SRU: backport the first OpenJDK 17 release to 21.04, 20.04 LTS and 18.04 LTS

Bug #1943701 reported by Matthias Klose
22
This bug affects 4 people
Affects Status Importance Assigned to Milestone
openjdk-17 (Ubuntu)
Undecided
Unassigned
Bionic
Undecided
Unassigned
Focal
Undecided
Unassigned
Hirsute
Undecided
Unassigned

Bug Description

Backport the first OpenJDK 17 release to 21.04 and 20.04 LTS.

OpenJDK 17 is a LTS release again, and will see more use than the interim versions 12 to 16.

For 21.04, it also includes the security updates from July 2021.

Acceptance criteria: The package builds. We cannot run the tests yet, because the packages to build the test kit are not yet packaged.

Risk: No risk for 20.04 LTS, it's a new package there, and it lets us remove the interim openjdk versions in focal. It's an update over the existing version in 21.04.

The packages are pre-built with only the security pocket enabled, so they can be used in the security pocket for further updates.

CVE References

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in openjdk-17 (Ubuntu Focal):
status: New → Confirmed
Changed in openjdk-17 (Ubuntu Hirsute):
status: New → Confirmed
Changed in openjdk-17 (Ubuntu):
status: New → Confirmed
Matthias Klose (doko)
summary: - SRU: backport the first OpenJDK 17 release to 21.04 and 20.04 LTS
+ SRU: backport the first OpenJDK 17 release to 21.04, 20.04 LTS and 18.04
+ LTS
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in openjdk-17 (Ubuntu Bionic):
status: New → Confirmed
Revision history for this message
Łukasz Zemczak (sil2100) wrote : Please test proposed package

Hello Matthias, or anyone else affected,

Accepted openjdk-17 into hirsute-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/openjdk-17/17+35-1~21.04 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-hirsute to verification-done-hirsute. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-hirsute. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

Changed in openjdk-17 (Ubuntu Hirsute):
status: Confirmed → Fix Committed
tags: added: verification-needed verification-needed-hirsute
Changed in openjdk-17 (Ubuntu Focal):
status: Confirmed → Fix Committed
tags: added: verification-needed-focal
Revision history for this message
Łukasz Zemczak (sil2100) wrote :

Hello Matthias, or anyone else affected,

Accepted openjdk-17 into focal-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/openjdk-17/17+35-1~20.04 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-focal to verification-done-focal. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-focal. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

Changed in openjdk-17 (Ubuntu Bionic):
status: Confirmed → Fix Committed
tags: added: verification-needed-bionic
Revision history for this message
Łukasz Zemczak (sil2100) wrote :

Hello Matthias, or anyone else affected,

Accepted openjdk-17 into bionic-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/openjdk-17/17+35-1~18.04 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-bionic to verification-done-bionic. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-bionic. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

Revision history for this message
Matthias Klose (doko) wrote :

these were all binary upload, therefore checked the installability of the package, and did a simple build test.

tags: added: verification-done verification-done-bionic verification-done-focal verification-done-hirsute
removed: verification-needed verification-needed-bionic verification-needed-focal verification-needed-hirsute
Revision history for this message
Ubuntu SRU Bot (ubuntu-sru-bot) wrote : Autopkgtest regression report (openjdk-17/17+35-1~20.04)

All autopkgtests for the newly accepted openjdk-17 (17+35-1~20.04) for focal have finished running.
The following regressions have been reported in tests triggered by the package:

munin/2.0.56-1ubuntu1 (arm64)

Please visit the excuses page listed below and investigate the failures, proceeding afterwards as per the StableReleaseUpdates policy regarding autopkgtest regressions [1].

https://people.canonical.com/~ubuntu-archive/proposed-migration/focal/update_excuses.html#openjdk-17

[1] https://wiki.ubuntu.com/StableReleaseUpdates#Autopkgtest_Regressions

Thank you!

Revision history for this message
Chris Halse Rogers (raof) wrote : Update Released

The verification of the Stable Release Update for openjdk-17 has completed successfully and the package is now being released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package openjdk-17 - 17+35-1~18.04

---------------
openjdk-17 (17+35-1~18.04) bionic-security; urgency=medium

  * SRU: LP: #1943701. Backport the final OpenJDK 17 release.

 -- Matthias Klose <email address hidden> Wed, 15 Sep 2021 11:49:22 +0200

Changed in openjdk-17 (Ubuntu Bionic):
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package openjdk-17 - 17+35-1~20.04

---------------
openjdk-17 (17+35-1~20.04) focal-security; urgency=medium

  * SRU: LP: #1943701. Backport the final OpenJDK 17 release.

 -- Matthias Klose <email address hidden> Wed, 15 Sep 2021 11:49:22 +0200

Changed in openjdk-17 (Ubuntu Focal):
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package openjdk-17 - 17+35-1~21.04

---------------
openjdk-17 (17+35-1~21.04) hirsute-security; urgency=medium

  * SRU: LP: #1943701. Backport the final OpenJDK 17 release.

openjdk-17 (17+35-1) unstable; urgency=medium

  * Fix JDK-8272472, ftbfs with glibc 2.24.

openjdk-17 (17~35ea-1) unstable; urgency=medium

  * OpenJDK 17 snapshot, build 35 (first release candidate).

openjdk-17 (17~33ea-1) unstable; urgency=high

  * OpenJDK 17 snapshot, build 33.

openjdk-17 (17~32ea-1) unstable; urgency=high

  * OpenJDK 17 snapshot, build 32.
  * Security fixes:
    - JDK-8256157: Improve bytecode assembly.
    - JDK-8256491: Better HTTP transport.
    - JDK-8258432, CVE-2021-2341: Improve file transfers.
    - JDK-8260453: Improve Font Bounding.
    - JDK-8260960: Signs of jarsigner signing.
    - JDK-8260967, CVE-2021-2369: Better jar file validation.
    - JDK-8262380: Enhance XML processing passes.
    - JDK-8262403: Enhanced data transfer.
    - JDK-8262410: Enhanced rules for zones.
    - JDK-8262477: Enhance String Conclusions.
    - JDK-8262967: Improve Zip file support.
    - JDK-8264066, CVE-2021-2388: Enhance compiler validation.
    - JDK-8264079: Improve abstractions.
    - JDK-8264460: Improve NTLM support.

openjdk-17 (17~31ea-1) unstable; urgency=medium

  * OpenJDK 17 snapshot, build 31.
  * Encode the early-access status into the package version. LP: #1934895.

openjdk-17 (17~29-1) unstable; urgency=medium

  * OpenJDK 17 snapshot, build 29.
  * Update watch file.
  * Prepare to build with jtreg6, where available.

openjdk-17 (17~27-1) unstable; urgency=medium

  * OpenJDK 17 snapshot, build 27.
  * Only build using lto with GCC 11.
  * Build using GCC 11 in recent distributions.
  * Update VCS attributes.
  * Disable runnning the tests, requires not yet packaged jtreg6.
  * Remove rimd, removed upstream.

openjdk-17 (17~24-1) unstable; urgency=medium

  * OpenJDK 17 snapshot, build 24.
  * Drop the work around for JDK 8211105.
  * Remove jaotc (the experimental JIT compiler), removed upstream.
  * Add an (unapplied) patch to replace OASIS header files with ones
    imported from NSPR and NSS. See #985765. Not reviewed, not applying.

 -- Matthias Klose <email address hidden> Wed, 15 Sep 2021 11:49:22 +0200

Changed in openjdk-17 (Ubuntu Hirsute):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers