PATH and configure | All | Fix gradle setting LD_LIBRARY_PATH and configure | #437 |
| Fix java_home alternative | Linux | Alternative dir without architecture should be created on headless package | #436 |
| Relax VerifyCACerts | All | Relax VerifyCACerts expiry condition | #428 |
| Update amazon cacerts | All | Update amazon cacerts file from amazonlinux |
The following CVEs are addressed in 8.362.08.1:
| CVE | CVSS | Component |
|---|---|---|
| CVE-2023-21830 | 5.3 | other-libs |
| CVE-2023-21843 | 3.7 | client-libs/javax.sound |
Release Date: October 18, 2022
Target Platforms 1
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Alpine-based Linux, x86_64
- Windows 7 or later, x86, x86_64
- macOS 10.15 and later, x86_64
- macOS 11.0 and later, aarch64
1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms
The following issues are addressed in 8.352.08.1:
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Import jdk8u352-b08 | All | Updates Corretto baseline to OpenJDK 8u352-b08 | jdk8u352-b08 |
| JSR 337 MR4 Changes | All | All JSR 337 Maintenance Release 4 related release changes | JSR 337 MR4 |
| Update Timezone Data to 2022e | All | All tzdata updates up to 2022e | #426 #427 |
| Update amazon cacerts | All | Update amazon cacerts file from amazonlinux |
The following CVEs are addressed in 8.352.08.1:
| CVE | CVSS | Component |
|---|---|---|
| CVE-2022-21626 | 5.3 | security-libs/java.security |
| CVE-2022-21628 | 5.3 | core-libs/java.net |
| CVE-2022-21619 | 3.7 | security-libs/java.security |
| CVE-2022-21624 | 3.7 | core-libs/javax.naming |
Release Date: July 27, 2022
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Alpine-based Linux, x86_64
The following issues are addressed in 8.342.07.4
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Segmentation Fault with -XX:NativeMemoryTracking=detail | Linux | #411 |
Release Date: July 22, 2022
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Alpine-based Linux, x86_64
- Windows 7 or later, x86, x86_64
- macOS 10.15 and later, x86_64
- macOS 11.0 and later, aarch64
The following issues are addressed in 8.342.07.3
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Revert JDK-8194154 | All | Revert "8194154: System property user.dir should not be changed" | JDK-8290832 / JDK-8194154 |
| Fix macOS packaging | macOS | Update macos packaging logic to avoid duplicate paths after installation | #409 |
Release Date: July 19, 2022
Target Platforms
- Amazon Linux 2022, x86_64
- Amazon Linux 2022, aarch64
The following issues are addressed in 8.342.07.2
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Disable LinkTimeOptimization | Amazon Linux 2022 | Additional fixes for Amazon Linux 2022 |
Release Date: July 19, 2022
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Alpine-based Linux, x86_64
- Windows 7 or later, x86, x86_64
- macOS 10.15 and later, x86_64
- macOS 11.0 and later, aarch64
The following issues are addressed in 8.342.07.1
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Import jdk8u342-b07 | All | Updates Corretto baseline to OpenJDK 8u342-b07 | jdk8u342-b08 |
| Update CACerts | All | Pull in the latest CA Certificates from Amazon Linux | PR #403 |
| Fix builds on Alpine 3.13 | Alpine Linux 3.13 | Backport JDK-8263718 to fix builds on alpine-3.13 | PR #397 |
| Alpine package missing "provides" variable | Alpine Linux | Add provides java-jdk for Corretto alpine packages |
Issues #391 |
| Update OS detection code to recognize Windows 10/11 | Windows 10/11 | Backport JDK-8071530 to recognize Windows 10 and JDK-8274840 to recognize Windows 11 when calling System.getProperty("os.name") |
Issues #396 |
| Migrate pkg builds to productbuild from packages | macOS | Updates to macos packaging | PR #390 |
| Enable bundled zlib library via Gradle | macOS | Updates to use bundled (not the system) version of the zlib library on macOS aarch64 | PR #404 |
| AL2022 updates | AL2, AL2022 | Updates to support Corretto in Amazon Linux 2022 | PR #394 PR #398 PR #407 |
The following CVEs are addressed in 8.342.07.1
| CVE | CVSS | Component |
|---|---|---|
| CVE-2022-34169 | 7.5 | xml/jaxp |
| CVE-2022-21541 | 5.9 | hotspot/runtime |
| CVE-2022-21540 | 5.3 | hotspot/compiler |
Release Date: April 19, 2022
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Alpine-based Linux, x86_64
- Windows 7 or later, x86, x86_64
- macOS 10.13 and later, x86_64
- macOS 11.0 and later, aarch64
The following issues are addressed in 8.332.08.1
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Import jdk8u332-b08 | All | Updates Corretto baseline to OpenJDK 8u332-b08 | jdk8u332-b08 |
| Update zlib | All | CVE-2018-25032: based upon our analysis, OpenJDK/Corretto is not affected by CVE-2018-25032, because the zlib "memLevel" parameter is not settable and is fixed at 8, and the usage of the Z_FIXED strategy is prevented. With these settings there is no way to invoke the issue described in the CVE and we only include this fix out of an abundance of caution. |
The following CVEs are addressed in 8.332.08.1
| CVE | CVSS | Component |
|---|---|---|
| CVE-2022-21476 | 7.5 | security-libs/java.security |
| CVE-2022-21496 | 5.3 | core-libs/javax.naming |
| CVE-2022-21434 | 5.3 | core-libs/java.lang |
| CVE-2022-21426 | 5.3 | xml/jaxp |
| CVE-2022-21443 | 3.7 | security-libs/java.security |
Release Date: January 25, 2022
The following platforms are updated in this release.
Target Platforms
- Amazon Linux 2 x86_64 and aarch64
The following issues are addressed in 8.322.06.3
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Update JavaFX | Amazon Linux 2 | Rebuild with the latest JavaFX |
Release Date: January 18, 2022
The following platforms are updated in this release.
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Alpine-based Linux, x86_64
The following issues are addressed in 8.322.06.2
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Fix RPM and Deb issues | RPM/Deb Based | Fix issue with RPM and Deb alternatives | #352] |
Release Date: January 18, 2022
The following platforms are updated in this release.
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Alpine-based Linux, x86_64
- Windows 7 or later, x86, x86_64
- macOS 10.10 and later, x86_64
The following issues are addressed in 8.322.06.1
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Update Corretto to 8.322.06 | All | Update Corretto 8 patch set to 8.322.06. Update the security baseline to OpenJDK8u322. | |
| Fix Windows x86 crashes in Swing apps | Windows x86 | Swing Application crashes / hangs since update from 8.275.01.1 to 8.282.08.1 | #305 |
| Use SHA256 hashes in RPM File Digest | RPM-based Linux | Update plugins to support FIPS compliant file digests in generated RPMs | #344 |
| Sign Mac bundle | Macos x64 | The Macos tgz contained signed files, but was not signed as a bundle. | |
| Update Amazon CACerts | All | Pull in the latest CA Certificates from Amazon Linux |
The following CVEs are addressed in 8.322.06.1
| CVE | CVSS | Component |
|---|---|---|
| CVE-2022-21341 | 5.3 | core-libs/java.io:serialization |
| CVE-2022-21365 | 5.3 | client-libs/javax.imageio |
| CVE-2022-21282 | 5.3 | xml/jaxp |
| CVE-2022-21305 | 5.3 | hotspot/compiler |
| CVE-2022-21299 | 5.3 | xml/jaxp |
| CVE-2022-21296 | 5.3 | xml/jaxp |
| CVE-2022-21349 | 5.3 | client-libs/2d |
| CVE-2022-21283 | 5.3 | core-libs/java.util |
| CVE-2022-21340 | 5.3 | security-libs/java.security |
| CVE-2022-21293 | 5.3 | core-libs/java.lang |
| CVE-2022-21294 | 5.3 | core-libs/java.util |
| CVE-2022-21360 | 5.3 | client-libs/javax.imageio |
| CVE-2022-21248 | 3.7 | core-libs/java.io:serialization |
Release Date: October 19, 2021
The following platforms are updated in this release.
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Alpine-based Linux, x86_64
- Windows 7 or later, x86, x86_64
- macOS 10.10 and later, x86_64
The following issues are addressed in 8.312.07.1
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Update Corretto to 8.312.07 | All | Update Corretto 8 patch set to 8.312.07. Update the security baseline to OpenJDK8u312. | |
| Fix issue with jcmd and other tools on Alpine Linux | Alpine Linux | Commands such as jcmd failed when the java process id was 1 in Alpine Docker images. | #321 |
| Update version strings to recommended formats | macOS | Fix incorrect reporting of version numbers in Corretto 8 .pkg metadata | #329 |
| Fix for Font rendering corruption | macOS | Fix for font rendering corruption issue reported in #333 | #335 |
| Enable building with XCode 13 | macOS | Enable builds with the most recent versions of macOS / XCode | #334 |
The following CVEs are addressed in 8.312.07.1
| CVE | CVSS | Component |
|---|---|---|
| CVE-2021-35567 | 6.8 | security-libs/java.security |
| CVE-2021-35550 | 5.9 | security-libs/javax.net.ssl |
| CVE-2021-35586 | 5.3 | client-libs/javax.imageio |
| CVE-2021-35564 | 5.3 | security-libs/java.security |
| CVE-2021-35561 | 5.3 | core-libs/java.util |
| CVE-2021-35565 | 5.3 | core-libs/java.net |
| CVE-2021-35559 | 5.3 | client-libs/javax.swing |
| CVE-2021-35578 | 5.3 | security-libs/javax.net.ssl |
| CVE-2021-35556 | 5.3 | client-libs/javax.swing |
| CVE-2021-35603 | 3.7 | security-libs/javax.net.ssl |
| CVE-2021-35588 | 3.1 | hotspot/runtime |
Release Date: Jul 20, 2021
The following platforms are updated in this release.
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Alpine-based Linux, x86_64
- Windows 7 or later, x86, x86_64
- macOS 10.10 and later, x86_64
The following issues are addressed in 8.302.08.1
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Update Corretto to 8.302.08.1 | All | Update Corretto 8 patch set to 8.302.08.1. Update the security baseline to OpenJDK 8u302. | |
| Remove root certificates with 1024 bit keys | All | Removed all root certificates with 1024 bit keys. | JDK-8243559 |
| Enable building with XCode 12 | macOS | Enable builds with the most recent versions of macOS / XCode | JDK-8267545 |
| Corretto8 JRE MSI | Windows | Provide JRE MSI installer on both x86 and x86_64 | corretto-8#108 |
The following CVEs are addressed in 8.302.08.1
| CVE | CVSS | Component |
|---|---|---|
| CVE-2021-2388 | 7.5 | hotspot/compiler |
| CVE-2021-2369 | 4.3 | security-libs/java.security |
| CVE-2021-2341 | 3.1 | core-libs/java.net |
Release Date: Apr 20, 2021
The following platforms are updated in this release.
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Alpine-based Linux, x86_64
- Windows 7 or later, x86, x86_64
- macOS 10.10 and later, x86_64
The following issues are addressed in 8.292.10.1
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Update Corretto to 8.292.10.1 | All | Update Corretto 8 patch set to 8.292.10.1. Update the security baseline to OpenJDK 8u292. | |
| Remove expired certificates | All | Removed expired certificates thawtepremiumserverca and verisigntsaca | |
| Update Aarch64 port | Linux aarch64 | Replace the IcedTea based aarch64 port with the one in OpenJDK8u | |
| Enable TLS 1.0 and 1.1 | All | Re-enable TLS 1.0 and 1.1 which have been disabled in upstream 8u292 | |
| 8033289: clang: clean up unused function warning | All | Fixes a warning that appears building with clang (macOS) | JDK-8033289 |
| 8265238: [macos] build failure in OpenJDK8u after JDK-8211301 in older xcode | macOS | Fixes an error when using Xcode 6.3 | JDK-8265238 |
The following CVEs are addressed in 8.292.10.1
| CVE | CVSS | Component |
|---|---|---|
| CVE-2021-2161 | 5.9 | core-libs/java.io |
| CVE-2021-2163 | 5.3 | security-libs/java.security |
Release Date: Jan 19, 2021
The following platforms are updated in this release.
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Alpine-based Linux, x86_64
- Windows 7 or later, x86, x86_64
- macOS 10.10 and later, x86_64
The following issues are addressed in 8.282.08.1
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Update Corretto to 8.282.08.1 | All | Update Corretto 8 patch set to 8.272.10.3. Update the security baseline to OpenJDK 8u282. | |
| Update windows build toolchain to VS2013 | Windows | Update the Windows build tool from VS2010 to VS2013 | corretto-8#278 |
| Integrate Alpine port | Linux | Alpine port used to be in different branch to avoid build issue on other Linux platforms. This has been addressed. |
This version addresses a number of vulnerabilities that do not have an associated CVE.
Release Date: Nov 4, 2020
The following platforms are updated in this release.
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Windows 7 or later, x86, x86_64
- macOS 10.10 and later, x86_64
The following issues are addressed in 8.275.01.1
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| jdk8u275-b01: Import from upstream | all | Update Corretto baseline to OpenJDK jdk8u275-b01 | |
| 8255603: Memory/Performance regression after JDK-8210985 | all | Fixes a problem with the initial size of SSLSessionCache being too big | JDK-8255603 |
Release Date: Oct 21, 2020
The following platforms are updated in this release.
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Windows 7 or later, x86, x86_64
- macOS 10.10 and later, x86_64
The following issues are addressed in 8.272.10.3
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Update Corretto to 8.272.10.3 | All | Update Corretto 8 patch set to 8.272.10.3. Update the security baseline to OpenJDK 8u272. | |
| On AL2 AARCH64 builds use -moutline-atomics flags | Amazon Linux 2 aarch64 | Improves performance on aarch64 systems | |
| Allow passing OpenJFX source location as Gradle property | Linux x86_64 & macOS | Allows building with OpenJFX in a custom location |
The following CVEs are addressed in 8.272.10.3
| CVE | CVSS | Component |
|---|---|---|
| CVE-2020-14803 | 5.3 | core-libs/java.io |
| CVE-2020-14792 | 4.2 | hotspot/compiler |
| CVE-2020-14782 | 3.7 | security-libs/java.security |
| CVE-2020-14797 | 3.7 | core-libs/java.nio |
| CVE-2020-14781 | 3.7 | core-libs/javax.naming |
| CVE-2020-14779 | 3.7 | core-libs/java.io:serialization |
| CVE-2020-14796 | 3.1 | core-libs/java.io |
| CVE-2020-14798 | 3.1 | core-libs/java.io |
Release Date: Jul 29, 2020
The following platforms are updated in this release.
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Windows 7 or later, x86, x86_64
- macOS 10.10 and later, x86_64
The following issues are addressed in 8.265.01.1
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Update Corretto to 8.265.01.1 | All | Updates corretto to be based on OpenJDK 8u265b01 | |
| 8249677: Regression after JDK-8237117: Better ForkJoinPool behavior | All | Fixes a regression added to ForkJoinPool in 8.262.10.1. | JDK-8249677 |
| Exclude Alpine patches | Linux | Alpine related patches are built independently |
Release Date: Jul 14, 2020
The following platforms are updated in this release.
Target Platforms
- Alpine-based Linux, x86_64
The following issues are addressed in 8.262.10.2
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Corretto Alpine GA | Linux | Corretto 8 on Alpine Linux is now general available |
Release Date: Jul 14, 2020
The following platforms are updated in this release.
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Windows 7 or later, x86, x86_64
- macOS 10.10 and later, x86_64
The following issues are addressed in 8.262.10.1
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Update Corretto to 8.262.10.1 | All | Update Corretto 8 patch set to 8.262.10.1. Update the security baseline to OpenJDK 8u262. | |
| Update aarch64 port to IcedTea 3.16.0 | Linux | Sync corretto-8 aarch64 port with IcedTea 3.16.0 | icedtea-3.16.0 |
| Update Amazon linux cacerts | All | Updates the set of certificates from Amazon Linux bundled with Corretto | |
| Remove expired certificates | All | Removed three expired CA certificates present in upstream | |
| Enable JDK Flight Recorder | All | Enable JDK Flight Recorder feature in Corretto 8 | JDK-8223147 |
| Backport JDK-8186090 | Linux | 8186090: java.nio.Bits.unaligned() doesn't handle aarch64 | corretto8#248 |
The following CVEs are addressed in 8.262.10.1
| CVE | CVSS | Component |
|---|---|---|
| CVE-2020-14583 | 8.3 | core-libs/java.io |
| CVE-2020-14664 | 8.3 | javafx/graphics |
| CVE-2020-14593 | 7.4 | client-libs/2d |
| CVE-2020-14621 | 5.3 | xml/jaxp |
| CVE-2020-14556 | 4.8 | core-libs/java.util.concurrent |
| CVE-2020-14577 | 3.7 | security-libs/javax.net.ssl |
| CVE-2020-14578 | 3.7 | security-libs/java.security |
| CVE-2020-14579 | 3.7 | security-libs/java.security |
| CVE-2020-14581 | 3.7 | client-libs/2d |
Release Date: Apr 17, 2020
The following platforms are updated in this release.
Target Platforms
- Windows 7 or later, x86_64
The following issues are addressed in 8.252.09.2
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Fix Windows x64 signing error | Windows x64 | Corretto8 for Windows x64 had a defective sunec.dll | corretto-8#230 |
Release Date: Apr 14, 2020
The following platforms are updated in this release.
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Windows 7 or later, x86, x86_64
- macOS 10.10 and later, x86_64
The following issues and enhancements are addressed in 8.252.09.1
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Update Corretto to 8.252.09.1 | All | Update Corretto 8 patch set to 8.252.09.1. Update the security baseline to OpenJDK 8u252. | |
| Additional provides for debian packages | debian-based Linux | Add old java (headless) runtime provides to the debian package (Java2) | corretto-8#190 |
| hsdis library not picked up correctly on expected paths | Windows | Fixes a portability issue in hsdis with the file separator. | JDK-8043264 |
| Update build logic to handle certificates post build | All | Ensure Corretto still ships the expected set of ca certificates after JDK-8193255 was backported into upstream | |
| Fix CHANGELOG.md for 8.242.07.1 | All | corretto-8#193 was not fixed in this release |
The following CVEs are addressed in 8.252.09.1
| CVE | CVSS | Component |
|---|---|---|
| CVE-2020-2803 | 8.3 | core-libs/java.nio |
| CVE-2020-2805 | 8.3 | core-libs/java.io |
| CVE-2020-2781 | 5.3 | security-libs/java.security |
| CVE-2020-2830 | 5.3 | core-libs/java.util |
| CVE-2020-2800 | 4.8 | core-libs/java.net |
| CVE-2020-2754 | 3.7 | core-libs/javax.script |
| CVE-2020-2755 | 3.7 | core-libs/javax.script |
| CVE-2020-2773 | 3.7 | security-libs/javax.xml.crypto |
| CVE-2020-2756 | 3.7 | core-libs/java.io:serialization |
| CVE-2020-2757 | 3.7 | core-libs/java.io:serialization |
Release Date: Feb 5, 2020
The following platform is updated in this release.
Target Platforms
- macOS 10.10 and later, x86_64
The following issues and enhancements are addressed in 8.242.08.1-1
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Fixed tgz packaging error in 8.242.08.1 | macOS | A packaging error was found in the macOS tar.gz in 8.242.08.1. The mac installer (pkg) is not affected. |
Release Date: Jan 18, 2020
The following platforms are updated in this release.
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Windows 7 or later, x86, x86_64
- macOS 10.10 and later, x86_64
The following issues and enhancements are addressed in 8.242.08.1
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Update Corretto to 8.242.08.1. | All | Update Corretto to 8.242.08.1. | |
| Missing memory barriers for CMS collector | aarch64 | Missing StoreStore barriers in C1 generated code for CMS | corretto-8#201 |
Release Date: Jan 14, 2020
The following platforms are updated in this release.
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Windows 7 or later, x86, x86_64
- macOS 10.10 and later, x86_64
The following issues and enhancements are addressed in 8.242.07.1
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Additional provides for debian packages | debian-based Linux | Add old java (headless) runtime provides to the debian package (Java5-8) | corretto-8#190 |
The following CVEs are addressed in 8.242.07.1
| CVE # | Component Affected |
|---|---|
| CVE-2020-2604 | Serialization |
| CVE-2020-2601 | Security |
| CVE-2020-2655 | JSSE |
| CVE-2020-2593 | Networking |
| CVE-2020-2654 | Libraries |
| CVE-2020-2590 | Security |
| CVE-2020-2659 | Networking |
| CVE-2020-2583 | Serialization |
| CVE-2019-13117 | OpenJFX (libxslt) |
| CVE-2019-13118 | OpenJFX (libxslt) |
| CVE-2019-16168 | OpenJFX (SQLite) |
| CVE-2020-2585 | OpenJFX |
Release Date: Nov 20, 2019
The following platforms are updated in this release.
Target Platforms
- macOS 10.10 and later, x86_64
The following issues and enhancements are addressed in 8.232.09.2.
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Java2D Queue Flusher crash when closing lid and/or switching away from external monitors | macOS | JVM crashes when closing the lid of the macbook or switching between different monitors. This issue was reproducible in both OpenJDK8 and 11. | corretto-11#46 |
Release Date: Oct 15, 2019
The following platforms are updated in this release.
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
- Windows 7 or later, x86, x86_64
- macOS 10.10 and later, x86_64
The following issues and enhancements are addressed in 8.232.09.1.
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Update Corretto to 8.232.09.1 | All | Update Corretto 8 patch set to 8.232.09.1. Update the security baseline to OpenJDK 8u232. | |
Explicitly convert _lh_array_tag_type_value from unsigned to int |
macOS | This is caused by the backport of JDK-8152856. It caused _lh_array_tag_obj_value being implicitly converted to unsigned int during the compilation. |
|
Turn on the -Wreturn-type warning |
All | This is a backport of JDK-8062808, which help catching missing return statements earlier in the development cycle. |
The following CVEs are addressed in 8.232.09.1.
| CVE # | Component Affected |
|---|---|
| CVE-2019-2949 | security-libs/javax.net.ssl |
| CVE-2019-2989 | core-libs/java.net |
| CVE-2019-2958 | core-libs/java.lang |
| CVE-2019-2975 | core-libs/javax.script |
| CVE-2019-2999 | tools/javadoc |
| CVE-2019-2964 | core-libs/java.util.regex |
| CVE-2019-2962 | client-libs/2d |
| CVE-2019-2973 | xml/jaxp |
| CVE-2019-2978 | core-libs/java.net |
| CVE-2019-2981 | xml/jaxp |
| CVE-2019-2983 | client-libs/2d |
| CVE-2019-2987 | client-libs/2d |
| CVE-2019-2988 | client-libs/2d |
| CVE-2019-2992 | client-libs/2d |
| CVE-2019-2894 | security-libs/javax.net.ssl |
| CVE-2019-2933 | core-libs |
| CVE-2019-2945 | core-libs/java.net |
Release Date: Sept 17, 2019
The following platforms are updated in this release.
Target Platforms
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
The following issues and enhancements are addressed in 8.222.10.4.
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Update Corretto 8.222.10.4 RC to 8.222.10.4 GA. | aarch64 | Amazon Corretto 8.222.10.4 for aarch64 is now GA. |
Release Date: September 04, 2019
The following platforms are updated in this release.
Target Platforms
- Amazon Linux 2, x64 and aarch64.
The following enhancement is addressed in 8.222.10.2.
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Update Corretto to 8.222.10.2. | Amazon Linux 2, x64 and aarch64 | Update Corretto to 8.222.10.2. |
Release Date: July 26, 2019
The following platforms are updated in this release.
Target Platforms
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
The following enhancement is addressed in 8.222.10.4.
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Update Corretto to 8.222.10.4. | aarch64 | Update aarch64 backend. Update Corretto 8 patch set to 8.222.10.4. |
Release Date: July 16, 2019
The following platforms are updated in this release.
Target Platforms
- Windows 7 or later, x86, x86_64
The following issue is addressed in 8.222.10.3.
| Issue Name | Platform | Description | Link |
|---|---|---|---|
The java.vm.vendor property is incorrect in Corretto 8.222.10.1 Windows build. |
Windows | The java.vm.vendor property should have the value "Amazon.com Inc.". |
Release Date: July 16, 2019
The following platforms are updated in this release.
Target Platforms
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
The following enhancement is addressed in 8.222.10.2.
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Update Corretto to 8.222.10.2. | aarch64 | Update aarch64 backend. Update Corretto 8 patch set to 8.222.10.2. |
Release Date: July 16, 2019
The following platforms are updated in this release.
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- macOS 10.10 and later, x86_64
The following issues and enhancements are addressed in 8.222.10.1.
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Update Corretto to 8.222.10.1 | All | Update Corretto 8 patch set to 8.222.10.1. Update the security baseline to OpenJDK 8u222. | |
JAVA_HOME/PATH and empty folder remains after uninstall Corretto x86 and x64 |
Windows | When uninstalling Corretto on Windows, the JAVA_HOME and PATH environment variable remains, and the installed directory remains empty. |
corretto-8#38 |
| javafx_font.dll Error when executing JavaFX tests | Windows | The Corretto JVM crashes when executing JavaFX tests using the Surefire plugin. | corretto-8#49 |
| Windows MSI in unbranded and doesn't show what version I'm installing | Windows, macOS | When installing on Windows or MacOS using the Corretto installers, the installer does not tell the Corretto version to be installed. | corretto-8#112 |
| Windows UAC popup is cryptic and unbranded | Windows | When using Corretto Windows MSI installer, the UAC popup Window is unbranded and doesn't tell the users what they are approving. | corretto-8#113 |
| MSI upgrade does not remove old version | Windows | Corretto MSI should remove old artifacts when installing a newer version. | corretto-8#115 |
| Windows binaries don't include MS Visual Studio 2017 redistributables needed for OpenJFX | Windows | Missing of VS runtime dll causes QuantumRenderer failed to be initialized. | corretto-8#116 |
| JDK MSI Installer Registry Keys | Windows | Applications using Corretto JRE fail to launch if they depend on the Windows registry keys to check the Java version. | corretto-8#122 |
| msvcr120.dll is missing in the final JRE distribution for Windows | Windows | corretto-8#131 |
The following CVEs are addressed in 8.222.10.1.
| CVE # | Component Affected |
|---|---|
| CVE-2019-7317 | AWT (libpng) |
| CVE-2019-2842 | JCE |
| CVE-2019-2766 | Networking |
| CVE-2019-2816 | Networking |
| CVE-2019-2745 | Security |
| CVE-2019-2786 | Security |
| CVE-2019-2762 | Utilities |
| CVE-2019-2769 | Utilities |
Release Date: June 14, 2019
The following new platforms are supported.
New Platforms
- RPM-based Linux using glibc 2.17 or later, aarch64
- Debian-based Linux using glibc 2.17 or later, aarch64
The following issues and enhancements are addressed in 8.212.04.03
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Update Corretto to 8.212.04.3. | aarch64 | Update aarch64 backend. Update Corretto 8 patch set to 8.212.04.3. | |
| Backport JDK-8219006: AArch64: Register corruption in slow subtype check | aarch64 | This patch fixes the intrinsic arraycopy in debug build. The compiled method of System.arraycopy crashed due to register corruption. | |
| Backport JDK-8224671: AArch64: mauve System.arraycopy test failure | aarch64 | This patch fixes the intrinsic arraycopy. The instruction eonw in the codestub arraycopy was encoded with the wrong operand register zr. | |
| Backport JDK-8155627: Enable SA on AArch64 | aarch64 | This patch puts sa-jdi.jar into the JDK image. developer tools such as hsdb depends on it. |
Release Date: May 02, 2019
The following platforms are updated in this release.
Target Platforms
- Amazon Linux 2, x64 and aarch64.
The following issues and enhancements are addressed in 8.212.04.2.
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Update Corretto to 8.212.04.2. | All | Update Corretto 8 patch set to 8.212.04.2. | |
| Backport JDK-8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can cause RasterFormatException | All | This patch fixes issue where sun.java2d.pisces.PiscesCache constructor that accepts min/max x and y arguments - the internal 'bboxX1' and 'bboxY1' are set to values one greater than given maximum X and Y values. This effectively causes an "off by 1" error. | corretto-8#94 |
Release Date: Apr 21, 2019
8.212.04.2 improves handling of TrueType fonts (JDK-8219066). The following platforms are updated:
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- Windows 7 or later, x86, x86_64
- macOS 10.10 and later, x86_64
Release Date: Apr 16, 2019
The following platforms are updated in this release.
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- Windows 7 or later, x86, x86_64
- macOS 10.10 and later, x86_64
The following issues and enhancements are addressed in 8.212.04.1.
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Update Corretto to 8.212.04.1. | All | Update Corretto 8 patch set to 8.212.04.1. | |
| Backport JDK-8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can cause RasterFormatException | All | This patch fixes issue where sun.java2d.pisces.PiscesCache constructor that accepts min/max x and y arguments - the internal 'bboxX1' and 'bboxY1' are set to values one greater than given maximum X and Y values. This effectively causes an "off by 1" error. | corretto-8#94 |
| Add jinfo file to Corretto Debian package. | Debian-based Linux | This patch fixes Corretto 8 does not provide a .jinfo file, which used by update-java-alternatives to switch all java related symlinks to another distribution. | corretto-8#63 |
| Include /jre/lib/applet directory in rpm and deb packaging | RPM-based Linux，Debian-based Linux | /jre/lib/applet directory is missing in Corretto8 generic Linux deb and rpm, which makes it inconsistent with generic Linux tgz and other artifacts. This patch adds it back to deb and rpm. |
Release Date: Jan 25, 2019
The following platforms are updated in this release.
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- Windows 7 or later, x86, x86_64
- macOS 10.10 and later, x86_64
The following issues and enhancements are addressed in 8.202.08.2.
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Update java.vendor/java.vm.vendor. | All | Vendor-related metadata has been updated to identify Amazon as the vendor of this OpenJDK distribution. | corretto-8#3 |
| The Windows Installer should set file association for .jar files. | Windows | Windows users will now be able to run executable JARs using the file explorer. | corretto-8#43 |
| Javapackager fails to load DLLs. | Windows | The JavaFX Packager on Windows has been fixed to allow bundling of MSVC DLLs. | corretto-8#47 |
Release Date: Jan 25, 2019
The following new platforms are supported.
New Platforms
- Experimental support for aarch64 on Amazon Linux 2.
The following platforms are updated in this release.
Target Platforms
- Amazon Linux 2
Release Date: Jan 23, 2019
The following platforms are updated in this release.
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- Windows 7 or later, x86, x86_64
- macOS 10.10 and later, x86_64
The following issues and enhancements are addressed in this release.
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Remove DIZ files in Windows distribution. | Windows | Previous releases of Corretto on Windows contained debugging-related DIZ files. We received feedback that removing these files would benefit resource-constrained environments. | corretto-8#33 |
| Improvements to JAVA_HOME-related variables on Windows. | Windows | Two fixes that will improve the ability for Windows applications to detect and use Amazon Corretto. | corretto-8#39 and corretto-8#40 |
New platform releases: Version 1.8.0_192-amazon-corretto-preview2-b12 and 1.8.0_192-amazon-corretto-preview2_1-b12
Release Date: Jan 16, 2019
The following new platforms are supported.
New Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
The following platforms are compatible with this release.
Target Platforms
- RPM-based Linux using glibc 2.12 or later, x86_64
- Debian-based Linux using glibc 2.12 or later, x86_64
- Windows 7 or later, x86, x86_64
- macOS 10.10 and later, x86_64
The following issues and enhancements are addressed in this release.
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| Support distribution via tar.gz/ZIP archives | Linux | To support other distribution systems (eg: Docker images, SDKMan), Corretto should also be offered in "plain" archives (tar.gz, ZIP). | corretto-8#2 and corretto-8#10 |
| Debian Package distribution | Linux | Corretto should be offered in Debian package format in favor of customers using Debian-based Linux. | corretto-8#16 |
| Support older versions of GLIBC | Linux | Current RPM for Amazon Linux 2 contains binaries that require GLIBC_2.26. | corretto-8#20 |
| File javafx-src.zip missing: source code debugging for OpenJFX not enabled | Windows | The preview release is missing file javafx-src.zip with the compressed source code of OpenJFX. | corretto-8#19 |
| Easy identification x86/x64 in Apps & Features of Windows | Windows | The Windows installer/uninstaller of Corretto should clearly display the architecture (x86/x64) information. | corretto-8#37 |
| macOS Corretto installer without root access | macOS | Corretto Mac installer requires root access during the installation however some environments will require Corretto to be installed without necessarily having root access. | corretto-8#31 |
Release Date: Dec 17, 2018
The following platforms are compatible with this release.
Target Platforms
- Windows 7 or later, x86, x86_64
- macOS 10.10 and later, x86_64
The following are the bugs and enhancements addressed in this release.
| Issue Name | Platform | Description | Link |
|---|---|---|---|
| libfreetype.dylib is incorrectly packaged | macOS | The libfontmanager in Corretto is linked to the libfreetype in X11 and breaks when X11 is not installed. | corretto-8#6 |
| Eclipse and Eclipse-installer fail to run when using Amazon Corretto 8 | macOS | The libjli.dylib under amazon-corretto-8.jdk/Contents/MacOS should be a symlink to ../Home/jre/lib/jli/libjli.dylib but was dereferenced. This causes the native JVM invoker in Ecplise failed to locate the JRE. |
corretto-8#18 |
| Enhance Installer to add standard registry keys on Windows for compact | Windows | Enhance the Windows installer to add registry keys for Corretto during the installation process. | corretto-8#14 |
| Allow JAVA_HOME and PATH to be configured from installer | Windows | Enhance the Windows installer to add JAVA_HOME environment variable and also update the PATH environment variable with the Corretto installation location. |
corretto-8#15 |
| Support Windows 32bit binaries | Windows | Provide certified build for Windows 32bit OS. | corretto-8#22 |
Release Date: Nov 14, 2018
The following platforms are compatible with this release.
Target Platforms
- Amazon Linux 2, x86_64
- Windows 7 or later, x86_64
- macOS 10.10 and later, x86_64
The following are the changes for this release.
| Patch | Description | Release Date |
|---|---|---|
| [C8-1] Prevent premature OutOfMemoryException when G1 GC invocation is suspended by a long-running native call. | Programs that use the G1 GC could experience spurious out-of-memory (OOM) exceptions even when the Java heap was far from filling up. This happened when a spin loop that waited for long-running native calls gave up after only two rounds. This small patch makes this loop wait as long as it takes. Typically a few more rounds suffice. Worst case, a full GC would eventually occur (thanks to JDK-8137099) and also resolve the situation. The patch includes a unit test that provokes needing more than two rounds and succeeds only if the patch is in place. See JDK-8137099 for discussion. | 2018-11-14 |
| [C8-2] Back port from OpenJDK 10, fixing JDK-8177809: “File.lastModified() is losing milliseconds (always ends in 000)”. | This patch removes inconsistencies in how the last-modified timestamp of a file is reported. It standardizes the behavior across build platforms and Java methods so that the user receives second-level precision. | 2018-11-14 |
| [C8-3] Back port from OpenJDK9, fixing JDK-8150013, “ParNew: Prune nmethods scavengable list”. | This patch reduces pause latencies for the Parallel and the CMS garbage collector. GC “root scanning” speeds up by up to three orders of magnitude by reducing redundant code inspections. | 2018-11-14 |
| [C8-4] Back port from OpenJDK 9, fixing JDK-8047338: “javac is not correctly filtering non-members methods to obtain the function descriptor”. | This patch fixes a compiler bug that caused compile-time errors when a functional interface threw an exception that extended Exception. | 2018-11-14 |
| [C8-5] Back port from OpenJDK 10, fixing JDK-8144185: “javac produces incorrect RuntimeInvisibleTypeAnnotations length attribute”. | This problem made Findbugs, JaCoCo, and Checker Framework fail on some well-formed input programs. | 2018-11-14 |
| [C8-6] Trigger string table cleanup in G1 based on string table growth. | This patch triggers “mixed” G1 collections needed to clean out the string table entries based on string table growth, not just Java heap usage. The latter is an independent measurement and can trigger too rarely or even never, in some applications. Then the string table can grow without bounds, which is effectively a native memory leak. See JDK-8213198. | 2018-11-14 |
| [C8-7] Backport from OpenJDK 9, fixing JDK-8149442: “MonitorInUseLists should be on by default, deflate idle monitors taking too long”. | This patch makes removing a performance bottleneck for highly thread-intensive applications the default setting. Enabling MonitorInUseLists allows more efficient deflation of only potentially in-use monitors, instead of the entire population of monitors. | 2018-11-14 |
| [C8-8] Back port from OpenJDK 11, fixing JDK-8198794: “Hotspot crash on Cassandra 3.11.1 startup with libnuma 2.0.3”. | This patch prevents Cassandra 3.11.1 from crashing at startup. | 2018-11-14 |
| [C8-9] Back port from OpenJDK 11, fixing JDK-8195115: “G1 Old Gen MemoryPool CollectionUsage.used values don't reflect mixed GC results”. | Without this patch, it's impossible to determine how full the heap is by means of JMX when using the G1 GC. | 2018-11-14 |
| [C8-10] Speed up Class.getSimpleName() and Class.getCanonicalName(). | Memorization greatly speeds up these functions. This patch includes correctness unit tests. See JDK-8187123. | 2018-11-14 |
| [C8-11] Back port of JDK-8068736 from OpenJDK9, fixing “Avoid synchronization on Executable/Field.declaredAnnotations”. | Improves the performance of Executable/Field.declaredAnnotations() by result caching that avoids thread synchronization. | 2018-11-14 |
| [C8-12] Back port from OpenJDK 9, fixing JDK-8077605: “Initializing static fields causes unbounded recursion in javac”. | N/A | 2018-11-14 |
| [C8-13] Fixed JDK-8130493: “javac silently ignores malformed classes in the annotation processor”. | javac silently swallowed malformed class files in an annotation processor and returned with exit code 0. With this patch, javac reports an error message and returns with a non-zero exit code. | 2018-11-14 |
| [C8-14] Improved error message for the jmap tool. | Suggests additional approaches when the target process is unresponsive. See JDK-8213443. | 2018-11-14 |
| [C8-15] Fixed JDK-8185005: “Improve performance of ThreadMXBean.getThreadInfo(long ids[], int maxDepth)”. | This patch improves the performance of a JVM-internal function that looks up a Java Thread instance from an OS thread ID. This benefits several ThreadMXBean calls such as getThreadInfo(), getThreadCpuTime(), and getThreadUserTime(). The relative performance improvement increases with the number of threads in the JVM, as linear search is replaced by a hash table lookup. | 2018-11-14 |
| [C8-16] Back port from OpenJDK 12, fixing JDK-8206075: “On x86, assert on unbound assembler Labels used as branch targets”. | Label class instances (used to define pseudo-assembly code) can be used incorrectly in both the C1 and Interpreter. The most common mistake for a label is being "branched to" but never defined as a location in code via bind(). An assert was added to catch these and thus triggered 106 jtreg/hotspot and 17 jtreg/jdk test failures. We then determined that the label backedge_counter_overflow was not bound when UseLoopCounter was True but UseOnStackReplacement was False. This is now fixed and guarded by the above tests. | 2018-11-14 |
| [C8-17] Improve portability of JVM source code when using gcc7. | This patch places up-to-date type declarations in all places where the gcc switch “-Wno-deprecated-declarations” would flag problems. It also enables the switch to catch future related issues. This makes the source code compile on all present Amazon Linux versions. This is a combination of much of JDK-8152856, JDK-8184309, JDK-8185826, JDK-8185900, JDK-8187676, JDK-8196909, JDK-8196985, JDK-8199685, JDK-8200052, JDK-8200110, JDK-8209786, JDK-8210836, JDK-8211146, JDK-8211370, JDK-8211929, JDK-8213414, and JDK-8213575. | 2018-11-14 |
| [C8-18] Back port from JDK 10, fixing JDK-8195848: “JTREG test for StartManagementAgent fails”. | See http://serviceability-dev.openjdk.java.narkive.com/cDFwZce9 for more details. | 2018-11-14 |
| [C8-19] Re-enables a legacy/disabled cipher suite to pass two TCK tests that would otherwise fail. | N/A | 2018-11-14 |