# Change Log for Amazon Corretto 21 The following sections describe the changes for each release of Amazon Corretto 21. ## Corretto version: 21.0.13.0.10 Release Date: October 20, 2026 **Target Platforms ¹** + RPM-based Linux using glibc 2.12 or later, x86_64 + Debian-based Linux using glibc 2.12 or later, x86_64 + RPM-based Linux using glibc 2.17 or later, aarch64 + Debian-based Linux using glibc 2.17 or later, aarch64 + Alpine-based Linux, x86_64 + Alpine-based Linux, aarch64 + Windows 11 or later, x86_64 + macOS 15.0 and later, x86_64 + macOS 15.0 and later, aarch64 **1.** This is the platform targeted by the build. See [Using Amazon Corretto](https://aws.amazon.com/corretto/faqs/#Using_Amazon_Corretto) in the Amazon Corretto FAQ for supported platforms The following issues are addressed in 21.0.13.0.10: | Issue Name | Platform | Description | Link | |------------|----------|-------------|------| | Import jdk-21.0.13+9 | All | Updates Corretto baseline to OpenJDK 21.0.13+9 | [jdk-21.0.13+9](https://github.com/openjdk/jdk21u/releases/tag/jdk-21.0.13+9) | | Fix timezone name caching and Windows registry handles | Windows | Fix timezone name caching and Windows registry handles | [#172](https://github.com/corretto/corretto-21/pull/172) | | Fix Windows timezone mappings | Windows | Fix Windows timezone mappings | [#171](https://github.com/corretto/corretto-21/pull/171) | | Align Corretto versioning to match openjdk | Linux | Align Corretto versioning to match openjdk | [#170](https://github.com/corretto/corretto-21/pull/170) | | Update timezone data to 2026e | All | Update timezone data to 2026e | [#169](https://github.com/corretto/corretto-21/pull/169) | | JDK-8392730 | All | CLDRConverter interprets usesMetazone UTC timestamps in the build host default timezone | [#167](https://github.com/corretto/corretto-21/pull/167) | | JDK-8357959 | All | (bf) ByteBuffer.allocateDirect initialization can result in large TTSP spikes | [#118](https://github.com/corretto/corretto-21/pull/118) | The following CVEs are addressed in 21.0.13.0.10: | CVE | CVSS | Component | |-----|------|-----------| | CVE-2026-91403 | 9.1 | security-libs/javax.net.ssl | | CVE-2026-91415 | 7.0 | client-libs/2d | | CVE-2026-91398 | 6.8 | core-libs/java.net | | CVE-2026-91382 | 6.5 | client-libs/2d | | CVE-2026-91411 | 6.5 | security-libs/org.ietf.jgss | | CVE-2026-87294 | 6.5 | security-libs/java.security | | CVE-2026-83395 | 6.5 | core-libs/java.net | | CVE-2026-91394 | 5.9 | core-libs/java.net | | CVE-2026-83387 | 5.9 | core-libs/java.sql | | CVE-2026-91462 | 5.9 | security-libs/org.ietf.jgss | | CVE-2026-83374 | 5.9 | security-libs/java.security | | CVE-2026-87290 | 5.9 | xml/jaxp | | CVE-2026-91410 | 5.3 | core-libs/java.io | | CVE-2026-87291 | 5.3 | core-libs/java.net | | CVE-2026-91332 | 5.3 | core-libs/java.net | | CVE-2026-91451 | 5.3 | core-libs/java.net | | CVE-2026-91373 | 5.3 | security-libs/javax.net.ssl | | CVE-2026-83380 | 5.3 | security-libs/javax.security | | CVE-2026-83400 | 5.3 | xml/jaxp | | CVE-2026-91463 | 5.3 | security-libs/org.ietf.jgss | | CVE-2026-91464 | 5.3 | security-libs/org.ietf.jgss | | CVE-2026-91453 | 5.3 | core-libs/java.net | | CVE-2026-91452 | 5.3 | core-libs/java.net | | CVE-2026-91418 | 5.3 | client-libs/javax.imageio | | CVE-2026-91487 | 4.8 | hotspot/compiler | | CVE-2026-83381 | 4.8 | security-libs/java.security | | CVE-2026-91374 | 4.8 | core-svc/tools | | CVE-2026-83378 | 4.8 | hotspot/compiler | | CVE-2026-91375 | 4.7 | tools/jlink | | CVE-2026-91379 | 4.7 | tools/jshell | | CVE-2026-91380 | 4.0 | core-libs/java.util | | CVE-2026-91333 | 3.7 | security-libs/java.security | | CVE-2026-91334 | 3.7 | client-libs/javax.imageio | | CVE-2026-87367 | 3.7 | xml/jaxp | | CVE-2026-87292 | 3.7 | core-libs/java.net | | CVE-2026-83376 | 3.7 | security-libs/javax.net.ssl | | CVE-2026-91461 | 3.7 | security-libs/java.security | | CVE-2026-91397 | 3.6 | core-svc | | CVE-2026-91400 | 3.1 | client-libs/javax.sound | | CVE-2026-91335 | 2.6 | client-libs/java.awt | ## Corretto version: 21.0.12.12.1 Release Date: September 25, 2026 **Target Platforms ¹** + RPM-based Linux using glibc 2.12 or later, x86_64 + Debian-based Linux using glibc 2.12 or later, x86_64 + RPM-based Linux using glibc 2.17 or later, aarch64 + Debian-based Linux using glibc 2.17 or later, aarch64 + Alpine-based Linux, x86_64 + Alpine-based Linux, aarch64 + Windows 11 or later, x86_64 + macos 14.0 and later, x86_64 + macos 14.0 and later, aarch64 **1.** This is the platform targeted by the build. See [Using Amazon Corretto](https://aws.amazon.com/corretto/faqs/#Using_Amazon_Corretto) in the Amazon Corretto FAQ for supported platforms The following issues are addressed in 21.0.12.12.1: | Issue Name | Platform | Description | Link | |------------|----------|-------------|------| | JDK-8388214 | All | (tz) Update Timezone Data to 2026c | Main: [JDK-8388214](https://bugs.openjdk.org/browse/JDK-8388214)

Related: [8380223](https://bugs.openjdk.org/browse/JDK-8380223), [8381379](https://bugs.openjdk.org/browse/JDK-8381379), [8390388](https://bugs.openjdk.org/browse/JDK-8390388), [8390380](https://bugs.openjdk.org/browse/JDK-8390380), [8391256](https://bugs.openjdk.org/browse/JDK-8391256) | | JDK-8392377 | All | (tz) Update Timezone Data to 2026d | Main: [JDK-8392377](https://bugs.openjdk.org/browse/JDK-8392377)

Related: [8392519](https://bugs.openjdk.org/browse/JDK-8392519) | | /usr/libexec/java_home -V on macOS doesn't print patch version | macOS | Fix macos info.plist version string metadata [PR](https://github.com/corretto/corretto-21/pull/165) | [Issue](https://github.com/corretto/corretto-25/issues/76) | ## Corretto version: 21.0.12.9.1 Release Date: August 18, 2026 **Target Platforms ¹** + RPM-based Linux using glibc 2.12 or later, x86_64 + Debian-based Linux using glibc 2.12 or later, x86_64 + RPM-based Linux using glibc 2.17 or later, aarch64 + Debian-based Linux using glibc 2.17 or later, aarch64 + Alpine-based Linux, x86_64 + Alpine-based Linux, aarch64 + Windows 11 or later, x86_64 + macos 14.0 and later, x86_64 + macos 14.0 and later, aarch64 **1.** This is the platform targeted by the build. See [Using Amazon Corretto](https://aws.amazon.com/corretto/faqs/#Using_Amazon_Corretto) in the Amazon Corretto FAQ for supported platforms The following issues are addressed in 21.0.12.9.1: | Issue Name | Platform | Description | Link | |------------|----------|-------------|------| | Import jdk-21.0.12.1+1 | All | Updates Corretto baseline to OpenJDK 21.0.12.1+1 | [jdk-21.0.12.1+1](https://github.com/openjdk/jdk21u/releases/tag/jdk-21.0.12.1+1) | The following CVEs are addressed in 21.0.12.9.1: | CVE | CVSS | Component | |-----|------|-----------| | CVE-2026-61308 | 6.8 | core-libs/java.net | | CVE-2026-70907 | 5.3 | security-libs/javax.net.ssl | | CVE-2026-60589 | 3.7 | security-libs/javax.xml.crypto | ## Corretto version: 21.0.12.8.1 Release Date: July 21, 2026 **Target Platforms ¹** + RPM-based Linux using glibc 2.12 or later, x86_64 + Debian-based Linux using glibc 2.12 or later, x86_64 + RPM-based Linux using glibc 2.17 or later, aarch64 + Debian-based Linux using glibc 2.17 or later, aarch64 + Alpine-based Linux, x86_64 + Alpine-based Linux, aarch64 + Windows 11 or later, x86_64 + macos 14.0 and later, x86_64 + macos 14.0 and later, aarch64 **1.** This is the platform targeted by the build. See [Using Amazon Corretto](https://aws.amazon.com/corretto/faqs/#Using_Amazon_Corretto) in the Amazon Corretto FAQ for supported platforms The following issues are addressed in 21.0.12.8.1: | Issue Name | Platform | Description | Link | |------------|----------|-------------|------| | Import jdk-21.0.12+8 | All | Updates Corretto baseline to OpenJDK 21.0.12+8 | [jdk-21.0.12+8](https://github.com/openjdk/jdk21u/releases/tag/jdk-21.0.12+8) | | JDK-8386085 | All | Livelock in AbstractQueuedSyncronizer.cleanQueue() when multiple threads do tryAcquire() with a short timeout and no permits available | [#164](https://github.com/corretto/corretto-21/pull/164) | | Backport ICache invalidation to Corretto 21 | aarch64 | Backport ICache invalidation to Corretto 21 | [#162](https://github.com/corretto/corretto-21/pull/162) | | JDK-8343698 | Linux | Linux x86_64 lto build gives a lot of warnings and fails lto-wrapper: fatal error: make returned 2 exit status | [#161](https://github.com/corretto/corretto-21/pull/161) | | Recommend instead of Require dependencies for AL2023 headless | Linux | Improves dependencies for AL2023+ headless | [#156](https://github.com/corretto/corretto-21/pull/156) | The following CVEs are addressed in 21.0.12.8.1: | CVE | CVSS | Component | |-----|------|-----------| | CVE-2026-41254 | 7.5 | client-libs/2d | | CVE-2026-47063 | 7.5 | security-libs/java.security | | CVE-2026-60147 | 6.5 | security-libs/java.security | | CVE-2026-46968 | 5.9 | security-libs/javax.net.ssl | | CVE-2026-47027 | 5.3 | security-libs/java.security | | CVE-2026-47021 | 5.3 | client-libs/2d | | CVE-2026-46917 | 5.3 | security-libs/javax.net.ssl | | CVE-2026-47059 | 3.7 | client-libs/2d | | CVE-2026-47010 | 3.7 | client-libs/javax.imageio | ## Corretto version: 21.0.11.10.1 Release Date: April 21, 2026 **Target Platforms ¹** + RPM-based Linux using glibc 2.12 or later, x86_64 + Debian-based Linux using glibc 2.12 or later, x86_64 + RPM-based Linux using glibc 2.17 or later, aarch64 + Debian-based Linux using glibc 2.17 or later, aarch64 + Alpine-based Linux, x86_64 + Alpine-based Linux, aarch64 + Windows 11 or later, x86_64 + macos 14.0 and later, x86_64 + macos 14.0 and later, aarch64 **1.** This is the platform targeted by the build. See [Using Amazon Corretto](https://aws.amazon.com/corretto/faqs/#Using_Amazon_Corretto) in the Amazon Corretto FAQ for supported platforms The following issues are addressed in 21.0.11.10.1: | Issue Name | Platform | Description | Link | |------------|----------|-------------|------| | Import jdk-21.0.11+10 | All | Updates Corretto baseline to OpenJDK 21.0.11+10 | [jdk-21.0.11+10](https://github.com/openjdk/jdk21u/releases/tag/jdk-21.0.11+10) | | JDK-8381670 | All | Revert the changes to GZIPInputStream related to InputStream.available() usage | [#153](https://github.com/corretto/corretto-21/pull/153) | | Store legal files as symlinks | Linux,macOS | Add command-line option to store legal files as symlinks | [#148](https://github.com/corretto/corretto-21/pull/148) | The following CVEs are addressed in 21.0.11.10.1: | CVE | CVSS | Component | |-----|------|-----------| | CVE-2026-22016 | 7.5 | xml/jaxp | | CVE-2026-34282 | 7.5 | core-libs/java.net | | CVE-2026-22021 | 5.3 | security-libs/java.security | | CVE-2026-22013 | 5.3 | security-libs/org.ietf.jgss | | CVE-2026-23865 | 5.3 | client-libs/2d | | CVE-2026-22018 | 3.7 | core-libs/java.util | | CVE-2026-22007 | 2.9 | security-libs/java.security | | CVE-2026-34268 | 2.9 | security-libs/java.security | ## Corretto version: 21.0.10.7.1 Release Date: January 20, 2026 **Target Platforms ¹** + RPM-based Linux using glibc 2.12 or later, x86_64 + Debian-based Linux using glibc 2.12 or later, x86_64 + RPM-based Linux using glibc 2.17 or later, aarch64 + Debian-based Linux using glibc 2.17 or later, aarch64 + Alpine-based Linux, x86_64 + Alpine-based Linux, aarch64 + Windows 10 or later, x86_64 + macos 14.0 and later, x86_64 + macos 14.0 and later, aarch64 **1.** This is the platform targeted by the build. See [Using Amazon Corretto](https://aws.amazon.com/corretto/faqs/#Using_Amazon_Corretto) in the Amazon Corretto FAQ for supported platforms The following issues are addressed in 21.0.10.7.1: | Issue Name | Platform | Description | Link | |------------|----------|-------------|------| | Import jdk-21.0.10+7 | All | Updates Corretto baseline to OpenJDK 21.0.10+7 | [jdk-21.0.10+7](https://github.com/openjdk/jdk21u/releases/tag/jdk-21.0.10+7) | The following CVEs are addressed in 21.0.10.7.1: | CVE | CVSS | Component | |-----|------|-----------| | CVE-2026-21945 | 7.5 | security-libs/java.security | | CVE-2026-21932 | 7.4 | client-libs/java.awt | | CVE-2026-21933 | 6.1 | core-libs/java.net | | CVE-2026-21925 | 4.8 | core-libs/java.rmi | ## Corretto version: 21.0.9.11.1 Release Date: November 3, 2025 **Target Platforms ¹** + RPM-based Linux using glibc 2.12 or later, x86_64 + Debian-based Linux using glibc 2.12 or later, x86_64 + RPM-based Linux using glibc 2.17 or later, aarch64 + Debian-based Linux using glibc 2.17 or later, aarch64 + Alpine-based Linux, x86_64 + Alpine-based Linux, aarch64 **1.** This is the platform targeted by the build. See [Using Amazon Corretto](https://aws.amazon.com/corretto/faqs/#Using_Amazon_Corretto) in the Amazon Corretto FAQ for supported platforms The following issues are addressed in 21.0.9.11.1: | Issue Name | Platform | Description | Link | |-----------------------------------------|----------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------| | 8370572: cgroup v1 hierarchical memory limit is not honored after JDK-8322420 | Linux | Backport from upstream to fix issue reading cgroups settings which can result in OOM. Also includes required pre-requisite changes. | [JDK-8370572](https://bugs.openjdk.org/browse/JDK-8370572) [Corretto-21/#135](https://github.com/corretto/corretto-21/issues/135) | | 8343191: Cgroup v1 subsystem fails to set subsystem path | Linux | Backport from upstream to fix issue reading cgroups whne path changes, required for JDK-8322420 and includes bug tail fixes. | [JDK-8343191](https://bugs.openjdk.org/browse/JDK-8343191) | | 8365153: AArch64: Set JVM flags for Neoverse N3 and V3 cores | All Aarch64 | Set Neoverse3 flags to the same as Neoverse2 | [JDK-8365153](https://bugs.openjdk.org/browse/JDK-8365153) | ## Corretto version: 21.0.9.10.1 Release Date: October 21, 2025 **Target Platforms ¹** + RPM-based Linux using glibc 2.12 or later, x86_64 + Debian-based Linux using glibc 2.12 or later, x86_64 + RPM-based Linux using glibc 2.17 or later, aarch64 + Debian-based Linux using glibc 2.17 or later, aarch64 + Alpine-based Linux, x86_64 + Alpine-based Linux, aarch64 + Windows 10 or later, x86_64 + macOS 14.0 and later, x86_64 + macOS 14.0 and later, aarch64 **1.** This is the platform targeted by the build. See [Using Amazon Corretto](https://aws.amazon.com/corretto/faqs/#Using_Amazon_Corretto) in the Amazon Corretto FAQ for supported platforms The following issues are addressed in 21.0.9.10.1: | Issue Name | Platform | Description | Link | |-----------------------------------------|----------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------| | Import jdk-21.0.9+10 | All | Updates Corretto baseline to OpenJDK 21.0.9+10 | [jdk-21.0.9+10](https://github.com/openjdk/jdk21u/releases/tag/jdk-21.0.9+10) | | Bundling async profiler | Alpine, macOS, RPM-based Linux, Debian-based Linux | Binaries for the [async-profiler](https://github.com/async-profiler/async-profiler) are included in official builds for supported platforms | [#19](https://github.com/corretto/corretto-25/pull/19) | | JDK-8277444 | All | Addressing data race between JvmtiClassFileReconstituter::copy_bytecodes and class linking | [JDK-8277444](https://bugs.openjdk.org/browse/JDK-8277444) | | JDK-8359435 | aarch64 | AArch64: add support for SB instruction to MacroAssembler::spin_wait | [JDK-8359435](https://bugs.openjdk.org/browse/JDK-8359435) | | Set OnSpinWaitInst to SB for Graviton 4 | aarch64 | Default value for the OnSpinWaitInst flag to sb if the CPU model matches 0xd4f (Neoverse-V2); otherwise, it remains isb | [#126](https://github.com/corretto/corretto-21/pull/126) | The following CVEs are addressed in 21.0.9.10.1: | CVE | CVSS | Component | |----------------|------|-----------------------------| | CVE-2025-53057 | 5.9 | security-libs/java.security | | CVE-2025-53066 | 4.8 | xml/jaxp | | CVE-2025-61748 | 3.7 | core-libs | ## Corretto version: 21.0.8.9.1 Release Date: July 15, 2025 **Target Platforms ¹** + RPM-based Linux using glibc 2.12 or later, x86_64 + Debian-based Linux using glibc 2.12 or later, x86_64 + RPM-based Linux using glibc 2.17 or later, aarch64 + Debian-based Linux using glibc 2.17 or later, aarch64 + Alpine-based Linux, x86_64 + Alpine-based Linux, aarch64 + Windows 10 or later, x86_64 + macos 13.0 and later, x86_64 + macos 13.0 and later, aarch64 **1.** This is the platform targeted by the build. See [Using Amazon Corretto](https://aws.amazon.com/corretto/faqs/#Using_Amazon_Corretto) in the Amazon Corretto FAQ for supported platforms The following issues are addressed in 21.0.8.9.1: | Issue Name | Platform | Description | Link | |------------|----------|-------------|------| | Import jdk-21.0.8+9 | All | Updates Corretto baseline to OpenJDK 21.0.8+9 | [jdk-21.0.8+9](https://github.com/openjdk/jdk21u/releases/tag/jdk-21.0.8+9) | | JDK-8353013 | All | java.net.URI.create(String) may have low performance to scan the host/domain name from URI string when the hostname starts with number | [PR-101](https://github.com/corretto/corretto-21/pull/101) | | JDK-8349705 | All | java.net.URI.scanIPv4Address throws unnecessary URISyntaxException | [PR-102](https://github.com/corretto/corretto-21/pull/102) | The following CVEs are addressed in 21.0.8.9.1: | CVE | CVSS | Component | |-----|------|-----------| | CVE-2025-50059 | 8.6 | core-libs/java.net | | CVE-2025-30749 | 8.1 | client-libs/2d | | CVE-2025-50106 | 8.1 | client-libs/2d | | CVE-2025-30754 | 4.8 | security-libs/javax.net.ssl | ## Corretto version: 21.0.7.6.1 Release Date: April 15, 2025 **Target Platforms ¹** + RPM-based Linux using glibc 2.12 or later, x86_64 + Debian-based Linux using glibc 2.12 or later, x86_64 + RPM-based Linux using glibc 2.17 or later, aarch64 + Debian-based Linux using glibc 2.17 or later, aarch64 + Alpine-based Linux, x86_64 + Alpine-based Linux, aarch64 + Windows 10 or later, x86_64 + macos 13.0 and later, x86_64 + macos 13.0 and later, aarch64 **1.** This is the platform targeted by the build. See [Using Amazon Corretto](https://aws.amazon.com/corretto/faqs/#Using_Amazon_Corretto) in the Amazon Corretto FAQ for supported platforms The following issues are addressed in 21.0.7.6.1: | Issue Name | Platform | Description | Link | |------------|----------|-------------|------| | Import jdk-21.0.7+6 | All | Updates Corretto baseline to OpenJDK 21.0.7+6 | [jdk-21.0.7+6](https://github.com/openjdk/jdk21u/releases/tag/jdk-21.0.7+6) | | (tz) Update Timezone Data to 2025b | All | Update tz code and data to use 2025b release | [JDK-8352716](https://bugs.openjdk.org/browse/JDK-8352716) | The following CVEs are addressed in 21.0.7.6.1: | CVE | CVSS | Component | |-----|------|-----------| | CVE-2025-21587 | 7.4 | security-libs/javax.net.ssl | | CVE-2025-30698 | 5.6 | client-libs/2d | | CVE-2025-30691 | 4.8 | hotspot/compiler | ## Corretto version: 21.0.6.7.1 Release Date: January 21, 2025 **Target Platforms ¹** + RPM-based Linux using glibc 2.12 or later, x86_64 + Debian-based Linux using glibc 2.12 or later, x86_64 + RPM-based Linux using glibc 2.17 or later, aarch64 + Debian-based Linux using glibc 2.17 or later, aarch64 + Alpine-based Linux, x86_64 + Alpine-based Linux, aarch64 + Windows 10 or later, x86_64 + macos 13.0 and later, x86_64 + macos 13.0 and later, aarch64 **1.** This is the platform targeted by the build. See [Using Amazon Corretto](https://aws.amazon.com/corretto/faqs/#Using_Amazon_Corretto) in the Amazon Corretto FAQ for supported platforms The following issues are addressed in 21.0.6.7.1: | Issue Name | Platform | Description | Link | |---------------------|----------|-----------------------------------------------|--------------------------------------------------------------| | Import jdk-21.0.6+7 | All | Updates Corretto baseline to OpenJDK 21.0.6+7 | [jdk-21.0.6+7](https://github.com/openjdk/jdk21u/releases/tag/jdk-21.0.6+7) | | JDK-8345296 | aarch64 | AArch64: VM crashes with SIGILL when prctl is disallowed | [JDK-8345296](https://bugs.openjdk.org/browse/JDK-8345296) | | JDK-8341194 | aarch64 | Implement C2 VectorizedHashCode on AArch64 | [JDK-8341194](https://bugs.openjdk.org/browse/JDK-8341194) | The following CVEs are addressed in 21.0.6.7.1: | CVE | CVSS | Component | | --- | --- | --- | | CVE-2025-21502 | 4.8 | hotspot/compiler | ## Corretto version: 21.0.5.11.1 Release Date: October 15, 2024 **Target Platforms ¹** + RPM-based Linux using glibc 2.12 or later, x86_64 + Debian-based Linux using glibc 2.12 or later, x86_64 + RPM-based Linux using glibc 2.17 or later, aarch64 + Debian-based Linux using glibc 2.17 or later, aarch64 + Alpine-based Linux, x86_64 + Alpine-based Linux, aarch64 + Windows 10 or later, x86_64 + macos 12.0 and later, x86_64 + macos 12.0 and later, aarch64 **1.** This is the platform targeted by the build. See [Using Amazon Corretto](https://aws.amazon.com/corretto/faqs/#Using_Amazon_Corretto) in the Amazon Corretto FAQ for supported platforms The following issues are addressed in 21.0.5.11.1: | Issue Name | Platform | Description | Link | |----------------------|----------|-----------------------------------------------------------------------------------------|------------------------------------------------------------------------------| | Import jdk-21.0.5+11 | All | Updates Corretto baseline to OpenJDK 21.0.5+11 | [jdk-21.0.5+11](https://github.com/openjdk/jdk21u/releases/tag/jdk-21.0.5+11) | | JDK-8329995 | Linux | Restricted access to `/proc` can cause JFR initialization to crash | [JDK-8329995](https://bugs.openjdk.org/browse/JDK-8329995) | | JDK-8325616 | All | JFR ZGC Allocation Stall events should record stack traces | [JDK-8325616](https://bugs.openjdk.org/browse/JDK-8325616) | | JDK-8301686 | All | TLS 1.3 handshake fails if server_name doesn't match resuming session | [JDK-8301686](https://bugs.openjdk.org/browse/JDK-8301686) | | JDK-8330133 | Linux, macos | libj2pkcs11.so crashes on some pkcs#11 v3.0 libraries | [JDK-8330133](https://bugs.openjdk.org/browse/JDK-8330133) | | JDK-8332248 | All | (fc) java/nio/channels/FileChannel/BlockDeviceSize.java failed with RuntimeException | [JDK-8332248](https://bugs.openjdk.org/browse/JDK-8332248) | | JDK-8328896 | Linux, Windows | Fontmetrics for large Fonts has zero width | [JDK-8328896](https://bugs.openjdk.org/browse/JDK-8328896) | | JDK-6967482 | Windows | TAB-key does not work in JTables after selecting details-view in JFileChooser | [JDK-6967482](https://bugs.openjdk.org/browse/JDK-6967482) | | JDK-8166352 | Windows | FilePane.createDetailsView() removes JTable TAB, SHIFT-TAB functionality | [JDK-8166352](https://bugs.openjdk.org/browse/JDK-8166352) | | JDK-8333542 | All | Breakpoint in parallel code does not work | [JDK-8333542](https://bugs.openjdk.org/browse/JDK-8333542) | | JDK-8321509 | aarch64 | False positive in get_trampoline fast path causes crash | [JDK-8321509](https://bugs.openjdk.org/browse/JDK-8321509) | | JDK-8337664 | All | Distrust TLS server certificates issued after Oct 2024 and anchored by Entrust Root CAs | [JDK-8337664](https://bugs.openjdk.org/browse/JDK-8337664) | | JDK-8338696 | Linux | (fs) BasicFileAttributes.creationTime() falls back to epoch if birth time is unavailable | [JDK-8338696](https://bugs.openjdk.org/browse/JDK-8338696) | The following CVEs are addressed in 21.0.5.11.1: | CVE | CVSS | Component | |----------------|------|---------------------------------| | CVE-2024-21235 | 4.8 | hotspot/compiler | | CVE-2024-21208 | 3.7 | core-libs/java.net | | CVE-2024-21210 | 3.7 | hotspot/compiler | | CVE-2024-21217 | 3.7 | core-libs/java.io:serialization | ## Corretto version: 21.0.4.7.1 Release Date: July 16, 2024 **Target Platforms ¹** + RPM-based Linux using glibc 2.12 or later, x86_64 + Debian-based Linux using glibc 2.12 or later, x86_64 + RPM-based Linux using glibc 2.17 or later, aarch64 + Debian-based Linux using glibc 2.17 or later, aarch64 + Alpine-based Linux, x86_64 + Alpine-based Linux, aarch64 + Windows 10 or later, x86_64 + macos 12.0 and later, x86_64 + macos 12.0 and later, aarch64 **1.** This is the platform targeted by the build. See [Using Amazon Corretto](https://aws.amazon.com/corretto/faqs/#Using_Amazon_Corretto) in the Amazon Corretto FAQ for supported platforms The following issues are addressed in 21.0.4.7.1: | Issue Name | Platform | Description | Link | |----------------------|----------|-----------------------------------------------------------------------------------------|------------------------------------------------------------------------------| | Import jdk-21.0.4+7 | All | Updates Corretto baseline to OpenJDK 21.0.4+7 | [jdk-21.0.4+7](https://github.com/openjdk/jdk21u/releases/tag/jdk-21.0.4+7)| The following CVEs are addressed in 21.0.4.7.1: | CVE | CVSS | Component | |----------------|------|------------------| | CVE-2024-21147 | 7.4 | hotspot/compiler | | CVE-2024-21145 | 4.8 | client-libs/2d | | CVE-2024-21140 | 4.8 | hotspot/compiler | | CVE-2024-21131 | 3.7 | hotspot/runtime | | CVE-2024-21138 | 3.7 | hotspot/runtime | ## Corretto version: 21.0.3.9.1 Release Date: April 16, 2024 **Target Platforms ¹** + RPM-based Linux using glibc 2.12 or later, x86_64 + Debian-based Linux using glibc 2.12 or later, x86_64 + RPM-based Linux using glibc 2.17 or later, aarch64 + Debian-based Linux using glibc 2.17 or later, aarch64 + Alpine-based Linux, x86_64 + Alpine-based Linux, aarch64 + Windows 10 or later, x86_64 + macos 12.0 and later, x86_64 + macos 12.0 and later, aarch64 **1.** This is the platform targeted by the build. See [Using Amazon Corretto](https://aws.amazon.com/corretto/faqs/#Using_Amazon_Corretto) in the Amazon Corretto FAQ for supported platforms The following issues are addressed in 21.0.3.9.1: | Issue Name | Platform | Description | Link | |----------------------|----------|-----------------------------------------------------------------------------------------|------------------------------------------------------------------------------| | Import jdk-21.0.3+9 | All | Updates Corretto baseline to OpenJDK 21.0.3+9 | [jdk-21.0.3+9](https://github.com/openjdk/jdk21u/releases/tag/jdk-21.0.3+9)| | Launcher causes lingering busy cursor | All | Fix lingering busy cursor | [JDK-8294699](https://bugs.openjdk.org/browse/JDK-8294699) | | Fallback option for POST-only OCSP requests | All | Add option to fallback to old OCSP behaviour | [JDK-8328638](https://bugs.openjdk.org/browse/JDK-8328638) | | Shenandoah: SIGSEGV crash in unnecessary_acquire due to LoadStore split through phi | All | Fix SIGSEGV crash when using Shenandoah garbage collector | [JDK-8325372](https://bugs.openjdk.org/browse/JDK-8325372) | | Fix AL jre alternative path | AL2023 | Fix AL jre alternative path | [#55](https://github.com/corretto/corretto-21/pull/55) | The following CVEs are addressed in 21.0.3.9.1: | CVE | CVSS | Component | |----------------|------|-----------------------| | CVE-2024-21011 | 3.7 | hotspot/runtime | | CVE-2024-21012 | 3.7 | core-libs/java.net | | CVE-2024-21068 | 3.7 | hotspot/compiler | | CVE-2024-21094 | 3.7 | hotspot/compiler | ## Corretto version: 21.0.2.13.1 Release Date: January 16, 2024 **Target Platforms ¹** + RPM-based Linux using glibc 2.12 or later, x86_64 + Debian-based Linux using glibc 2.12 or later, x86_64 + RPM-based Linux using glibc 2.17 or later, aarch64 + Debian-based Linux using glibc 2.17 or later, aarch64 + Alpine-based Linux, x86_64 + Alpine-based Linux, aarch64 + Windows 10 or later, x86_64 + macos 12.0 and later, x86_64 + macos 12.0 and later, aarch64 **1.** This is the platform targeted by the build. See [Using Amazon Corretto](https://aws.amazon.com/corretto/faqs/#Using_Amazon_Corretto) in the Amazon Corretto FAQ for supported platforms The following issues are addressed in 21.0.2.13.1: | Issue Name | Platform | Description | Link | |----------------------|----------|-----------------------------------------------------------------------------------------|------------------------------------------------------------------------------| | Import jdk-21.0.2+13 | All | Updates Corretto baseline to OpenJDK 21.0.2+13 | [jdk-21.0.2+13](https://github.com/openjdk/jdk21u/releases/tag/jdk-21.0.2+13)| | Data loss in AVX3 Base64 decoding | All | Base64 appears to give different (wrong) results in some rare cases when AVX3 is enabled. | [JDK-8321599](https://bugs.openjdk.org/browse/JDK-8321599) | | (tz) Update Timezone Data to 2023d | All | Update Timezone Data to 2023d | [JDK-8322725](https://bugs.openjdk.org/browse/JDK-8322725) | | NPE in PKCS7.parseOldSignedData | All | Fixes exception PKCS7.parseOldSignedDat | [JDK-8315042](https://bugs.openjdk.org/browse/JDK-8315042) | |Enable UseCryptoPmullForCRC32 for Neoverse V2| All |Enable UseCryptoPmullForCRC32| [JDK-8321105](https://bugs.openjdk.org/browse/JDK-8321105) | |Enable Neoverse N1 optimizations for Neoverse V2| All |Enable Neoverse N1 optimizations for Neoverse V2| [JDK-8321025](https://bugs.openjdk.org/browse/JDK-8321025) | The following CVEs are addressed in 21.0.2.13.1: | CVE | CVSS | Component | |----------------|------|--------------------------------| | CVE-2024-20918 | 7.4 | hotspot/compiler | | CVE-2024-20952 | 7.4 | security-libs/java.security | | CVE-2024-20919 | 5.9 | hotspot/runtime | | CVE-2024-20921 | 5.9 | hotspot/compiler | | CVE-2024-20945 | 4.7 | security-libs/javax.xml.crypto | ## Corretto version: 21.0.1.12.1 Release Date: October 17, 2023 **Target Platforms** + RPM-based Linux using glibc 2.12 or later, x86_64 + Debian-based Linux using glibc 2.12 or later, x86_64 + RPM-based Linux using glibc 2.17 or later, aarch64 + Debian-based Linux using glibc 2.17 or later, aarch64 + Alpine-based Linux, x86_64 + Alpine-based Linux, aarch64 + Windows 10 or later, x86_64 + macos 11.0 and later, x86_64 + macos 11.0 and later, aarch64 The following issues are addressed in 21.0.1.12.1: | Issue Name | Platform | Description | Link | |-------------------------------------------------------------------|----------|------------------------------------------------------------------------------------|------------------------------------------------------------------------| | Import jdk-21.0.1+12 | All | Updates Corretto baseline to OpenJDK 21.0.1+12 | [jdk-21.0.1+12](https://github.com/openjdk/jdk21u/releases/tag/jdk-21.0.1+12) | | JDK-8313765 | All | Validations on ZIP64 Extra Fields | [JDK-8313765](https://bugs.openjdk.org/browse/JDK-8313765) | | JDK-8316468 | All | os::write incorrectly handles partial write | [#23](https://github.com/corretto/corretto-21/pull/23) The following CVEs are addressed in 21.0.1.12.1: | CVE | CVSS | Component | |----------------|------|-----------------------------| | CVE-2023-22081 | 5.3 | security-libs/javax.net.ssl | | CVE-2023-22025 | 3.7 | hotspot/compiler | ## Corretto version: 21.0.0.35.1 Release Date: August 24, 2023 **Target Platforms** + RPM-based Linux using glibc 2.12 or later, x86_64 + Debian-based Linux using glibc 2.12 or later, x86_64 + RPM-based Linux using glibc 2.17 or later, aarch64 + Debian-based Linux using glibc 2.17 or later, aarch64 + Alpine-based Linux, x86_64 + Alpine-based Linux, aarch64 + Windows 10 or later, x86_64 + macos 11.0 and later, x86_64 + macos 11.0 and later, aarch64 The following issues are addressed in 21.0.0.35.1: | Issue Name | Platform | Description | Link | |-------------------------------------------------------------------|----------|------------------------------------------------------------------------------------|------------------------------------------------------------------------| | Import jdk-21+35 | All | Updates Corretto baseline to OpenJDK 21+35 | [jdk-21+35](https://github.com/openjdk/jdk21/releases/tag/jdk-21%2B35) | | 8313765: Invalid CEN header (invalid zip64 extra data field size) | All | Fix ZipException that may be encountered when opening select APK, ZIP or JAR files | [JDK-8313765](https://bugs.openjdk.org/browse/JDK-8313765) |