-
openjdk-17 (17.0.11+9-1) unstable; urgency=high
* OpenJDK 17.0.11 release, build 9.
- CVE-2024-21011, 8319851: Improve exception logging.
- CVE-2024-21068, 8322122: Enhance generation of addresses.
- 8318340: Improve RSA key implementations.
- CVE-2024-21012, 8315708: Enhance HTTP/2 client usage.
* CVE-2024-21094, 8317507: Already fixed in November 2023:
C2 compilation fails with "Exceeded _node_regs array".
-- Matthias Klose <email address hidden> Wed, 17 Apr 2024 14:24:58 +0200
-
openjdk-17 (17.0.11~7ea-1build1) noble; urgency=medium
* No-change rebuild for CVE-2024-3094
-- William Grant <email address hidden> Mon, 01 Apr 2024 18:12:20 +1100
-
openjdk-17 (17.0.11~7ea-1) unstable; urgency=medium
* OpenJDK 17.0.11 early access, build 7.
[ Matthias Klose ]
* Don't try to install jhsdb on armhf with a zero-only build.
* Update cups dependencies for time_t64.
[ Pushkar Kulkarni ]
* Fix a typo in the vendor name derivation logic.
* copyright-generator: Derive release from debian/rules.
[ Vladimir Petko ]
* Fix installing the s390x build.
-- Matthias Klose <email address hidden> Thu, 21 Mar 2024 00:04:45 +0100
-
openjdk-17 (17.0.11~6ea-1) unstable; urgency=medium
* OpenJDK 17.0.11 early access, build 6.
-- Matthias Klose <email address hidden> Tue, 12 Mar 2024 18:37:33 +0100
-
openjdk-17 (17.0.10+7-3) unstable; urgency=medium
* d/changelog: Whitespace cleanup.
* Update build dependency on libfontconfig-dev.
* Apply proposed patch for JDK-8307977. Addresses: #1034600.
* libcups2, libfontconfig1: Make it a recommends in jre-headless,
a dependency in jre.
* Make the dependencies for libfontmanager.so and libjsound.so
recommendations in jre-headless, and dependencies in jre.
* Drop build dependencies on libgtk2 | libgtk3.
* Disable running the tests for the time_t64 bootstrap.
-- Matthias Klose <email address hidden> Mon, 11 Mar 2024 16:08:33 +0100
-
openjdk-17 (17.0.10+7-1build3) noble; urgency=medium
* No-change rebuild against libglib2.0-0t64
-- Steve Langasek <email address hidden> Mon, 11 Mar 2024 23:21:02 +0000
-
openjdk-17 (17.0.10+7-1build2) noble; urgency=medium
* No-change rebuild against libglib2.0-0t64
-- Steve Langasek <email address hidden> Fri, 08 Mar 2024 06:25:50 +0000
-
openjdk-17 (17.0.10+7-1build1) noble; urgency=medium
* No-change rebuild against libpng16-16t64
-- Steve Langasek <email address hidden> Thu, 29 Feb 2024 07:33:30 +0000
-
openjdk-17 (17.0.10+7-1) unstable; urgency=high
* OpenJDK 17.0.10 release, build 7.
- CVEs:
+ CVE-2024-20918
+ CVE-2024-20919
+ CVE-2024-20921
+ CVE-2024-20932
+ CVE-2024-20945
+ CVE-2024-20952
- Security fixes:
+ JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a file entry
when there is a directory entry of the same name within a Zip File.
+ JDK-8308204: Enhanced certificate processing.
+ JDK-8314295: Enhance verification of verifier.
+ JDK-8314307: Improve loop handling.
+ JDK-8314468: Improve Compiler loops.
+ JDK-8316976: Improve signature handling.
+ JDK-8317547: Enhance TLS connection support.
[ Vladimir Petko ]
* d/t/jtreg-autopkgtest.sh: Regenerate test script.
* Generate d/watch to cope with early access and release builds.
* d/rules: Trim trailing whitespaces from debian/control.
[ Matthias Klose ]
* Build again zero on amd64 (accidental change in 6ea-1).
[ Pushkar Kulkarni ]
* Minor improvements to the copyright-generator.
-- Matthias Klose <email address hidden> Wed, 17 Jan 2024 12:09:47 +0100
-
openjdk-17 (17.0.10~6ea-1) unstable; urgency=medium
* OpenJDK 17.0.10 early access, build 6.
[ Pushkar Kulkarni ]
* debian/copyright: Fix whitespace issues.
[ Vladimir Petko ]
* d/copyright: Fix lintian warning.
[ Matthias Klose ]
* d/copyright: Fix source location.
* Build-depend on jtreg7 instead of jtreg6.
* d/p/googletest-version.diff: Ignore the version check, keep 1.14.
* Refresh patches.
-- Matthias Klose <email address hidden> Tue, 26 Dec 2023 13:18:48 +0100
-
openjdk-17 (17.0.9+9-2) unstable; urgency=medium
[ Vladimir Petko ]
* d/t/write-problems: Add missing file to generate the problem list.
[ Pushkar Kulkarni ]
* debian/copyright: Update copyrights and notices, using a generator script.
-- Matthias Klose <email address hidden> Thu, 02 Nov 2023 11:23:27 +0100
-
openjdk-17 (17.0.9+9-1) unstable; urgency=high
* OpenJDK 17.0.9 release, build 9.
- CVE-2023-30589, CVE-2023-22081, CVE-2023-22091, CVE-2023-22025.
The patch for CVE-2023-30589 also addresses CVE-2023-30585,
CVE-2023-30588, and CVE-2023-30590.
- Release notes:
https://www.oracle.com/java/technologies/javase/17-0-9-relnotes.html#R17_0_9
[ Vladimir Petko ]
* Backport upstream fix for jexec: can't locate java:
No such file or directory. Closes: #1029342.
* d/rules, d/watch: Bundle googletest 1.14.
* d/copyright: Add googletest copyright.
* d/test: Update problemlist.
* d/p: exclude-broken-tests.patch.
* d/p/reproducible-properties-timestamp.diff: Use the privileged action
to read the system property (JDK-8272157, 914278).
-- Matthias Klose <email address hidden> Wed, 18 Oct 2023 09:07:04 +0200
-
openjdk-17 (17.0.9~6ea-1) unstable; urgency=medium
* OpenJDK 17.0.9 early access, build 6.
[ Matthias Klose ]
* Build-depend on the unversioned libfreetype-dev.
* Backport the openjdk-17 zero support for loong64 (Xuefeng Pan).
Closes: #1051906.
* Build using GCC 13 on development versions.
[ Vladimir Petko ]
* Fix jquery-min.js symlink. Closes: #998763.
-- Matthias Klose <email address hidden> Sat, 16 Sep 2023 13:35:34 +0200
