[ubuntu/questing-security] openjdk-25-crac 25.0.2+10-0ubuntu1~25.10 (Accepted)
John Breton
john.breton at canonical.com
Mon Feb 2 17:25:57 UTC 2026
openjdk-25-crac (25.0.2+10-0ubuntu1~25.10) questing-security; urgency=medium
* Upload to Ubuntu 25.10.
openjdk-25-crac (25.0.2+10-0ubuntu1) resolute; urgency=medium
* New release based on OpenJDK 25.0.2 release, build 10.
- CVEs:
+ CVE-2026-21945: 8368032: Enhance Certificate Checking.
+ CVE-2026-21932: 8359501: Enhance Handling of URIs.
+ CVE-2026-21933: 8362632: Improve HttpServer Request handling.
+ CVE-2026-21925: 8341496: Improve JMX connections.
* d/rules: Use jtreg8 package for the tests.
* d/p/power-opt.diff: Refresh patch.
* Drop patches applied upstream:
- d/p/jdk-8359735.patch.
- d/p/jdk-8369450-proposed.patch.
- d/p/jdk-8370049-proposed.patch.
* d/s/lintian-overrides: Update override comment.
* d/rules: Use generic code to replace bundled jquery.
* d/JB-doc.overrides.in: Drop binary package bundled jquery
override. The override is not needed for the binary package.
* d/t/control.in: Remove flaky and skippable flag from dependencies.sh
test and install only jre package.
* d/{control, t/control}: Regenerate.
* d/t/dependencies.in: Relax PC/SC library assertion,
regenerate d/t/dependencies.sh.
* d/t/write-problems.{in,sh}: Remove -crac suffix when filtering
problem list.
* d/t/problems.csv: Synchronize problemlist with openjdk-25.
openjdk-25-crac (25.0.1+8-0ubuntu1) resolute; urgency=medium
* New release based on OpenJDK 25.0.1 release, build 8.
- CVEs:
+ CVE-2025-53057, 8360937: Enhance certificate handling.
+ CVE-2025-53066, 8356294: Enhance Path Factories.
+ CVE-2025-61748, 8359454: Enhance String handling.
* d/tests/*: sync latest changes from openjdk-25.
* d/patches: update latest patches from openjdk-25.
* Update source URL in copyright-generator and d/copyright.
* d/control: enable building with gcc-15, misc changes.
* d/{control.*, watch.in}: enable regeneration for older
lts releases.
Date: 2026-01-30 10:42:10.315877+00:00
Changed-By: Vladimir Petko <vladimir.petko at canonical.com>
Signed-By: John Breton <john.breton at canonical.com>
https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.2+10-0ubuntu1~25.10
-------------- next part --------------
Sorry, changesfile not available.
More information about the Questing-changes
mailing list