{"update": {"autokarma": true, "autotime": true, "stable_karma": 3, "stable_days": 7, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "OpenJDK 11.0.14 Security Update for Fedora 34", "notes": "# New in release OpenJDK 11.0.14 (2022-01-18):\n\nLive versions of these release notes can be found at:\n\n* https://bitly.com/openjdk11014\n* https://builds.shipilev.net/backports-monitor/release-notes-11.0.14.txt\n\n## Security fixes\n  - JDK-8217375: jarsigner breaks old signature with long lines in manifest\n  - JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if zip has dir named \".\" inside\n  - JDK-8264934, CVE-2022-21248: Enhance cross VM serialization\n  - JDK-8268488: More valuable DerValues\n  - JDK-8268494: Better inlining of inlined interfaces\n  - JDK-8268512: More content for ContentInfo\n  - JDK-8268795: Enhance digests of Jar files\n  - JDK-8268801: Improve PKCS attribute handling\n  - JDK-8268813, CVE-2022-21283: Better String matching\n  - JDK-8269151: Better construction of EncryptedPrivateKeyInfo\n  - JDK-8269944: Better HTTP transport redux\n  - JDK-8270386, CVE-2022-21291: Better verification of scan methods\n  - JDK-8270392, CVE-2022-21293: Improve String constructions\n  - JDK-8270416, CVE-2022-21294: Enhance construction of Identity maps\n  - JDK-8270492, CVE-2022-21282: Better resolution of URIs\n  - JDK-8270498, CVE-2022-21296: Improve SAX Parser configuration management\n  - JDK-8270646, CVE-2022-21299: Improved scanning of XML entities\n  - JDK-8270952, CVE-2022-21277: Improve TIFF file handling\n  - JDK-8271962: Better TrueType font loading\n  - JDK-8271968: Better canonical naming\n  - JDK-8271987: Manifest improved manifest entries\n  - JDK-8272014, CVE-2022-21305: Better array indexing\n  - JDK-8272026, CVE-2022-21340: Verify Jar Verification\n  - JDK-8272236, CVE-2022-21341: Improve serial forms for transport\n  - JDK-8272272: Enhance jcmd communication\n  - JDK-8272462: Enhance image handling\n  - JDK-8273290: Enhance sound handling\n  - JDK-8273756, CVE-2022-21360: Enhance BMP image support\n  - JDK-8273838, CVE-2022-21365: Enhanced BMP processing\n  - JDK-8274096, CVE-2022-21366: Improve decoding of image files\n  - JDK-8279541: Improve HarfBuzz\n\n## Major Changes\n - [JDK-8250554](https://bugs.openjdk.java.net/browse/JDK-8250554) : New Option Added to jcmd for Writing a gzipped Heap Dump\n - [JDK-8260310](https://bugs.openjdk.java.net/browse/JDK-8260310): Configurable Extensions With System Properties\n - [JDK-8272907](https://bugs.openjdk.java.net/browse/JDK-8272907): New SunPKCS11 Configuration Properties\n - [JDK-8271517](https://bugs.openjdk.java.net/browse/JDK-8271517): Zip File System Provider Throws ZipException when entry name element contains \".\" or \".\"\n - [JDK-8272535](https://bugs.openjdk.java.net/browse/JDK-8272535): Removed Google's GlobalSign Root Certificate\n - [JDK-8274857](https://bugs.openjdk.java.net/browse/JDK-8274857):  Update Timezone Data to 2021c\n - [JDK-8253866](https://bugs.openjdk.java.net/browse/JDK-8253866): `blacklisted.certs` renamed to `blocked.certs`\n## FIPS Mode Changes\n - Fix FIPS issues in native code and with initialisation of java.security.Security\n", "type": "security", "status": "obsolete", "request": null, "severity": "medium", "suggest": "unspecified", "locked": false, "pushed": false, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2022-01-25 02:31:24", "date_modified": "2022-01-25 02:34:44", "date_approved": null, "date_testing": "2022-02-12 02:05:33", "date_stable": null, "alias": "FEDORA-2022-6f70fc511d", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2022-02-12 02:05:33", "meets_testing_requirements": true, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-2022-6f70fc511d", "title": "java-11-openjdk-11.0.14.0.9-2.fc34", "version_hash": "1d3f8f78cd0777236f25edca13aea943a2dac4e8", "release": {"name": "F34", "long_name": "Fedora 34", "version": "34", "id_prefix": "FEDORA", "branch": "f34", "dist_tag": "f34", "stable_tag": "f34-updates", "testing_tag": "f34-updates-testing", "candidate_tag": "f34-updates-candidate", "pending_signing_tag": "f34-signing-pending", "pending_testing_tag": "f34-updates-testing-pending", "pending_stable_tag": "f34-updates-pending", "override_tag": "f34-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "ahughes", "email": "ahughes@redhat.com", "id": 2491, "avatar": "https://seccdn.libravatar.org/avatar/93e04b17f3c22fa1087a4d33836802c563be182ed92a644026c6b514a8464107?s=24&d=retro", "openid": "ahughes.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by ahughes. ", "timestamp": "2022-01-25 02:31:24", "update_id": 369684, "user_id": 91, "id": 2358461, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2022-01-25 02:31:25", "update_id": 369684, "user_id": 91, "id": 2358462, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "ahughes edited this update.", "timestamp": "2022-01-25 02:34:44", "update_id": 369684, "user_id": 91, "id": 2358464, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Works for me!", "timestamp": "2022-01-27 17:54:05", "update_id": 369684, "user_id": 5054, "id": 2382550, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "browseria", "email": "browseria@hotmail.com", "id": 5054, "avatar": "https://seccdn.libravatar.org/avatar/71a28106bdb80b1bf97b222e5990f71bafcbd87df1b45c0030c6b61561d78801?s=24&d=retro", "openid": "browseria.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}]}}, {"karma": 0, "karma_critpath": 0, "text": "FEDORA-2022-6f70fc511d ejected from the push because \"Cannot find relevant tag for java-11-openjdk-11.0.14.0.9-2.fc34.  None of ['f34-updates-testing', 'f34-updates-testing-pending'] are in ['epel9-next-testing-candidate', 'epel7-testing-candidate', 'dist-5E-epel-testing-candidate', 'f27-modular-updates-candidate', 'f34-container-updates-candidate', 'eln-updates-candidate', 'f30-modular-updates-candidate', 'f28-modular-updates-candidate', 'f28-container-updates-candidate', 'f30-container-updates-candidate', 'epel8-testing-candidate', 'f30-flatpak-updates-candidate', 'f35-container-updates-candidate', 'f32-modular-updates-candidate', 'f29-modular-updates-candidate', 'f29-container-updates-candidate', 'f29-flatpak-updates-candidate', 'f22-updates-candidate', 'f21-updates-candidate', 'f25-updates-candidate', 'f24-updates-candidate', 'f23-updates-candidate', 'f26-updates-candidate', 'f31-modular-updates-candidate', 'dist-6E-epel-testing-candidate', 'f32-flatpak-updates-candidate', 'f35-flatpak-updates-candidate', 'f27-updates-candidate', 'f28-updates-candidate', 'f30-updates-candidate', 'f29-updates-candidate', 'el8-modular-updates-candidate', 'f32-updates-candidate', 'epel9-testing-candidate', 'f31-updates-candidate', 'f31-container-updates-candidate', 'f31-flatpak-updates-candidate', 'f34-updates-candidate', 'f34-modular-updates-candidate', 'f34-flatpak-updates-candidate', 'f36-container-updates-candidate', 'f32-container-updates-candidate', 'epel8-next-testing-candidate', 'f35-updates-candidate', 'f35-modular-updates-candidate', 'f33-updates-candidate', 'f36-updates-candidate', 'f33-modular-updates-candidate', 'f33-container-updates-candidate', 'f33-flatpak-updates-candidate'].\"", "timestamp": "2022-01-27 21:33:49", "update_id": 369684, "user_id": 91, "id": 2383024, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by kevin. ", "timestamp": "2022-02-11 19:12:01", "update_id": 369684, "user_id": 91, "id": 2404801, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2022-02-12 02:06:09", "update_id": 369684, "user_id": 91, "id": 2405328, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been obsoleted by [java-11-openjdk-11.0.14.1.1-1.fc34](https://bodhi.fedoraproject.org/updates/FEDORA-2022-d877b248a5).", "timestamp": "2022-02-15 10:30:14", "update_id": 369684, "user_id": 91, "id": 2409188, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "java-11-openjdk-11.0.14.0.9-2.fc34", "signed": true, "release_id": 47, "type": "rpm", "epoch": 1}], "bugs": [], "updateid": "FEDORA-2022-6f70fc511d", "karma": 1, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}