Amazon Corretto 11 is the better choice over vanilla OpenJDK 11 for production workloads because it provides ongoing security patches and a long-term support commitment. Vanilla OpenJDK 11 stopped receiving active upstream updates from the openjdk.java.net project once Java 12 was released in 2019. For any organization still running Java 11 — a widely deployed LTS version in the ecosystem — Corretto 11 or another LTS distribution is important for security compliance.
Java 11 was released in September 2018 as the first LTS version under Oracle’s new six-month release cadence. It introduced a wave of meaningful features: the HttpClient API, local-variable syntax for lambda parameters, the String API enhancements, and flight recorder becoming open-source. Java 11 remains in heavy production use, particularly in enterprises that standardized on it after migrating off Java 8.
The OpenJDK project only patches the current release, meaning Java 11 from the upstream project has been without active patching for years. Production systems need either Corretto 11, Azul Zulu 11, Eclipse Temurin 11, or Oracle JDK 11 (commercial). Corretto 11 and Zulu 11 are both free and well-maintained choices.
What Is Amazon Corretto 11?
Amazon Corretto 11 is AWS’s free, production-ready build of OpenJDK 11 with long-term support. AWS applies quarterly security patches aligned with Oracle’s Critical Patch Update (CPU) schedule and adds Amazon-specific fixes. Corretto 11 is TCK-certified, meaning it passes the Java SE 11 compatibility test suite and is legally a Java SE 11 implementation.
Corretto 11 is distributed for Linux (x64 and ARM64), Windows, and macOS. It ships pre-installed on Amazon Linux 2, and AWS validates it against their managed services. The Corretto 11 LTS roadmap extends through January 2032, after AWS extended support for Corretto 8 and 11 in October 2024. AWS regularly publishes the patch release notes so organizations can track what CVEs have been addressed.
What Is OpenJDK 11?
OpenJDK 11 is the reference implementation of Java SE 11, released by Oracle in September 2018 as an LTS milestone. The OpenJDK project itself only maintains the current release — once Java 12 shipped in March 2019, the upstream project’s active work on OpenJDK 11 effectively ceased. Oracle continued updating Oracle JDK 11 under commercial license, and several OpenJDK distributions (Corretto, Zulu, Temurin) have continued maintaining Java 11 LTS builds from the upstream source.
The distinction to be precise about is this: OpenJDK the project produces Java 11 source code, but it does not actively backport security fixes to Java 11 branches. Distributions like Corretto do. When people say they are running ‘OpenJDK 11,’ they typically mean one of these distributions — not a build from the upstream project’s unmaintained Java 11 branch.
Amazon Corretto 11 vs OpenJDK Comparison
| Feature | Amazon Corretto 11 | Vanilla OpenJDK 11 |
|---|---|---|
| License | GPLv2 + Classpath Exception | GPLv2 + Classpath Exception |
| Cost | Free | Free (build from source) |
| Support | AWS quarterly patches; no SLA | None (upstream abandoned) |
| LTS | Yes — active LTS maintenance | No (latest release only) |
| Performance | HotSpot JVM, AWS/Graviton-tuned | HotSpot JVM, upstream only |
| Platforms | Linux, Windows, macOS (x64, ARM64) | Source only; limited binary support |
| TCK Certified | Yes | Reference implementation |
Licensing and Cost
Both Corretto 11 and OpenJDK 11 are licensed under GPLv2 with Classpath Exception — the same license that makes both free for commercial use. There is no difference in legal exposure between the two. The practical difference lies mainly in how each is maintained and delivered.
Corretto 11 is delivered as tested, pre-built binaries with a clear patch history. Each quarterly release includes release notes documenting the CVEs addressed and any Amazon-specific changes. Teams can download, install, and stay on a maintained Java 11 runtime without engaging Oracle or any commercial vendor.
Using OpenJDK 11 from the upstream source today would mean building from a branch that Oracle and the OpenJDK community are not actively patching. Any security fix that applies to Java 11 but arrives after Java 12’s release would require manually sourcing, testing, and applying the patch — an impractical burden for any production team. Corretto 11 removes this burden.
Azul Zulu 11 is another free LTS option with optional commercial support through Azul Core. For teams that need contractual support commitments for Java 11 workloads, Azul Core is an accessible path — more cost-effective than Oracle Java SE subscription for most organizations.
Performance and Support
Corretto 11 and OpenJDK 11 (were they built from the same source snapshot) would produce identical JVM performance — both use HotSpot. Corretto 11 includes Amazon-specific patches particularly benefiting Graviton ARM64 instances.
For x86 workloads, benchmark differences between Corretto 11, Zulu 11, and Temurin 11 are negligible. All three track the same upstream HotSpot improvements and apply similar security patches. The choice between them on performance alone is not meaningful.
On support depth: Corretto 11 provides community-level support through GitHub issues and AWS documentation, with no formal SLA. Azul Zulu 11 users can access Azul Core for enterprise-grade support including committed CVE patch turnaround, direct JVM engineering access, and contractual response time commitments. Oracle JDK 11 support requires a paid Oracle Java SE subscription. For Java 11 specifically — a version with known CVE exposure — having a formal support path is increasingly important for regulated industries.
Which Should You Choose?
For Java 11 production workloads, any of the LTS distributions is better than building from vanilla OpenJDK source. Corretto 11 is the right default for AWS teams. Zulu 11 is the right choice for non-AWS teams or those who may need commercial support.
If your organization is still on Java 11, consider whether this is also the right time to evaluate a migration to Java 17 or Java 21 — both are modern LTS versions with longer support windows and richer feature sets. Corretto, Zulu, and Temurin all provide smooth upgrade paths across LTS versions.
Choose Azul Zulu 11 over Corretto 11 if you: run outside AWS, need Alpine Linux container builds, want legacy Java 6 or 7 systems supported under the same vendor, or anticipate needing commercial JVM support under Azul Core.
Frequently Asked Questions
Is OpenJDK 11 still supported?
Not by the upstream OpenJDK project — which only maintains the current Java release. However, OpenJDK 11 LTS builds continue to receive patches from distribution maintainers: Amazon (Corretto 11), Azul (Zulu 11), Eclipse Adoptium (Temurin 11), and Oracle (Oracle JDK 11 under commercial subscription). For production use, use a maintained distribution rather than the unmaintained upstream Java 11 branch.
What is the end of life for Corretto 11?
Amazon Corretto 11 security support runs through January 31, 2032, following AWS’s October 2024 extension. AWS publishes the official Corretto support roadmap on the Corretto documentation page. Organizations with Java 11 workloads requiring support beyond standard dates should evaluate Azul Core’s extended support options or plan a migration to Java 17.
Is Corretto 11 TCK certified?
Yes. Amazon Corretto 11 passes the Java SE 11 Technology Compatibility Kit (TCK) and is legally certified as a Java SE 11 implementation. This certification means Corretto 11 behavior is verified to match the Java SE 11 specification, making it a safe replacement for Oracle JDK 11.
What is the difference between Corretto 11 and Zulu 11?
Both are free, TCK-certified OpenJDK 11 LTS distributions. Corretto 11 is AWS-maintained and optimized for AWS Graviton hardware. Zulu 11 covers more platforms (including Alpine Linux) and offers an upgrade path to Azul Core commercial support. For non-AWS deployments or teams with commercial support requirements, Zulu 11 is the stronger choice.
Should I still use Java 11 in new projects?
Java 11 is a valid, stable LTS version still widely used in production. For new projects, Java 17 or Java 21 are generally preferred — they offer longer remaining support windows, better performance, and richer language features. If you must stay on Java 11 for compatibility reasons, use a maintained distribution like Corretto 11 or Zulu 11 rather than vanilla OpenJDK.
Conclusion
Amazon Corretto 11 is a production-ready, actively maintained Java 11 LTS distribution that solves the core problem of vanilla OpenJDK 11 — the absence of ongoing security patching. For AWS teams, Corretto 11 is the clear default. For teams outside AWS or with commercial support requirements, Azul Zulu 11 offers equivalent LTS coverage with more platform options and the Azul Core support tier.
