Ubuntu
openjdk-17 package

openjdk-17 17.0.2+8-1~20.04 source package in Ubuntu

Changelog

openjdk-17 (17.0.2+8-1~20.04) focal-security; urgency=medium

  * Backport the security update to 20.04 LTS.

openjdk-17 (17.0.2+8-1) unstable; urgency=high

  * OpenJDK 17.0.2+8 (release).
  * Security fixes
    - JDK-8217375: jarsigner breaks old signature with long lines in manifest.
    - JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if zip has dir
      named "." inside.
    - JDK-8264934, CVE-2022-21248: Enhance cross VM serialization.
    - JDK-8268488: More valuable DerValues.
    - JDK-8268494: Better inlining of inlined interfaces.
    - JDK-8268512: More content for ContentInfo.
    - JDK-8268795: Enhance digests of Jar files.
    - JDK-8268801: Improve PKCS attribute handling.
    - JDK-8268813, CVE-2022-21283: Better String matching.
    - JDK-8269151: Better construction of EncryptedPrivateKeyInfo.
    - JDK-8269944: Better HTTP transport redux.
    - JDK-8270386, CVE-2022-21291: Better verification of scan methods.
    - JDK-8270392, CVE-2022-21293: Improve String constructions.
    - JDK-8270416, CVE-2022-21294: Enhance construction of Identity maps.
    - JDK-8270492, CVE-2022-21282: Better resolution of URIs.
    - JDK-8270498, CVE-2022-21296: Improve SAX Parser configuration management.
    - JDK-8270646, CVE-2022-21299: Improved scanning of XML entities.
    - JDK-8270952, CVE-2022-21277: Improve TIFF file handling.
    - JDK-8271962: Better TrueType font loading.
    - JDK-8271968: Better canonical naming.
    - JDK-8271987: Manifest improved manifest entries.
    - JDK-8272014, CVE-2022-21305: Better array indexing.
    - JDK-8272026, CVE-2022-21340: Verify Jar Verification.
    - JDK-8272236, CVE-2022-21341: Improve serial forms for transport.
    - JDK-8272272: Enhance jcmd communication.
    - JDK-8272462: Enhance image handling.
    - JDK-8273290: Enhance sound handling.
    - JDK-8273756, CVE-2022-21360: Enhance BMP image support.
    - JDK-8273838, CVE-2022-21365: Enhanced BMP processing.
    - JDK-8274096, CVE-2022-21366: Improve decoding of image files.
    - JDK-8279541: Improve HarfBuzz.

 -- Matthias Klose <email address hidden>  Tue, 25 Jan 2022 14:57:25 +0100

Upload details

Uploaded by:
Matthias Klose
Uploaded to:
Focal
Original maintainer:
OpenJDK Team
Architectures:
alpha amd64 armel armhf arm64 i386 ia64 mips mipsel mips64 mips64el powerpc ppc64 ppc64el m68k riscv64 sh4 sparc sparc64 s390x x32 all
Section:
java
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
openjdk-17_17.0.2+8.orig.tar.xz 60.6 MiB f1b5ac6670131cff83e2b15e54dca153487672ffeb3479c5db8a1544c12593a0
openjdk-17_17.0.2+8-1~20.04.debian.tar.xz 194.2 KiB 270b5a24783cc9967d9c68f3f15560a118eac7a6ff87fd4f4cd1467a48e088ea
openjdk-17_17.0.2+8-1~20.04.dsc 4.1 KiB 26730f8b63364390f3dc8ca9f3aed8b9d857d0452357164d2e6a4644ed29ccf1

View changes file

Binary packages built by this source

openjdk-17-dbg: Java runtime based on OpenJDK (debugging symbols)

 OpenJDK is a development environment for building applications,
 applets, and components using the Java programming language.
 .
 This package contains the debugging symbols.

openjdk-17-demo: Java runtime based on OpenJDK (demos and examples)

 OpenJDK Java runtime

openjdk-17-doc: OpenJDK Development Kit (JDK) documentation

 OpenJDK is a development environment for building applications,
 applets, and components using the Java programming language.
 .
 This package contains the API documentation.

openjdk-17-jdk: OpenJDK Development Kit (JDK)

 OpenJDK is a development environment for building applications,
 applets, and components using the Java programming language.

openjdk-17-jdk-headless: OpenJDK Development Kit (JDK) (headless)

 OpenJDK is a development environment for building applications,
 applets, and components using the Java programming language.

openjdk-17-jre: OpenJDK Java runtime, using Hotspot JIT

 Full Java runtime environment - needed for executing Java GUI and Webstart
 programs, using Hotspot JIT.

openjdk-17-jre-headless: OpenJDK Java runtime, using Hotspot JIT (headless)

 Minimal Java runtime - needed for executing non GUI Java programs,
 using Hotspot JIT.

openjdk-17-jre-zero: Alternative JVM for OpenJDK, using Zero

 The package provides an alternative runtime using the Zero VM. Built on
 architectures in addition to the Hotspot VM as a debugging aid for those
 architectures which don't have a Hotspot VM.
 .
 The VM is started with the option `-zero'. See the README.Debian for details.

openjdk-17-source: OpenJDK Development Kit (JDK) source files

 OpenJDK is a development environment for building applications,
 applets, and components using the Java programming language.
 .
 This package contains the Java programming language source files
 (src.zip) for all classes that make up the Java core API.