Adoptium is happy to announce the immediate availability of Eclipse Temurin 8u392, 11.0.21, 17.0.9 and 21.0.1. As always, all binaries are thoroughly tested and available free of charge without usage restrictions on a wide range of platforms. Binaries, installers, and source code are available from the Temurin download page, official container images are available at DockerHub, and installable packages are available for various operating systems.
Security Vulerabilities Resolved
The following table summaries security vulnerabilities fixed in this release cycle. The affected Temurin version streams are noted by an ‘X’ in the table. Each line shows the Common Vulnerabilities and Exposures (CVE) vulnerability database reference and Common Vulnerability Scoring System (CVSS) v3.1 base score provided by the OpenJDK Vulnerability Group. Note that defense-in-depth issues are not assigned CVEs.
| CVE Identifier | Component | CVSS Score | v8 | v11 | v17 | v21 |
|---|---|---|---|---|---|---|
| CVE-2023-22067 | other-libs/corba | Medium (5.3) | X | |||
| CVE-2023-22081 | security-libs/javax.net.ssl | Medium (5.3) | X | X | X | X |
| CVE-2023-22025 | hotspot/compiler | Low (3.7) | X | X |
Users should follow the Adoptium policy for reporting vulnerability concerns with this release.
Fixes and Updates
This release contains the following fixes and updates.
-
Temurin 8u392 release notes, including fixes in OpenJDK 8u392
-
Temurin 11.0.21 release notes, including fixes in OpenJDK 11.0.21
-
Temurin 17.0.9 release notes, including fixes in OpenJDK 17.0.9
-
Temurin 21.0.1 release notes, including fixes in OpenJDK 21.0.1
New and Noteworthy
PPC64le on JDK21 Shipped
Eclipse Temurin 21.0.1 PPC64le is shipped for the first time on JDK21.
Windows Binary Respin
Eclipse Temurin 17.0.9 Windows are in a separate release named jdk-17.0.9+9.1 due to a respin that was required to fix a signing issue.
AIX JDK11 and JDK17 Unavailable
Temurin 11 and 17 on AIX are not yet available due to an issue with Harfbuzz that will be resolved in the future with an update to the version of Harfbuzz included in the build.
Windows Server 2012 and 2012 R2 not supported
Windows Server 2012 and 2012 R2, which have reached End of Life (EOL) on October 10, 2023, are no longer officially supported.
MacOS Changes
MacOS 14 is supported for both macOS x64 and Apple Silicon. MacOS x64 10.15 is no longer supported.
Do you have questions or want to discuss this post? Hit us up on the Adoptium Slack workspace!