CLSA-2025-1752246531

Upgrade to openjdk-11.0.27+6. The following CVEs were fixed:
CVE-2025-30698: fix buffered image handling to avoid unauthorized access to accessible data
CVE-2025-30691: improve compiler transformations to avoid unauthorized access to accessible data
CVE-2024-21144: invalid header validation leads to Pack200 excessive loading time
CVE-2024-21147: out-of-bounds array index in range check elimination
CVE-2024-21138: infinite loop vunlerability in SymbolTable
CVE-2024-21131: UTF8 size overflow
CVE-2024-21235: incorrect range check because of integer conversion error in LoopNode
CVE-2024-21140: int overflow/underflow in range check elimination
CVE-2024-21217: out-of-memory because of unbounded allocation in MessageFormat
CVE-2024-21210: integer overflow in array indexing in SuperWord
CVE-2024-21145: out-of-bounds access in MaskFill
CVE-2024-21208: improper handling of maxHeaderSize in HTTP client
CVE-2025-21502: enhance array handling

References

Affected packages