openjdk-lts (11.0.32+9-1ubuntu1~22.04) jammy-security; urgency=medium

  * Upload to Ubuntu 22.04.
  * d/control: regenerate for jammy

 -- Pushkar Kulkarni <pushkar.kulkarni@canonical.com>  Thu, 23 Jul 2026 16:48:59 +0530

openjdk-lts (11.0.32+9-1ubuntu1) stonking; urgency=medium

  * OpenJDK 11.0.32 release, build 9.
    - CVEs:
      + CVE-2026-46968
      + CVE-2026-46917
      + CVE-2026-47010
      + CVE-2026-47021
      + CVE-2026-47027
      + CVE-2026-60147
      + CVE-2026-47059
      + CVE-2026-47063
      + CVE-2026-47057
      + CVE-2026-47058
      + CVE-2026-41254
    - Release notes: https://bit.ly/openjdk11032.
  * d/p/jdk-8387580.diff: Apply upstream patch to resolve
    S390x ftbfs (JDK-8387580).
  * d/p/jdk-8384815.diff: Backport upstream patch to resolve a test
    failure due to the expired certificate (JDK-8384815).
  * d/t/problems.csv: Drop obsolete versions, add openjdk-28,
    add new exclusions.
  * d/rules: Do not perform copyright validation for old releases.
  * d/rules: Check DEB_BUILD_PROFILES in addition to DEB_BUILD_OPTIONS
    to set up with_check variable. Do not check control files if
    with_check is disabled.
  * d/JB-jre-{headless,zero}.overrides.in: Drop exit-in-shared-library
    override.
  * d/p/libpcsclite-dlopen.diff: Refresh patch.
  * Regenerate files.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Wed, 22 Jul 2026 13:26:24 +1200

openjdk-lts (11.0.31+11-1ubuntu2) stonking; urgency=medium

  * d/control: Regenerate for stonking.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Mon, 04 May 2026 08:12:34 +1200

openjdk-lts (11.0.31+11-1ubuntu1) stonking; urgency=medium

  * OpenJDK 11.0.31 release, build 11.
    - CVEs:
      + CVE-2026-22016: 8370529: Enhance Path Factories Redux
      + CVE-2026-34282: 8374557: Enhance TLS connection handling
      + CVE-2026-22021: 8371830: Enhance certificate chain validation
      + CVE-2026-22013: 8370615: Improve Kerberos credentialing
      + CVE-2026-23865: 8379158: Update FreeType to 2.14.2
      + CVE-2026-22018: 8370986: Enhance Zip file reading
      + CVE-2026-22007: 8369575: Enhance crypto algorithm support
      + CVE-2026-34268: 8371935: Enhance key generation
  * Ensure that all generated files are up to date:
    - The copyright generator now checks if the current directory contains
      an unpacked OpenJDK tree by verifying the presence of the
      ASSEMBLY_EXCEPTION file.
    - The copyright generator now drops common license text in-memory,
      without running a shell script that modifies the source tree.
    - d/rules: Add targets to generate all files and check that they match
      the ones provided in the source package.
    - d/rules: Add nogen DEB_BUILD_OPTION to disable file regeneration.
  * d/rules: Use '-' instead of '~' in opt version string, swap package
    version and distribution.
  * Add common GPL and Apache license headers to copyright generator.
  * d/t/problems.csv: Synchronize problemlist.
  * d/dbg.py: Fix syntax errors in gdb unwinder, do not install unwinder
    for zero, install hotspot unwinder in the correct directory.
    Disable debug traces. Load unwinder in the disabled state.
    Return iterator rather than list from OpenJDKFrameFilter.flatten().
    Remove unused code from NativeMethodInfo.
  * d/p/jdk-8224796.diff: Drop patch applied upstream.
  * d/copyright: Regenerate.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Sun, 26 Apr 2026 18:31:19 +1200

openjdk-lts (11.0.30+7-1ubuntu1) resolute; urgency=medium

  * OpenJDK 11.0.30 release, build 7.
    - CVEs:
      + CVE-2026-21945: 8368032: Enhance Certificate Checking.
      + CVE-2026-21932: 8359501: Enhance Handling of URIs.
      + CVE-2026-21933: 8362632: Improve HttpServer Request handling.
      + CVE-2026-21925: 8341496: Improve JMX connections.

  [ Matthias Klose ]
  * d/rules: Adjust any_archs.

  [ Pushkar Kulkarni ]
  * d/t/jtreg-autopkgtest.*: Use locale name "C.UTF-8" on bionic
    and focal.

  [ Vladimir Petko ]
  * d/p/jdk-8354941-proposed.patch: Drop patch applied upstream.
  * Update override comments for unstripped-binary-or-object. We need to
    keep symbols for Native Memory Tracking to work.
  * d/{JB-doc.overrides.in, JB-jre-headless.overrides.in}: Add override
    for old FSF copyright address.
  * d/s/lintian-overrides: Override false positive debian-rules-calls-
    nproc. The utility is used to log the number of processors.
  * d/p/jdk-8224796.diff: Apply upstream patch to fix i386 ftbfs
    introduced by JDK-8224087 backport.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Thu, 22 Jan 2026 13:00:42 +1300

openjdk-lts (11.0.29+7-1ubuntu1) resolute; urgency=medium

  * OpenJDK 11.0.29 release, build 7. Release notes:
    https://mail.openjdk.org/pipermail/jdk-updates-dev/2025-October/049111.html
    - CVEs:
      + CVE-2025-53057, 8360937: Enhance certificate handling.
      + CVE-2025-53066, 8356294: Enhance Path Factories.

  [ Matthias Klose ]
  * d/{control*, rules}: build using gcc-15.

  [ Vladimir Petko ]
  * d/t/problems.csv: Synchronize problem list.
  * d/p/jdk-8354941-proposed.patch: Apply proposed patch to resolve ftbfs
    with glibc 2.42.
  * d/t/jtreg-autopkgtest.*: Force utf-8 encoding.
  * d/rules: force C99 standard to build with gcc-15.

 -- Pushkar Kulkarni <pushkar.kulkarni@canonical.com>  Thu, 23 Oct 2025 12:01:16 +0530

openjdk-lts (11.0.28+6-1ubuntu1) questing; urgency=medium

  * OpenJDK 11.0.28 release, build 6. See
    https://openjdk.org/groups/vulnerability/advisories/2025-07-15
    - CVEs:
      + CVE-2025-50059, 8350991: Improve HTTP client header handling
      + CVE-2025-30749, 8348989: Better Glyph drawing
      + CVE-2025-50106, 8360147: Better Glyph drawing redux
      + CVE-2025-30761, 8351422: Improve scripting supports
      + CVE-2025-30754, 8349594: Enhance TLS protocol support
    - Security fixes:
      + 8349111: Enhance Swing supports
      + 8345625: Better HTTP connections
    - Release notes:
      https://mail.openjdk.org/pipermail/jdk-updates-dev/2025-July/045612.html
  * d/watch: regenerate.
  * d/copyright: regenerate.
  * d/copyright-generator/copyright-gen.py: bump copyright year.
  * d/rules: use /usr/share/jtreg jtreg home for bionic.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Thu, 17 Jul 2025 08:41:38 +1200

openjdk-lts (11.0.28~5ea-1ubuntu2) questing; urgency=medium

  * d/rules: use link file to provide symlink to ja man pages (LP:
    #2116572).
  * d/copyright: regenerate.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Tue, 15 Jul 2025 10:30:48 +1200

openjdk-lts (11.0.28~5ea-1ubuntu1) questing; urgency=medium

  * OpenJDK 11.0.28+5 build (early access).
  * d/p/jdk-8359735.patch: fix process tests failing in Ubuntu 25.10
    (questing).

 -- Vladimir Petko <vladimir.petko@canonical.com>  Sat, 05 Jul 2025 18:18:05 +1200

openjdk-lts (11.0.28~3ea-1ubuntu1) questing; urgency=medium

  * OpenJDK 11.0.28+3 build (early access) (LP: #2114688).
  * d/t/problems.csv: Update based on recent JTREG runs.
  * d/rules: Disable dtrace on jammy armhf (was not enabled before and cannot
    be built due to a GCC ICE (see LP #2091225).

  [ Matthias Klose ]
  * Honour DEB_BUILD_OPTIONS=parallel=N while running jtreg tests (Helmut
    Grohne). Addresses: #1095920.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Mon, 16 Jun 2025 09:02:57 +1200

# For older changelog entries, run 'apt-get changelog openjdk-11-doc'
