Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Signed-off-by: Sophia Guo <[email protected]>
- Loading branch information
1 parent
ff1a028
commit e11078c
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,43 @@ | ||
| --- | ||
| title: Eclipse Temurin 8u392, 11.0.21, 17.0.9 and 21.0.1 Available | ||
| date: "2023-11-03T12:00:00+00:00" | ||
| author: pmc | ||
| about: Create a new release post | ||
| description: Adoptium is happy to announce the immediate availability of Eclipse Temurin 8u392, 11.0.21, 17.0.9 and 21.0.1. As always, all binaries are thoroughly tested and available free of charge without usage restrictions on a wide range of platforms. | ||
| tags: | ||
| - temurin | ||
| - announcement | ||
| - release-notes | ||
| --- | ||
|
|
||
| Adoptium is happy to announce the immediate availability of Eclipse Temurin 8u392, 11.0.21, 17.0.9 and 21.0.1. As always, all binaries are thoroughly tested and available free of charge without usage restrictions on a wide range of platforms. Binaries, installers, and source code are available from the [Temurin download page](https://adoptium.net/temurin/releases), [official container images](https://hub.docker.com/_/eclipse-temurin) are available at DockerHub, and [installable packages](https://adoptium.net/installation/) are available for various operating systems. | ||
|
|
||
| ## Security Vulerabilities Resolved | ||
|
|
||
| The following table summaries security vulnerabilities fixed in this release cycle. The affected Temurin version streams are noted by an 'X' in the table. Each line shows the [Common Vulnerabilities and Exposures (CVE) vulnerability database](https://nvd.nist.gov/vuln) reference and [Common Vulnerability Scoring System (CVSS) v3.1 base score](https://www.first.org/cvss/v3.1/specification-document) provided by the [OpenJDK Vulnerability Group](https://openjdk.org/groups/vulnerability/). Note that defense-in-depth issues are not assigned CVEs. | ||
|
|
||
| | CVE Identifier | Component | CVSS Score | v8 | v11 | v17 | v21 | | ||
| | :--- | :--- | :----: | :----: | :----: | :----: | :----: | | ||
| | [CVE-2023-22067](https://nvd.nist.gov/vuln/detail/CVE-2023-22067) | other-libs/corba | Medium ([5.3](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)) | X | | | | | ||
| | [CVE-2023-22081](https://nvd.nist.gov/vuln/detail/CVE-2023-22081) | security-libs/javax.net.ssl | Medium ([5.3](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)) | X | | | | | ||
| | [CVE-2023-22025](https://nvd.nist.gov/vuln/detail/CVE-2023-22025) | hotspot/compiler | Low ([3.7](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)) | X | | | | | ||
|
|
||
| Users should follow the [Adoptium policy for reporting vulnerability concerns](https://github.com/adoptium/adoptium/security/policy#security-policies-and-procedures) with this release. | ||
|
|
||
| ## Fixes and Updates | ||
|
|
||
| This release contains the following fixes and updates. | ||
|
|
||
| * [Temurin 8u392 release notes](https://adoptium.net/temurin/release-notes/?version=jdk8u392-b08), including [fixes in OpenJDK 8u392](https://bugs.openjdk.org/issues/?jql=project+%3D+JDK+AND+fixVersion+%3D+openjdk8u392) | ||
|
|
||
| * [Temurin 11.0.21 release notes](https://adoptium.net/temurin/release-notes/?version=jdk-11.0.21+9), including [fixes in OpenJDK 11.0.21](https://bugs.openjdk.org/issues/?jql=project+%3D+JDK+AND+fixVersion+%3D+11.0.21) | ||
|
|
||
| * [Temurin 17.0.9 release notes](https://adoptium.net/temurin/release-notes/?version=jdk-17.0.9+9), including [fixes in OpenJDK 17.0.9](https://bugs.openjdk.org/issues/?jql=project+%3D+JDK+AND+fixVersion+%3D+17.0.9) | ||
|
|
||
| * [Temurin 21.0.1 release notes](https://adoptium.net/temurin/release-notes/?version=jdk-21.0.1+12), including [fixes in OpenJDK 21.0.1](https://bugs.openjdk.org/issues/?jql=project+%3D+JDK+AND+fixVersion+%3D+21.0.1) | ||
|
|
||
| ## New and Noteworthy | ||
|
|
||
| ### Noteworthy Change 1 | ||
|
|
||
| Eclipse Temurin 17.0.9 Windows are in a separate release at https://github.com/adoptium/temurin17-binaries/releases/tag/jdk-17.0.9%2B9.1 . | ||
