[ubuntu/resolute-security] openjdk-21 21.0.12+8-1~26.04 (Accepted)

John Breton john.breton at canonical.com
Tue Aug 25 12:28:40 UTC 2026


openjdk-21 (21.0.12+8-1~26.04) resolute-security; urgency=medium

  * Upload to Ubuntu 26.04.

openjdk-21 (21.0.12+8-1) unstable; urgency=medium

  * OpenJDK 21.0.12 release, build 8.
    - CVEs:
      + CVE-2026-46968
      + CVE-2026-46917
      + CVE-2026-47010
      + CVE-2026-47021
      + CVE-2026-47027
      + CVE-2026-60147
      + CVE-2026-47059
      + CVE-2026-47063
      + CVE-2026-41254
    - Release notes: https://bit.ly/openjdk2112

openjdk-21 (21.0.12~7ea-1) unstable; urgency=medium

  * OpenJDK 21.0.12 early access, build 7.
  * d/copyright: Regenerate.
  * d/p/jdk-8387580.diff: Apply upstream patch to resolve S390x
    ftbfs (JDK-8387580).
  * d/t/problems.csv: Drop obsolete versions, add openjdk-28,
    add new exclusions.

openjdk-21 (21.0.12~5ea-1) unstable; urgency=medium

  * OpenJDK 21.0.12 early access, build 5.
  * d/rules: Do not perform copyright validation for old releases.
  * d/rules: Check DEB_BUILD_PROFILES in addition to DEB_BUILD_OPTIONS
    to set up with_check variable. Do not check control files if
    with_check is disabled (Closes: #1137499).
  * d/control.in: Add myself to uploaders.
  * Regenerate files.
  * d/JB-jre-{headless,zero}.overrides.in: Drop exit-in-shared-library
    override.

openjdk-21 (21.0.11+10-1) unstable; urgency=medium

  * OpenJDK 21.0.11 release, build 10.
    - CVEs:
      + CVE-2026-22016: 8370529: Enhance Path Factories Redux
      + CVE-2026-34282: 8374557: Enhance TLS connection handling
      + CVE-2026-22021: 8371830: Enhance certificate chain validation
      + CVE-2026-22013: 8370615: Improve Kerberos credentialing
      + CVE-2026-23865: 8379158: Update FreeType to 2.14.2
      + CVE-2026-22018: 8370986: Enhance Zip file reading
      + CVE-2026-22007: 8369575: Enhance crypto algorithm support
      + CVE-2026-34268: 8371935: Enhance key generation
  * d/rules: Check generated files only on amd64. This resolves riscv64
    ftbfs, as some architectures change with_check flag.
  * d/t/problems.csv: Fix typo in loong64 excluded tests lists.
  * Add common GPL and Apache license headers to copyright generator.
  * d/copyright: Regenerate.

Date: 2026-07-23 14:00:11.880139+00:00
Changed-By: Pushkar Kulkarni <pushkar.kulkarni at canonical.com>
Signed-By: John Breton <john.breton at canonical.com>
https://launchpad.net/ubuntu/+source/openjdk-21/21.0.12+8-1~26.04
-------------- next part --------------
Sorry, changesfile not available.


More information about the Resolute-changes mailing list