On Sun, Jan 15, 2023 at 12:28:06PM -0800, tony mancill wrote: > On Wed, Dec 07, 2022 at 04:03:17PM +0100, Carsten Pfeiffer wrote: > > Package: openjdk-11-jdk > > Version: 11.0.16+8-1~deb11u1 > > Severity: normal > > > > Dear Maintainer, > > > > openjdk 11.0.16 in Bullseye contains a severe problem that is fixed in > > 11.0.16.1. See > > https://bugs.openjdk.org/browse/JDK-8292396 > > https://bugs.openjdk.org/browse/JDK-8292260 > > https://www.oracle.com/java/technologies/javase/11-0-16-1-relnotes.html > > > > It would be nice, if an updated version could be provided, either 11.0.16.1 > > or > > 11.0.17, that is already available in Bookworm. > > I am willing to perform the rebuild and upload of 11.0.17 against > bullseye, either a team upload or as an NMU. Would that be acceptable > to the OpenJDK Team and the Security Team?
The next Java security release happens tomorrow, so 11.0.18 will land in bullseye soonish: https://www.oracle.com/security-alerts/cpujan2023.html Cheers, Moritz