From 12a068b8a068c65b473128f7221d6af2623e90b1 Mon Sep 17 00:00:00 2001 From: Victor Rudometov Date: Mon, 17 Jul 2023 15:07:27 -0700 Subject: [PATCH] Finalizing CHANGELOG for 11.0.20 --- CHANGELOG.md | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index ed6325321a..c78a8ac1b0 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -24,10 +24,12 @@ in the Amazon Corretto FAQ for supported platforms The following issues are addressed in 11.0.20.8.1: -| Issue Name | Platform | Description | Link | -|---------------------------|----------|----------------------------------------------------------------------------|---------------------------------------------------------------------------------| -| Import jdk-11.0.20+8 | All | Update Corretto baseline to OpenJDK 11.0.20+8 | [jdk-11.0.20+8](https://github.com/openjdk/jdk11u/releases/tag/jdk-11.0.20+8) | - +| Issue Name | Platform | Description | Link | +|-------------------------------------------|----------|-----------------------------------------------|-------------------------------------------------------------------------------| +| Import jdk-11.0.20+8 | All | Update Corretto baseline to OpenJDK 11.0.20+8 | [jdk-11.0.20+8](https://github.com/openjdk/jdk11u/releases/tag/jdk-11.0.20+8) | +| Dynamic link zlib for non armv7 linux | All | Dynamic link zlib for non armv7 linux | [#333](https://github.com/corretto/corretto-11/pull/333) | +| 8302483: Enhance ZIP performance | All | This release of OpenJDK includes stronger checks on the Zip64 fields of zip files. In the event that these checks cause failures on trusted zip files, the checks can be disabled by setting the new system property 'jdk.util.zip.disableZip64ExtraFieldValidation' to 'true'. | | +| 8300596: Enhance Jar Signature validation | All | A System property "jdk.jar.maxSignatureFileSize" is introduced to configure the maximum number of bytes allowed for the signature-related files in a JAR file during verification. The default value is 8000000 bytes (8 MB). | | The following CVEs are addressed in 11.0.20.8.1: | CVE | CVSS | Component |