{"update": {"autokarma": true, "autotime": true, "stable_karma": 3, "stable_days": 7, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "OpenJDK 11.0.18 for Fedora 37", "notes": "# New in release [OpenJDK 11.0.18](https://bit.ly/openjdk11018) (2023-01-17)\n\n## CVEs Fixed\n\n  - CVE-2023-21835\n  - CVE-2023-21843\n\n## Security Fixes\n\n  - JDK-8286070: Improve UTF8 representation\n  - JDK-8286496: Improve Thread labels\n  - JDK-8287411: Enhance DTLS performance\n  - JDK-8288516: Enhance font creation\n  - JDK-8289350: Better media supports\n  - JDK-8293554: Enhanced DH Key Exchanges\n  - JDK-8293598: Enhance InetAddress address handling\n  - JDK-8293717: Objective view of ObjectView\n  - JDK-8293734: Improve BMP image handling\n  - JDK-8293742: Better Banking of Sounds\n  - JDK-8295687: Better BMP bounds\n\n## Major Changes\n\n### JDK-8295687: Better BMP bounds\n\nLoading a linked ICC profile within a BMP image is now disabled by default. To re-enable it, set the new system property\n`sun.imageio.bmp.enabledLinkedProfiles` to `true`.  This new property replaces the old property, `sun.imageio.plugins.bmp.disableLinkedProfiles`.\n\n### JDK-8293742: Better Banking of Sounds\n\nPreviously, the SoundbankReader implementation, `com.sun.media.sound.JARSoundbankReader`, would download a JAR soundbank from a URL.  This behaviour is now disabled by default. To re-enable it, set the new system property `jdk.sound.jarsoundbank` to `true`.\n\n### [JDK-8282730](https://bugs.openjdk.org/browse/JDK-8282730): New Implementation Note for LoginModule on Removing Null from a Principals or Credentials Set\n\nBack in OpenJDK 9, [JDK-8015081](https://bugs.openjdk.org/browse/JDK-8015081) changed the `Set` implementation used to hold principals and credentials so that it rejected `null` values. Attempts to call `add(null)`, `contains(null)` or `remove(null)` were changed to throw a `NullPointerException`.\n\nHowever, the `logout()` methods in the `LoginModule` implementations within the JDK were not updated to check for `null` values, which may occur in the event of a failed login. As a result, a `logout()` call may throw a `NullPointerException`.\n\nThe `LoginModule` implementations have now been updated with such checks and an implementation note added to the specification to suggest that the same change is made in third party modules.  Developers of third party modules are advised to verify that their `logout()` method does not throw a `NullPointerException`.\n\n### JDK-8287411: Enhance DTLS performance\n\nThe JDK now exchanges DTLS cookies for all handshakes, new and resumed. The previous behaviour can be re-enabled by setting the new system property `jdk.tls.enableDtlsResumeCookie` to `false`.\n\n", "type": "security", "status": "stable", "request": null, "severity": "medium", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": "", "close_bugs": true, "date_submitted": "2023-01-27 00:46:17", "date_modified": "2023-01-27 00:58:59", "date_approved": "2023-02-04 01:42:09", "date_testing": "2023-01-28 01:40:59", "date_stable": "2023-02-05 01:46:08", "alias": "FEDORA-2023-d6bd6ec00b", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2023-02-05 01:46:08", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2023-d6bd6ec00b", "title": "java-11-openjdk-11.0.18.0.10-1.fc37", "version_hash": "856deefb1ad7f75d15d637090e3655dc89e9eac5", "release": {"name": "F37", "long_name": "Fedora 37", "version": "37", "id_prefix": "FEDORA", "branch": "f37", "dist_tag": "f37", "stable_tag": "f37-updates", "testing_tag": "f37-updates-testing", "candidate_tag": "f37-updates-candidate", "pending_signing_tag": "f37-signing-pending", "pending_testing_tag": "f37-updates-testing-pending", "pending_stable_tag": "f37-updates-pending", "override_tag": "f37-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": "2023-12-05", "setting_status": null}, "user": {"name": "ahughes", "email": "ahughes@redhat.com", "id": 2491, "avatar": "https://seccdn.libravatar.org/avatar/93e04b17f3c22fa1087a4d33836802c563be182ed92a644026c6b514a8464107?s=24&d=retro", "openid": "ahughes.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by ahughes. ", "timestamp": "2023-01-27 00:46:18", "update_id": 478409, "user_id": 91, "id": 2868895, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2023-01-27 00:46:18", "update_id": 478409, "user_id": 91, "id": 2868898, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "ahughes edited this update.", "timestamp": "2023-01-27 00:58:59", "update_id": 478409, "user_id": 91, "id": 2868975, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2023-01-28 01:41:48", "update_id": 478409, "user_id": 91, "id": 2880023, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "NetBeans 16 can run fine in the new JDK11 and JDK17.", "timestamp": "2023-01-28 23:57:30", "update_id": 478409, "user_id": 4756, "id": 2880685, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Works great!  LGTM!  =)", "timestamp": "2023-01-31 20:42:04", "update_id": 478409, "user_id": 206, "id": 2884206, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "besser82", "email": "besser82.fpo@gmail.com", "id": 206, "avatar": "https://seccdn.libravatar.org/avatar/28bacfa3be75032390ac2c7a34599aeb825c3b62b2c55ef64821d2fc023b56cb?s=24&d=retro", "openid": "besser82.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "designteam"}, {"name": "shogun-ca"}, {"name": "alt-gtk-de-sig"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update can be pushed to stable now if the maintainer wishes", "timestamp": "2023-01-31 20:42:10", "update_id": 478409, "user_id": 91, "id": 2884209, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2023-02-04 01:42:09", "update_id": 478409, "user_id": 91, "id": 2890350, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2023-02-05 01:46:42", "update_id": 478409, "user_id": 91, "id": 2891172, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "java-11-openjdk-11.0.18.0.10-1.fc37", "signed": true, "release_id": 62, "type": "rpm", "epoch": 1}], "bugs": [], "updateid": "FEDORA-2023-d6bd6ec00b", "karma": 2, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}