openjdk team mailing list archive

[Launchpad Bug Tracker <2059005@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package openjdk-lts - 11.0.23+9-1ubuntu1

---------------
openjdk-lts (11.0.23+9-1ubuntu1) noble; urgency=high

  * OpenJDK 11.0.23 release, build 9.
    - CVE-2024-21011, 8319851: Improve exception logging.
    - CVE-2024-21068, 8322122: Enhance generation of addresses.
    - 8318340: Improve RSA key implementations.
    - CVE-2024-21012, 8315708: Enhance HTTP/2 client usage.
    - CVE-2024-21094, 8317507: Already fixed in November 2023:
      C2 compilation fails with "Exceeded _node_regs array".
    - CVE-2024-21085, 8322114: Improve Pack 200 handling.

  [ Pushkar Kulkarni ]
  * Use 64-bit clock_* function on archs like armhf.

 -- Matthias Klose <doko@xxxxxxxxxx>  Wed, 17 Apr 2024 16:23:29 +0200

** Changed in: openjdk-lts (Ubuntu)
       Status: New => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-21011

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-21012

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-21068

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-21085

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-21094

-- 
You received this bug notification because you are a member of OpenJDK,
which is subscribed to openjdk-lts in Ubuntu.
https://bugs.launchpad.net/bugs/2059005

Title:
  proposed-migration for openjdk-lts 11.0.23~7ea-1ubuntu1

Status in openjdk-lts package in Ubuntu:
  Fix Released

Bug description:
  openjdk-lts 11.0.23~7ea-1ubuntu1 is built in -proposed but not on
  armhf.  This will not block migration because armhf binaries are being
  removed from the release pocket, but unless addressed will regress
  armhf availability of this package in 24.04 LTS.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openjdk-lts/+bug/2059005/+subscriptions