openjdk-lts (11.0.28+6-1ubuntu1~22.04.1) jammy-security; urgency=medium
* Upload to Ubuntu 22.04.
-- Vladimir Petko <vladimir.petko@canonical.com> Fri, 18 Jul 2025 08:44:25 +1200
openjdk-lts (11.0.28+6-1ubuntu1) questing; urgency=medium
* OpenJDK 11.0.28 release, build 6. See
https://openjdk.org/groups/vulnerability/advisories/2025-07-15
- CVEs:
+ CVE-2025-50059, 8350991: Improve HTTP client header handling
+ CVE-2025-30749, 8348989: Better Glyph drawing
+ CVE-2025-50106, 8360147: Better Glyph drawing redux
+ CVE-2025-30761, 8351422: Improve scripting supports
+ CVE-2025-30754, 8349594: Enhance TLS protocol support
- Security fixes:
+ 8349111: Enhance Swing supports
+ 8345625: Better HTTP connections
- Release notes:
https://mail.openjdk.org/pipermail/jdk-updates-dev/2025-July/045612.html
* d/watch: regenerate.
* d/copyright: regenerate.
* d/copyright-generator/copyright-gen.py: bump copyright year.
* d/rules: use /usr/share/jtreg jtreg home for bionic.
-- Vladimir Petko <vladimir.petko@canonical.com> Thu, 17 Jul 2025 08:41:38 +1200
openjdk-lts (11.0.28~5ea-1ubuntu2) questing; urgency=medium
* d/rules: use link file to provide symlink to ja man pages (LP:
#2116572).
* d/copyright: regenerate.
-- Vladimir Petko <vladimir.petko@canonical.com> Tue, 15 Jul 2025 10:30:48 +1200
openjdk-lts (11.0.28~5ea-1ubuntu1) questing; urgency=medium
* OpenJDK 11.0.28+5 build (early access).
* d/p/jdk-8359735.patch: fix process tests failing in Ubuntu 25.10
(questing).
-- Vladimir Petko <vladimir.petko@canonical.com> Sat, 05 Jul 2025 18:18:05 +1200
openjdk-lts (11.0.28~3ea-1ubuntu1) questing; urgency=medium
* OpenJDK 11.0.28+3 build (early access) (LP: #2114688).
* d/t/problems.csv: Update based on recent JTREG runs.
* d/rules: Disable dtrace on jammy armhf (was not enabled before and cannot
be built due to a GCC ICE (see LP #2091225).
[ Matthias Klose ]
* Honour DEB_BUILD_OPTIONS=parallel=N while running jtreg tests (Helmut
Grohne). Addresses: #1095920.
-- Vladimir Petko <vladimir.petko@canonical.com> Mon, 16 Jun 2025 09:02:57 +1200
openjdk-lts (11.0.26+4-1ubuntu1) plucky; urgency=medium
* OpenJDK 11.0.26 release, build 4. Release notes:
https://mail.openjdk.org/pipermail/jdk-updates-dev/2025-January/040826.html
- CVEs:
+ CVE-2025-21502 - 8330045: Enhance array handling.
* d/rules: Dump complete hs_err_pid and replay_pid logs to stdout.
* d/t/problems.csv: Add openjdk-24 and openjdk-25 to the problems.csv.
* d/{copyright, watch}: regenerate.
[ Matthias Klose ]
* d/rules: Also dump logs for zero builds and for build failures.
-- Vladimir Petko <vladimir.petko@canonical.com> Wed, 22 Jan 2025 15:18:54 +1300
openjdk-lts (11.0.26~3ea-1ubuntu1) plucky; urgency=medium
* OpenJDK 11.0.26+3 build (early access) (LP: #2092368).
[ Pushkar Kulkarni ]
* d/t/problems.csv: Update based on recent JTREG runs.
-- Vladimir Petko <vladimir.petko@canonical.com> Mon, 23 Dec 2024 09:41:59 +1300
openjdk-lts (11.0.25+9-1ubuntu1) plucky; urgency=medium
* OpenJDK 11.0.25 release, build 9.
- CVEs
+ CVE-2024-21208, 8328286: Enhance HTTP client
+ CVE-2024-21210, 8328544: Improve handling of vectorization
+ CVE-2024-21217, 8331446: Improve deserialization support
+ CVE-2024-21235, 8332644: Improve graph optimizations
- Security fixes
+ JDK-8290367, JDK-8332643: Update default value and extend the scope
of the com.sun.jndi.ldap.object.trustSerialData system property
+ JDK-8307383: Enhance DTLS connections
+ JDK-8328286: Enhance HTTP client
+ JDK-8328544: Improve handling of vectorization
+ JDK-8328726: Better Kerberos support
+ JDK-8331446: Improve deserialization support
+ JDK-8332644: Improve graph optimizations
+ JDK-8335713: Enhance vectorization analysis
[ Vladimir Petko ]
* d/rules: do not include dtrace support for S390x (JDK-8305174).
* d/t/problems.csv: Disable jdk/sun/security/util/Debug/DebugOptions.java
due to JDK-8339713.
-- Pushkar Kulkarni <pushkar.kulkarni@canonical.com> Thu, 17 Oct 2024 22:51:26 +0530
openjdk-lts (11.0.25~5ea-1ubuntu1) oracular; urgency=medium
* OpenJDK 11.0.25+5 build (early access) (LP: #2080298).
* d/copyright-generator/strip-common-licenses.sh: Add GPLv3 to the
list of common licenses.
* d/rules, d/control.in: Depend on pkgconf rather than pkg-config in
bookworm and later releases. This resolves lintian warning
build-depends-on-obsolete-package Build-Depends: pkg-config => pkgconf.
* Build using GCC 14 on development versions.
* d/t/problemlist.csv: Update problemlist.csv for July release.
* d/copyright-generator/copyright-gen.py: remove spurious whitespaces.
* Enable dtrace support.
* Regenerate control files.
-- Vladimir Petko <vladimir.petko@canonical.com> Tue, 10 Sep 2024 08:53:42 +1200
openjdk-lts (11.0.24+8-1ubuntu3) oracular; urgency=medium
* OpenJDK 11.0.24 release, build 8. Release notes:
https://mail.openjdk.org/pipermail/jdk-updates-dev/2024-July/035797.html
- CVEs
+ CVE-2024-21147: 8323231, RangeCheckElimination array index overflow.
+ CVE-2024-21145: 8324559, Out-of-bounds access in 2D image handling.
+ CVE-2024-21140: 8320548, Range Check Elimination (RCE) pre-loop limit
overflow.
+ CVE-2024-21144: 8322106, Pack200 increase loading time due to improper
header validation.
+ CVE-2024-21131: 8314794, potential UTF8 size overflow.
+ CVE-2024-21138: 8319859, Excessive symbol length can lead to infinite loop.
- Security fixes
+ JDK-8303466: C2: failed: malformed control flow.
Limit type made precise with MaxL/MinL.
+ JDK-8314794: Improve UTF8 String supports.
+ JDK-8319859: Better symbol storage.
+ JDK-8320097: Improve Image transformations.
+ JDK-8320548: Improved loop handling.
+ JDK-8322106: Enhance Pack 200 loading.
+ JDK-8323231: Improve array management.
+ JDK-8323390: Enhance mask blit functionality.
+ JDK-8324559: Improve 2D image handling.
+ JDK-8325600: Better symbol storage.
+ JDK-8327413: Enhance compilation efficiency.
* No-Change upload to include OpenJDK bugs related to CVEs.
-- Vladimir Petko <vladimir.petko@canonical.com> Mon, 22 Jul 2024 08:41:26 +1200
# For older changelog entries, run 'apt-get changelog openjdk-11-doc'
Generated by dwww version 1.14 on Sat Sep 6 08:26:15 CEST 2025.