-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 21 Oct 2020 23:52:22 +0200 Source: openjdk-8 Architecture: source Version: 8u272-b10-0+deb9u1 Distribution: stretch-security Urgency: medium Maintainer: OpenJDK Team <openjdk@lists.launchpad.net> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Changes: openjdk-8 (8u272-b10-0+deb9u1) stretch-security; urgency=medium . * Update to 8u272-b10 (GA). * Security fixes: - JDK-8233624: Enhance JNI linkage - JDK-8236196: Improve string pooling - JDK-8236862, CVE-2020-14779: Enhance support of Proxy class - JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts - JDK-8237995, CVE-2020-14782: Enhance certificate processing - JDK-8240124: Better VM Interning - JDK-8241114, CVE-2020-14792: Better range handling - JDK-8242680, CVE-2020-14796: Improved URI Support - JDK-8242685, CVE-2020-14797: Better Path Validation - JDK-8242695, CVE-2020-14798: Enhanced buffer support - JDK-8243302: Advanced class supports - JDK-8244136, CVE-2020-14803: Improved Buffer supports - JDK-8244479: Further constrain certificates - JDK-8244955: Additional Fix for JDK-8240124 - JDK-8245407: Enhance zoning of times - JDK-8245412: Better class definitions - JDK-8245417: Improve certificate chain handling - JDK-8248574: Improve jpeg processing - JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit - JDK-8253019: Enhanced JPEG decoding Checksums-Sha1: 24ec4f9af59d13dccf069e52c901a1760ca398ee 4678 openjdk-8_8u272-b10-0+deb9u1.dsc e2bfb0f85bae924dd7d296d342d42b5b4e95ceb3 73137536 openjdk-8_8u272-b10.orig.tar.xz 32ec12e7b496460490c2385c5bef3c773774d211 247668 openjdk-8_8u272-b10-0+deb9u1.debian.tar.xz 495d1ae152d25196717d51b63bd6dc733c59a129 10937 openjdk-8_8u272-b10-0+deb9u1_source.buildinfo Checksums-Sha256: 7ea091f7f8078fd907344b0d9251793b8b999995e1b4125fd82443fd4f8ec3ff 4678 openjdk-8_8u272-b10-0+deb9u1.dsc 7bb814c62dfeea9185fabec60cf77056caba4db98fa3942331560c9ebbae0694 73137536 openjdk-8_8u272-b10.orig.tar.xz 43bbd4b8c3175559314dd2fbc2f2f15853139cef779981ca2124dc1ac251440a 247668 openjdk-8_8u272-b10-0+deb9u1.debian.tar.xz c3ff4f43ffae92eecc7f5f3511345e3cb046ffa5ea20d5178bb79853984f1da9 10937 openjdk-8_8u272-b10-0+deb9u1_source.buildinfo Files: e5899f18205cf669d75f5cf6c8122684 4678 java optional openjdk-8_8u272-b10-0+deb9u1.dsc 7ffec8346ebcf975e4e4b7f3a47b46f6 73137536 java optional openjdk-8_8u272-b10.orig.tar.xz 9f4e53eca470c7c9aaf89288fa06c7aa 247668 java optional openjdk-8_8u272-b10-0+deb9u1.debian.tar.xz a56524a1fe907628b252fb28f120f5af 10937 java optional openjdk-8_8u272-b10-0+deb9u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAl+ShooACgkQnUbEiOQ2 gwIYXg/+Jcz/XuMMybHVOY0DsXWqfF3C0gRuPDGH7siKW+mSksQZa5hefdJINwLv fIMdEjNd9N213xmxKoJUv7+Puk8qqFTlKkb0BoLQK2wdkrY8iK2rnEBnMGn5PTFR lDTm6sIx3j/ZTZT/YMKS/HOQJYyfKMwVQwxon14JZLYHDqUSy6ePKabnw8RYvjGz EIhFcOo5WG2ZUwXAL5OFB3mt+9imiFiwqAgjjnVEFzPsPxtkYTAk2DZ7zZ57Z+Vm lXU74Pop+2A6UksfW2NB3E1D7daI0V/FqZ9+TOgR5FQAFYBocR7uMicdghHbTAoW x0bWTB9KdBkO0qh0p/O1+IMyc6m8vH+/tniIVFEsB91B+/t4cksoosJO5QuKa89/ niYKSs9eRj8AQGChH+Xwhl+qaJ8F8X1v49BaWtgYc7OhGXvIDH27AG+s+9dcxbD3 AvHt4yCw7ZpvprbRDn78xQOaD5JBVhNXD2EkDaC4X4BtbeIkSdIEBi0PqsrdawYs 6zfZFZaHg0GZJLx0qevsYwsfRfvU05JdRcJCPkgYBo8+aZVAreEsdBCKWJw9k4OA 1zn1xXt3EoslBJK1IAqm4OK4L9xJ2tKJsTBwBxsMlCdEpwjbIdDlnO+uBbrumU+Q yPkRHXlL8IAWz/5gReayfTFLUWBIgOQ+nXo7+nj4x8NatVY/aF0= =XhKF -----END PGP SIGNATURE-----