diff --git a/CHANGELOG.md b/CHANGELOG.md index b4a2a5064cf..215322e173c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,45 @@ The following sections describe the changes for each release of Amazon Corretto 17. +## Corretto version: 17.0.7.7.1 +Release Date: April 18, 2023 + +**Target Platforms 1** + ++ RPM-based Linux using glibc 2.12 or later, x86, x86_64 ++ Debian-based Linux using glibc 2.12 or later, x86, x86_64 ++ RPM-based Linux using glibc 2.17 or later, aarch64 ++ Debian-based Linux using glibc 2.17 or later, aarch64 ++ Alpine-based Linux, x86_64 ++ Alpine-based Linux, aarch64 ++ Windows 10 or later, x86_64 ++ macos 11.0 and later, x86_64 ++ macos 11.0 and later, aarch64 + +**1.** This is the platform targeted by the build. See [Using Amazon Corretto](https://aws.amazon.com/corretto/faqs/#Using_Amazon_Corretto) +in the Amazon Corretto FAQ for supported platforms + +The following issues are addressed in 17.0.7.7.1: + +| Issue Name | Platform | Description | Link | +|-------------------------------------|----------|--------------------------------------------------------------------------------------|-------------------------------------------------------------------------------| +| Import jdk-17.0.7+7 | All | Updates Corretto baseline to OpenJDK 17.0.7+7 | [jdk-17.0.7+7](https://github.com/openjdk/jdk17u/releases/tag/jdk-17.0.7+7) | +| Tz data | All | All tzdata updates up to 2023c | [#117](https://github.com/corretto/corretto-17/pull/117) | +| Update amazon cacerts | All | Update amazon cacerts file from amazonlinux | [#113](https://github.com/corretto/corretto-17/pull/113) [#115](https://github.com/corretto/corretto-17/pull/115) [#116](https://github.com/corretto/corretto-17/pull/116) | + +The following CVEs are addressed in 17.0.7.7.1: + +| CVE | CVSS | Component | +|----------------|------|-----------------------------| +| CVE-2023-21930 | 7.4 | security-libs/javax.net.ssl | +| CVE-2023-21954 | 5.9 | hotspot/gc | +| CVE-2023-21967 | 5.9 | security-libs/javax.net.ssl | +| CVE-2023-21939 | 5.3 | client-libs/javax.swing | +| CVE-2023-21938 | 3.7 | core-libs/java.lang | +| CVE-2023-21937 | 3.7 | core-libs/java.net | +| CVE-2023-21968 | 3.7 | core-libs/java.nio | + + ## Corretto version: 17.0.6.10.1 Release Date: January 17, 2023