openjdk21: update to 21.0.11 GA #2

Merged

sbelikov merged 2 commits from update-openjdk21-21.0.11 into niceos-5.2

2026-05-02 19:32:09 +03:00

sbelikov commented

2026-05-02 19:01:29 +03:00

Owner

Update OpenJDK 21 from 21.0.8 to 21.0.11 in niceos-5.2.

Upstream evidence reviewed:

OpenJDK jdk21u tag: jdk-21.0.11-ga
Oracle 21.0.11 release notes
OpenJDK compare jdk-21.0.10-ga...jdk-21.0.11-ga

Risk assessment:

Risk level: medium
Stability decision: manual_review
This is a patch-line update, but it is not a trivial one: the compare page shows a large maintenance drop, and the release notes include TLS, crypto policy, tzdata, G1, and tool-output behavior changes.

Requested maintainer checks before merge:

bump Version/Source0 to 21.0.11
refresh source lock/checksums
verify downstream patches still apply cleanly
build in clean mock/chroot
run JDK smoke tests and package %check
specifically test TLS handshake, keytool, jarsigner, timezone behavior, and crypto policy interaction

Security note:

Oracle documents security fixes in the release, but the public notes reviewed here do not enumerate CVEs explicitly.

References:

Update OpenJDK 21 from 21.0.8 to 21.0.11 in niceos-5.2. Upstream evidence reviewed: - OpenJDK jdk21u tag: jdk-21.0.11-ga - Oracle 21.0.11 release notes - OpenJDK compare jdk-21.0.10-ga...jdk-21.0.11-ga Risk assessment: - Risk level: medium - Stability decision: manual_review - This is a patch-line update, but it is not a trivial one: the compare page shows a large maintenance drop, and the release notes include TLS, crypto policy, tzdata, G1, and tool-output behavior changes. Requested maintainer checks before merge: - bump Version/Source0 to 21.0.11 - refresh source lock/checksums - verify downstream patches still apply cleanly - build in clean mock/chroot - run JDK smoke tests and package %check - specifically test TLS handshake, keytool, jarsigner, timezone behavior, and crypto policy interaction Security note: - Oracle documents security fixes in the release, but the public notes reviewed here do not enumerate CVEs explicitly. References: - https://github.com/openjdk/jdk21u/releases/tag/jdk-21.0.11-ga - https://github.com/openjdk/jdk21u/compare/jdk-21.0.10-ga...jdk-21.0.11-ga - https://www.oracle.com/java/technologies/javase/21-0-11-relnotes.html

sbelikov added 1 commit

2026-05-02 19:01:29 +03:00