-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA384
Format: 1.8
Date: Mon, 26 Apr 2021 17:00:54 +0200
Source: openjdk-8
Architecture: source
Version: 8u292-b10-1
Distribution: unstable
Urgency: medium
Maintainer: Java Maintenance <debian-java@lists.debian.org>
Changed-By: Thorsten Glaser <tg@mirbsd.de>
Changes:
openjdk-8 (8u292-b10-1) unstable; urgency=medium
.
* Source-only upload after the previous bootstrap binary one
* Change -Xmx1024m to -Xmx1000m in icedtea-sound compilation
to work with mipsel’s memory layout (and sh4)
* Don’t set old-style ALT_ environment variables, they are ignored
* Create the origtgz in a hopefully reproducible way
* Merge openjdk-8 (8u292-b10-0+deb9u1)
- Revert bogus reversion of changes from previous uploads
- Add missing changelog entry for 8u275
- Revert *buntu ESM-related changes
- Undo an inconsistency in fetch-orig
* Fix whitespace
* Upgrade aarch32 to 8u292 GA
* Build with reproducible LC_ALL=C setting
* Obtain origtgz from https or, when not possible (icedtea-sound),
check SHA256 against one I manually downloaded and checked, using
the (expired…) key from pyconfigure’s signing keyring, which,
unlike the keyserver network, contains the key used
* Abort fetching origtgz if it fails, don’t soldier on to fail later
* Document reasons some tests fail (more building on older releases)
* Update lintian overrides (for sid)
.
openjdk-8 (8u292-b10-0+deb9u1) stretch-security; urgency=medium
.
* Merge with Ubuntu.
* Update to 8u292-b10 (GA).
.
openjdk-8 (8u292-b10-0ubuntu1) hirsute; urgency=medium
.
* Update to 8u292-b10 (GA).
* Security fixes
- JDK-8227467: Better class method invocations
- JDK-8244473: Contextualize registration for JNDI
- JDK-8244543: Enhanced handling of abstract classes
- JDK-8249906, CVE-2021-2163: Enhance opening JARs
- JDK-8250568, CVE-2021-2161: Less ambiguous processing
- JDK-8253799: Make lists of normal filenames
* Other changes:
See https://mail.openjdk.java.net/pipermail/jdk8u-dev/2021-April/013680.html
Checksums-Sha1:
fc78384de66cc1b9095df602fc441f757a40bae6 4778 openjdk-8_8u292-b10-1.dsc
f8d1d63b7736a44e5d054b7ba7104792272d7d96 73542230 openjdk-8_8u292-b10.orig.tar.gz
9fc9d22912cf696c416a32238732df0d08d335a4 216484 openjdk-8_8u292-b10-1.debian.tar.xz
Checksums-Sha256:
8c7ca2fe4d59d304467af90a63c9a00b0667257a6934e02aeaef04e02b1f11da 4778 openjdk-8_8u292-b10-1.dsc
87c85cd5b6622241b33ef35d9f8f52ea64b1673d4d0b656e96d7eef8fc4ddadf 73542230 openjdk-8_8u292-b10.orig.tar.gz
4601958ccc6c7f40898be7d3100249e33431b22eae5930a38761060bac59053b 216484 openjdk-8_8u292-b10-1.debian.tar.xz
Files:
2a8fdb54c74ec0e46d0ab30f09113d2e 4778 java optional openjdk-8_8u292-b10-1.dsc
fb5c398d242151b60e3a91431dbb33a6 73542230 java optional openjdk-8_8u292-b10.orig.tar.gz
97cc62a26c51580b5f7f8b6d31dc12a8 216484 java optional openjdk-8_8u292-b10-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (MirBSD)
Comment: ☃ ЦΤℱ—８ ☕☂☄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=etbr
-----END PGP SIGNATURE-----
