Package "openjdk-11-jdk"

  openjdk-lts (11.0.25+9-1ubuntu1~20.04) focal-security; urgency=medium

  * OpenJDK 11.0.25 release, build 9.

     - CVEs
       + CVE-2024-21208, 8328286: Enhance HTTP client
       + CVE-2024-21210, 8328544: Improve handling of vectorization
       + CVE-2024-21217, 8331446: Improve deserialization support
       + CVE-2024-21235, 8332644: Improve graph optimizations

     - Security fixes
       + JDK-8290367, JDK-8332643: Update default value and extend the scope
         of the com.sun.jndi.ldap.object.trustSerialData system property
       + JDK-8307383: Enhance DTLS connections
       + JDK-8328286: Enhance HTTP client
       + JDK-8328544: Improve handling of vectorization
       + JDK-8328726: Better Kerberos support
       + JDK-8331446: Improve deserialization support
       + JDK-8332644: Improve graph optimizations
       + JDK-8335713: Enhance vectorization analysis

  [ Vladimir Petko ]
  * d/rules: do not include dtrace support for S390x (JDK-8305174).
  * d/t/problems.csv: Disable jdk/sun/security/util/Debug/DebugOptions.java
    due to JDK-8339713.

  [ Pushkar Kulkarni ]
  * d/{control, watch}: regenerate for upload to Ubuntu 20.04
  * Upload to Ubuntu 20.04

  openjdk-lts (11.0.24+8-1ubuntu3~20.04) focal-security; urgency=medium

  * Upload to Ubuntu 20.04.

  openjdk-lts (11.0.23+9-1ubuntu1~20.04.2) focal-security; urgency=medium

  * Modify the previous changelog entry:
       remove an invalid entry from the CVE list.

  openjdk-lts (11.0.22+7-0ubuntu2~20.04.1) focal-security; urgency=medium

  * No-change rebuild to correct the previous changelog entry (LP: #2050390)

  * Upload to Ubuntu 20.04

  * d/rules, d/control: Use gcc-10 on focal to work around LP: #2044899

  openjdk-lts (11.0.21+9-0ubuntu1~20.04) focal-security; urgency=medium

  * OpenJDK 11.0.21 release, build 9.
    - CVE-2023-22081.
    - Release notes:
      https://mail.openjdk.org/pipermail/jdk-updates-dev/2023-October/026351.html
  * d/source/lintian.overrides: use openjdk-lts package name.
  * Merge changes from openjdk-11 11.0.21+9-1 (LP: #2039754).
    - d/test: update problemlist.
    - d/p: drop exclude-broken-tests.patch.
    - d/p/reproducible-properties-timestamp.diff: use the privileged action
      to read the system property (JDK-8272157, 914278).
    - d/copyright: remove liblcms from excluded files.
    - d/t/jtreg-autopkgtest.{sh,in}: JDK-8232153 - set NSS_DEFAULT_DB_TYPE
      to let sun/security/pkcs11/Secmod/AddTrustedCert.java pass.

      [ Matthias Klose ]
    - Build using GCC 13 on development versions.
    - Explicitly configure --without-jtreg with the nocheck profile

      [ Pushkar Kulkarni ]
    - Handle limited ECC capabilities of NSS on older releases.

  [ Vladimir Petko ]
  * Upload to Ubuntu 20.04.

 -- Vladimir Petko <email address hidden> Thu, 19 Oct 2023 20:55:44 +1300