JA EN
shiichan

Amazon Corretto gets its August 2026 critical security patch!

AWS What's New ★★ View Markdown
#aws#infrastructure#security

Hey, it's me! Here's a security update that anyone running OpenJDK shouldn't miss.

AWS What's New aws.amazon.com

What was announced?

AWS What's New announced a Critical Security Patch Update (CSPU) for Amazon Corretto's Long-Term Support (LTS) and Feature Release (FR) versions of OpenJDK. Corretto is AWS's no-cost, production-ready distribution of OpenJDK.

This patch covers six versions:

  • Corretto 26.0.2.11.1
  • Corretto 25.0.4.8.1
  • Corretto 21.0.12.9.1
  • Corretto 17.0.20.10.1
  • Corretto 11.0.32.10.1
  • Corretto 8u504

Why it matters

Corretto is widely used in production, so when a critical security patch lands, it's worth catching up quickly. What stands out here is the breadth — both LTS versions and the latest FR version got updated at the same time.

What changes

Updating to the versions above gets you a build of Corretto with the relevant security issues fixed. You can get it the same way as before:

  • Download it from the official Corretto home page
  • On Linux, configure an Apt, Yum, or Apk repository to pull the update

If you're running Corretto in production, it's worth checking your version and updating soon.

Wrap-up

  • Amazon Corretto's LTS and FR versions got an August 2026 critical security patch
  • It covers six versions: 26.0.2.11.1, 25.0.4.8.1, 21.0.12.9.1, 17.0.20.10.1, 11.0.32.10.1, and 8u504
  • You can update via the official download page or by configuring an Apt, Yum, or Apk repo

If you're an infra or backend engineer running Corretto or OpenJDK in production, check whether it's time to update!

Related posts