-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 24 Apr 2026 13:36:40 +1200
Source: openjdk-21
Built-For-Profiles: noudeb
Architecture: source
Version: 21.0.11+10-1
Distribution: unstable
Urgency: medium
Maintainer: OpenJDK Team <openjdk-21@packages.debian.org>
Changed-By: Vladimir Petko <vladimir.petko@canonical.com>
Changes:
openjdk-21 (21.0.11+10-1) unstable; urgency=medium
.
* OpenJDK 21.0.11 release, build 10.
- CVEs:
+ CVE-2026-22016: 8370529: Enhance Path Factories Redux
+ CVE-2026-34282: 8374557: Enhance TLS connection handling
+ CVE-2026-22021: 8371830: Enhance certificate chain validation
+ CVE-2026-22013: 8370615: Improve Kerberos credentialing
+ CVE-2026-23865: 8379158: Update FreeType to 2.14.2
+ CVE-2026-22018: 8370986: Enhance Zip file reading
+ CVE-2026-22007: 8369575: Enhance crypto algorithm support
+ CVE-2026-34268: 8371935: Enhance key generation
* d/rules: Check generated files only on amd64. This resolves riscv64
ftbfs, as some architectures change with_check flag.
* d/t/problems.csv: Fix typo in loong64 excluded tests lists.
* Add common GPL and Apache license headers to copyright generator.
* d/copyright: Regenerate.
Checksums-Sha1:
31218ffdcc32b9a849b7e935aad721a3f86d1bbc 5063 openjdk-21_21.0.11+10-1.dsc
f757f831f55051a51c3dd670ea0368111b23c53a 613408 openjdk-21_21.0.11+10.orig-googletest.tar.xz
826c5a57fd9f8cf4cc57638a06ed0960c05ddfa1 67649120 openjdk-21_21.0.11+10.orig.tar.xz
8c1ff2f143738efcca18b1caff518c6ca0f15a62 231208 openjdk-21_21.0.11+10-1.debian.tar.xz
8eb46c0c2e986005d4fc7b8c4fa437557833c242 18564 openjdk-21_21.0.11+10-1_source.buildinfo
Checksums-Sha256:
67bee87655a4bf7a833f88d18f41572ed179254c262e86df85a06ee604b54683 5063 openjdk-21_21.0.11+10-1.dsc
6e6699c442cd6bc008140d159b43a7a39bb811d1ecd380cf3b707cc535e04393 613408 openjdk-21_21.0.11+10.orig-googletest.tar.xz
0bd85b2ddd8a4cfcb3f4bee02e01e1cc001b9ac9f7f1ecbbe1c37ac6fbc34d99 67649120 openjdk-21_21.0.11+10.orig.tar.xz
10db8fec8fbc51fe6ecc42fb3ddab069f430f234af0e31e6b77835c9464593da 231208 openjdk-21_21.0.11+10-1.debian.tar.xz
d76d28e6c85968c793f6104e436b58e3db107e3b822d8db2651a8d917b9cab02 18564 openjdk-21_21.0.11+10-1_source.buildinfo
Files:
c96a37b6d9b596eb8088e5a2fbaf1d88 5063 java optional openjdk-21_21.0.11+10-1.dsc
ae1c58d38d39133ebcdc47e09d77a661 613408 java optional openjdk-21_21.0.11+10.orig-googletest.tar.xz
fabef6ed6ee7e57c0a7f7cae0af32cee 67649120 java optional openjdk-21_21.0.11+10.orig.tar.xz
0a559c497559e04958bf51fa7ba94653 231208 java optional openjdk-21_21.0.11+10-1.debian.tar.xz
4a6cd30cf0141ae0c18f307897fadafb 18564 java optional openjdk-21_21.0.11+10-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEi0Ab7+QbQ0yQSEMs9jtmipabB8AFAmnqzdkACgkQ9jtmipab
B8DluQ/9FNR6w3qHiTYTdcadZcXKv7hROGZGE9AdkYkM/H+e+L0++M1lIizxCeSz
MaKw2Hw/TNsKm9WCUD1zgmR6yay6fYN2gctv9S8C0bI86zzN08B3Jm4cECuV7xBO
kyx5N9TioJxPos9K+1mFbUEjIgvZ29QodzjVpnidw9c9SKUfBgzlo2713hYimN/p
PAw8MajMP0E+zCSwFEyNOL94HePhyJyDGtgJfNHMB5ZcotrhhctY/4Fr5naySdhH
IiW7ppet5mahL/TXuy0PF6AdeDM16HRyim5+yVOUeT8UZKyOYiuTnvfJUgqo5IIP
10ds/mShWN6NgwHnOsn8GX8fYYaAVoTEQcZ41IsVa0yO9WqmCXeJdurvvq/Pnhdw
PL6M6Hnw+YrUp2rG5dyxuiKNql+DyuoyNFND3KacoIxRa5Nv9VsfNV+kOMWK1RsL
eNrGJwbuGRcAvoAtFcBmvj9fjZcDJSHBlP95JC9LC/k1kpiFkOByYSxTIlfGd9jm
JkaAwIc4sJkh4wwMcBGgInkoF/6+7VYPNSxbXWpiwbtX+JHzHrpXm0MLJhQmiuJD
y+3GeKVxJuSyJt3xLa5IL00YtsXzLJO6RArP6RRfz13KrGlITVvmzMQ3n1YCKb1g
wlpCNwJknaEIeSyM8DElUvAvIuZjlrYKTkaapFeOEYODLodAwuo=
=c9Ox
-----END PGP SIGNATURE-----
