-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 24 Apr 2026 14:31:54 +1200
Source: openjdk-11
Built-For-Profiles: noudeb
Architecture: source
Version: 11.0.31+11-1
Distribution: unstable
Urgency: medium
Maintainer: OpenJDK Team <openjdk-11@packages.debian.org>
Changed-By: Vladimir Petko <vladimir.petko@canonical.com>
Changes:
openjdk-11 (11.0.31+11-1) unstable; urgency=medium
.
* OpenJDK 11.0.31 release, build 11.
- CVEs:
+ CVE-2026-22016: 8370529: Enhance Path Factories Redux
+ CVE-2026-34282: 8374557: Enhance TLS connection handling
+ CVE-2026-22021: 8371830: Enhance certificate chain validation
+ CVE-2026-22013: 8370615: Improve Kerberos credentialing
+ CVE-2026-23865: 8379158: Update FreeType to 2.14.2
+ CVE-2026-22018: 8370986: Enhance Zip file reading
+ CVE-2026-22007: 8369575: Enhance crypto algorithm support
+ CVE-2026-34268: 8371935: Enhance key generation
* d/rules: Check generated files only on amd64. This resolves riscv64
ftbfs, as some architectures change with_check flag.
* Add common GPL and Apache license headers to copyright generator.
* d/t/problems.csv: Synchronize problemlist.
Checksums-Sha1:
cb8a7a1fd3fb1c873955463dafeff4846c1cfd75 4398 openjdk-11_11.0.31+11-1.dsc
7d18a95e6be6c0ee4d50b3b28fd7f967a0f1f175 69405288 openjdk-11_11.0.31+11.orig.tar.xz
a4d153fc8e322d63e8b69a89876790fab74a7eab 171896 openjdk-11_11.0.31+11-1.debian.tar.xz
1b2a84180bb88f33a7f501045608a21dde479a16 18624 openjdk-11_11.0.31+11-1_source.buildinfo
Checksums-Sha256:
fc8de13da7afe320794aac14bc00a594c56262ef8c3cd3721f1ebc7822417792 4398 openjdk-11_11.0.31+11-1.dsc
730cddead3d39a1c81b344e2c06a8839e1bcd81f2f08b8da111a23c45b6af436 69405288 openjdk-11_11.0.31+11.orig.tar.xz
b09f1b77d4775e960bad8f5e0dff93785e4620423977e4669d5771207c3793c2 171896 openjdk-11_11.0.31+11-1.debian.tar.xz
2bc812f8ebf4ed6a5fd5a44c034c8337bb3dbbfd96df479d25bc688309e7e87a 18624 openjdk-11_11.0.31+11-1_source.buildinfo
Files:
a647b05ba2835fa34003de64f86f0c5f 4398 java optional openjdk-11_11.0.31+11-1.dsc
e8431554095b0c5f053ffe751c50523e 69405288 java optional openjdk-11_11.0.31+11.orig.tar.xz
dcac280915b98786927e97c4473f32b4 171896 java optional openjdk-11_11.0.31+11-1.debian.tar.xz
411c123fdb06fec91df56cbc941c2808 18624 java optional openjdk-11_11.0.31+11-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=dcWY
-----END PGP SIGNATURE-----
