Bug 57936 - openjdk-11: Multiple issues (5.0)
Summary: openjdk-11: Multiple issues (5.0)
Status: CLOSED FIXED
Alias: None
Product: UCS
Classification: Unclassified
Component: Security updates
Version: UCS 5.0
Hardware: All Linux
: P3 normal
Target Milestone: UCS 5.0-9-errata
Assignee: Quality Assurance
QA Contact: Arvid Requate
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2025-02-03 12:32 CET by Quality Assurance
Modified: 2025-02-05 14:47 CET (History)
0 users

See Also:
What kind of report is it?: Security Issue
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Customer ID:
Max CVSS v3 score: 4.8 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Quality Assurance univentionstaff 2025-02-03 12:32:25 CET 
New Debian openjdk-11 11.0.26+4-1~deb10u1 fixes:
This update addresses the following issue:
11.0.26+4-1~deb10u1 (Fri, 31 Jan 2025 11:56:34 +0100)
* Non-maintainer upload by the ELTS Team.
* Backport to buster.
11.0.26+4-1 (Wed, 22 Jan 2025 11:26:00 +0100)
* OpenJDK 11.0.26 release, build 4. Release notes:  https://mail.openjdk.org/pipermail/jdk-updates-dev/2025-January/040826.html  - CVEs: + CVE-2025-21502 - 8330045: Enhance array handling.
[ Matthias Klose ]
* Bump standards version.
* d/rules: Also dump logs for zero builds and for build failures.
[ Vladimir Petko ]
* d/rules: Dump complete hs_err_pid and replay_pid logs to stdout.
* d/t/problems.csv: Add openjdk-24 and openjdk-25 to the problems.csv.
* d/{watch,copyright}: Regenerate.
11.0.26~6ea-1 (Fri, 20 Dec 2024 11:23:17 +0100)
* OpenJDK 11.0.26+3 build (early access).
[ Pushkar Kulkarni ]
* d/t/problems.csv: Update based on recent JTREG runs.
Comment 1 Quality Assurance univentionstaff 2025-02-03 13:00:10 CET 
--- mirror/ftp/pool/main/o/openjdk-11/openjdk-11_11.0.25+9-1~deb10u1.dsc
+++ apt/ucs_5.0-0-errata5.0-9/source/openjdk-11_11.0.26+4-1~deb10u1.dsc
@@ -1,3 +1,32 @@
+11.0.26+4-1~deb10u1 [Fri, 31 Jan 2025 11:56:34 +0100] Emilio Pozuelo Monfort <pochu@debian.org>:
+
+  * Non-maintainer upload by the ELTS Team.
+  * Backport to buster.
+
+11.0.26+4-1 [Wed, 22 Jan 2025 11:26:00 +0100] Matthias Klose <doko@ubuntu.com>:
+
+  * OpenJDK 11.0.26 release, build 4. Release notes:
+    https://mail.openjdk.org/pipermail/jdk-updates-dev/2025-January/040826.html
+
+    - CVEs:
+      +  CVE-2025-21502 - 8330045: Enhance array handling.
+
+  [ Matthias Klose ]
+  * Bump standards version.
+  * d/rules: Also dump logs for zero builds and for build failures.
+
+  [ Vladimir Petko ]
+  * d/rules: Dump complete hs_err_pid and replay_pid logs to stdout.
+  * d/t/problems.csv: Add openjdk-24 and openjdk-25 to the problems.csv.
+  * d/{watch,copyright}: Regenerate.
+
+11.0.26~6ea-1 [Fri, 20 Dec 2024 11:23:17 +0100] Matthias Klose <doko@ubuntu.com>:
+
+  * OpenJDK 11.0.26+3 build (early access).
+
+  [ Pushkar Kulkarni ]
+  * d/t/problems.csv: Update based on recent JTREG runs.
+
 11.0.25+9-1~deb10u1 [Mon, 21 Oct 2024 15:53:56 +0200] Emilio Pozuelo Monfort <pochu@debian.org>:
 
   * Non-maintainer upload by the ELTS Team.

<http://piuparts.knut.univention.de/5.0-9/#5627829276672502444>
Comment 2 Arvid Requate univentionstaff 2025-02-03 13:29:57 CET 
OK: bug
OK: yaml
OK: announce_errata
OK: patch
~OK: piuparts
  dependency loop

[5.0-9] 38ce30b697 Bug #57936: openjdk-11 11.0.26+4-1~deb10u1
 doc/errata/staging/openjdk-11.yaml | 13 +++++++++++++
 1 file changed, 13 insertions(+)