{"update": {"autokarma": true, "autotime": true, "stable_karma": 3, "stable_days": 7, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "OpenJDK 11.0.13 Security Update for Fedora 34", "notes": "# New in release OpenJDK 11.0.13 (2021-10-19):\n\nLive versions of these release notes can be found at:\n\n* https://bitly.com/openjdk11013\n* https://builds.shipilev.net/backports-monitor/release-notes-11.0.13.txt\n\n## Security fixes\n  - JDK-8163326, CVE-2021-35550: Update the default enabled cipher suites preference\n  - JDK-8254967, CVE-2021-35565: com.sun.net.HttpsServer spins on TLS session close\n  - JDK-8263314: Enhance XML Dsig modes\n  - JDK-8265167, CVE-2021-35556: Richer Text Editors\n  - JDK-8265574: Improve handling of sheets\n  - JDK-8265580, CVE-2021-35559: Enhanced style for RTF kit\n  - JDK-8265776: Improve Stream handling for SSL\n  - JDK-8266097, CVE-2021-35561: Better hashing support\n  - JDK-8266103: Better specified spec values\n  - JDK-8266109: More Resilient Classloading\n  - JDK-8266115: More Manifest Jar Loading\n  - JDK-8266137, CVE-2021-35564: Improve Keystore integrity\n  - JDK-8266689, CVE-2021-35567: More Constrained Delegation\n  - JDK-8267086: ArrayIndexOutOfBoundsException in java.security.KeyFactory.generatePublic\n  - JDK-8267712: Better LDAP reference processing\n  - JDK-8267729, CVE-2021-35578: Improve TLS client handshaking\n  - JDK-8267735, CVE-2021-35586: Better BMP support\n  - JDK-8268193: Improve requests of certificates\n  - JDK-8268199: Correct certificate requests\n  - JDK-8268205: Enhance DTLS client handshake\n  - JDK-8268506: More Manifest Digests\n  - JDK-8269618, CVE-2021-35603: Better session identification\n  - JDK-8269624: Enhance method selection support\n  - JDK-8270398: Enhance canonicalization\n  - JDK-8270404: Better canonicalization\n\n## Major Changes\n* [JDK-8271434](https://bugs.openjdk.java.net/browse/JDK-8271434): Removed IdenTrust Root Certificate\n* [JDK-8261922](https://bugs.openjdk.java.net/browse/JDK-8261922): Updated keytool to Create AKID From SKID of Issuing Certificate as Specified by RFC 5280\n* [JDK-8210799](https://bugs.openjdk.java.net/browse/JDK-8210799): ChaCha20 and Poly1305 TLS Cipher Suites\n* [JDK-8219551](https://bugs.openjdk.java.net/browse/JDK-8219551): Updated the Default Enabled Cipher Suites Preference\n\n## FIPS Mode Changes\n- The `SunPKCS11` provider in FIPS mode will now eagerly login to the NSS software token on initialisation\n- `keytool` in FIPS mode now supports importing plain private keys by the provider adding them to the NSS database. This can be disabled using `-Dcom.redhat.fips.plainKeySupport=false`.\n", "type": "security", "status": "stable", "request": null, "severity": "high", "suggest": "reboot", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2021-10-20 16:37:41", "date_modified": "2021-10-21 15:45:23", "date_approved": null, "date_testing": "2021-10-20 20:03:06", "date_stable": "2021-10-25 15:13:36", "alias": "FEDORA-2021-35145352b0", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2021-10-25 15:13:36", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2021-35145352b0", "title": "java-11-openjdk-11.0.13.0.8-1.fc34", "version_hash": "1cae3f9f8ce9c19bc0c693cb0e0a4ecabccf49ae", "release": {"name": "F34", "long_name": "Fedora 34", "version": "34", "id_prefix": "FEDORA", "branch": "f34", "dist_tag": "f34", "stable_tag": "f34-updates", "testing_tag": "f34-updates-testing", "candidate_tag": "f34-updates-candidate", "pending_signing_tag": "f34-signing-pending", "pending_testing_tag": "f34-updates-testing-pending", "pending_stable_tag": "f34-updates-pending", "override_tag": "f34-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "ahughes", "email": "ahughes@redhat.com", "id": 2491, "avatar": "https://seccdn.libravatar.org/avatar/93e04b17f3c22fa1087a4d33836802c563be182ed92a644026c6b514a8464107?s=24&d=retro", "openid": "ahughes.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by ahughes. ", "timestamp": "2021-10-20 16:37:42", "update_id": 349373, "user_id": 91, "id": 2254658, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2021-10-20 16:37:42", "update_id": 349373, "user_id": 91, "id": 2254659, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2021-10-20 16:37:42", "update_id": 349373, "user_id": 91, "id": 2254660, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2021-10-20 17:14:32", "update_id": 349373, "user_id": 91, "id": 2254676, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2021-10-20 20:03:55", "update_id": 349373, "user_id": 91, "id": 2254900, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "ahughes edited this update.", "timestamp": "2021-10-21 15:45:23", "update_id": 349373, "user_id": 91, "id": 2255786, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Works.", "timestamp": "2021-10-21 21:53:57", "update_id": 349373, "user_id": 198, "id": 2256349, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Works for me.", "timestamp": "2021-10-22 10:26:44", "update_id": 349373, "user_id": 5791, "id": 2256646, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "pampelmuse", "email": "pampelmuse@gmx.at", "id": 5791, "avatar": "https://seccdn.libravatar.org/avatar/bb6c6342bfedc934915501150e118faf015cde0f79677ee978989c5234cd8b1b?s=24&d=retro", "openid": "pampelmuse.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update can be pushed to stable now if the maintainer wishes", "timestamp": "2021-10-22 10:27:56", "update_id": 349373, "user_id": 91, "id": 2256647, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Works as expected", "timestamp": "2021-10-25 08:52:50", "update_id": 349373, "user_id": 5434, "id": 2258729, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "lkiesow", "email": "lkiesow@uos.de", "id": 5434, "avatar": "https://seccdn.libravatar.org/avatar/6f26da7dd98b9dbab11d1073d67690d5b52269f0b07e9db33e1ecbbda729a5ad?s=24&d=retro", "openid": "lkiesow.id.fedoraproject.org", "groups": [{"name": "packager"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2021-10-25 08:52:51", "update_id": 349373, "user_id": 91, "id": 2258730, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2021-10-25 15:14:07", "update_id": 349373, "user_id": 91, "id": 2259118, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "java-11-openjdk-11.0.13.0.8-1.fc34", "signed": true, "release_id": 47, "type": "rpm", "epoch": 1}], "bugs": [], "updateid": "FEDORA-2021-35145352b0", "karma": 3, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}