[ubuntu/noble-updates] openjdk-25 25.0.2+10-1~24.04 (Accepted)

Ubuntu Archive Robot ubuntu-archive-robot at lists.canonical.com
Mon Feb 2 20:32:53 UTC 2026


openjdk-25 (25.0.2+10-1~24.04) noble-security; urgency=medium

  * Upload to Ubuntu 24.04.

openjdk-25 (25.0.2+10-1) unstable; urgency=medium

  * OpenJDK 25.0.2 release, build 10.
    - CVEs:
      + CVE-2026-21945: 8368032: Enhance Certificate Checking.
      + CVE-2026-21932: 8359501: Enhance Handling of URIs.
      + CVE-2026-21933: 8362632: Improve HttpServer Request handling.
      + CVE-2026-21925: 8341496: Improve JMX connections.
  * d/rules: Use jtreg8 package for the tests.
  * d/p/power-opt.diff: Refresh patch.
  * Drop patches applied upstream:
     - d/p/jdk-8359735.patch.
     - d/p/jdk-8369450-proposed.patch.
     - d/p/jdk-8370049-proposed.patch.

openjdk-25 (25.0.1+8-3) unstable; urgency=medium

  * d/t/control.in: Remove flaky and skippable flag from dependencies.sh
    test and install only jre package.
  * d/t/control: Regenerate.

openjdk-25 (25.0.1+8-2) unstable; urgency=medium

  [ Matthias Klose ]
  * d/rules: Adjust any_archs, hppa is unlikely to get fixed for the
    opposite stack frame growth.
  * d/rules: Run the testsuite for loong64.
  * Regenerate the watch file.

  [ Vladimir Petko ]
  * d/{rules/control.in/test/control.in}: Replace dbus-x11 with dbus-
    daemon dependency. Closes: #1117100.
  * d/control: d/test/control: Regenerate.
  * d/README.{Debian,source}: Update package readme files.
  * d/rules: Use generic code to replace bundled jquery.
  * d/JB-doc.overrides.in: Drop binary package bundled jquery
    override. The override is not needed for the binary package.
  * d/s/lintian-overrides: Update jquery override override comment.
  * Update unstripped-binary-or-object override comments.
    OpenJDK needs symbols for Native Memory Tracking.

openjdk-25 (25.0.1+8-1) unstable; urgency=medium

  * OpenJDK 25.0.1 release, build 8.
    - CVEs:
      + CVE-2025-53057, 8360937: Enhance certificate handling.
      + CVE-2025-53066, 8356294: Enhance Path Factories.
      + CVE-2025-61748, 8359454: Enhance String handling.

  [ Vladimir Petko ]
  * d/s/lintian-overrides: Override false positive nproc warning.
  * d/{JB-doc.overrides.in, JB-jre-headless.overrides.in}: Add override for
    old FSF copyright address.
  * d/JB-jvmci-jdk.overrides.in: Update overrides for jvmci package.
  * d/t/problems.csv: DocRootDirPermissionsTest.java - Fix typo in
    the test name.
  * d/t/problems.csv: Synchronize problem list.
  * d/t/dependencies.sh: Relax test assertion for PC/SC library.
  * d/rules: Prefer openjdk-25 for bootstrap.
  * d/control: Regenerate.
  * d/p/jdk-8369450.patch: Fix ftbfs due to rust-coreutils date. LP: #2127120.
  * Security Manager was removed in -25, so the JDK image no longer has
    default.policy and java.policy.
  * jaxp-strict.properties.template was moved by d/rules to
    jaxp-strict.properties, but we still created symlink to
    jaxp-strict.properties.template.  Replace mv with cp so that link
    to jaxp-strict.properties.template is not broken.
  * d/rules: Run jtreg autopkgtests only on jtreg architectures.
  * d/t/{hotspot-autopkgtest.in, jdk-autopkgtest.in}: Skip tests
    that require a large amount of memory.
  * d/t/{control,hotspot-autopkgtest.sh, jdk-autopkgtest.sh}:
    Regenerate.
  * d/p/jdk-8370049-proposed.patch: s390x G1 barrier compare and exchange
    operation should update output parameter instead of input.  LP: #2127750.

  [ Matthias Klose ]
  * d/rules: Let the install target depend on the build target.
    Closes: #1105520.
  * Update the location of the upstream VCS.

Date: 2026-01-23 02:54:12.241332+00:00
Changed-By: Vladimir Petko <vladimir.petko at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/openjdk-25/25.0.2+10-1~24.04
-------------- next part --------------
Sorry, changesfile not available.


More information about the noble-changes mailing list