openjdk team mailing list archive

[Launchpad Bug Tracker <2092368@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package openjdk-lts - 11.0.26~3ea-1ubuntu1

---------------
openjdk-lts (11.0.26~3ea-1ubuntu1) plucky; urgency=medium

  * OpenJDK 11.0.26+3 build (early access) (LP: #2092368).

  [ Pushkar Kulkarni ]
  * d/t/problems.csv: Update based on recent JTREG runs.

openjdk-lts (11.0.25+9-1ubuntu1) plucky; urgency=medium

  * OpenJDK 11.0.25 release, build 9.

     - CVEs
       + CVE-2024-21208, 8328286: Enhance HTTP client
       + CVE-2024-21210, 8328544: Improve handling of vectorization
       + CVE-2024-21217, 8331446: Improve deserialization support
       + CVE-2024-21235, 8332644: Improve graph optimizations

     - Security fixes
       + JDK-8290367, JDK-8332643: Update default value and extend the scope
         of the com.sun.jndi.ldap.object.trustSerialData system property
       + JDK-8307383: Enhance DTLS connections
       + JDK-8328286: Enhance HTTP client
       + JDK-8328544: Improve handling of vectorization
       + JDK-8328726: Better Kerberos support
       + JDK-8331446: Improve deserialization support
       + JDK-8332644: Improve graph optimizations
       + JDK-8335713: Enhance vectorization analysis

  [ Vladimir Petko ]
  * d/rules: do not include dtrace support for S390x (JDK-8305174).
  * d/t/problems.csv: Disable jdk/sun/security/util/Debug/DebugOptions.java
    due to JDK-8339713.

 -- Vladimir Petko <vladimir.petko@xxxxxxxxxxxxx>  Mon, 23 Dec 2024
09:41:59 +1300

** Changed in: openjdk-lts (Ubuntu)
       Status: New => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-21208

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-21210

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-21217

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-21235

-- 
You received this bug notification because you are a member of OpenJDK,
which is subscribed to openjdk-lts in Ubuntu.
https://bugs.launchpad.net/bugs/2092368

Title:
  please merge openjdk-11 11.0.26+3 early access from debian unstable

Status in openjdk-lts package in Ubuntu:
  Fix Released

Bug description:
  tracking bug

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openjdk-lts/+bug/2092368/+subscriptions