Ich halte mich da lieber an Originalquellen:
https://aws.amazon.com/de/blogs/opensource/amazon-corretto-no-cost-distribution-openjdk-long-term-support/
"Amazon will distribute security updates to Corretto 8 at no cost until at least June, 2023, and to Corretto 11 until at least August, 2024. Corretto includes targeted backports from newer releases, as well as newly-developed enhancements from the OpenJDK community. The release process includes testing on thousands of Amazon services, which makes it possible for fixes to be released within days of finding issues."
:)
Der Punkt ist, das OpenJdk steht unter der GPL. Das bedeutet, man muss die Änderungen veröffentlichen wenn man die Software zum Download anbietet. Und da Amazon das macht können alle anderen diese Sicherheitsfixes auch übernehmen.
MfG