-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA384 Format: 1.8 Date: Sun, 24 Apr 2022 01:47:18 +0200 Source: openjdk-8 Architecture: source Version: 8u332~b09-2 Distribution: experimental Urgency: low Maintainer: Java Maintenance <debian-java@lists.debian.org> Changed-By: Thorsten Glaser <tg@mirbsd.de> Changes: openjdk-8 (8u332~b09-2) experimental; urgency=low . * Upload to experimental, with arm64 but see below * Security fixes: - JDK-8269938: Enhance XML processing passes redux - JDK-8270504, CVE-2022-21426: Better XPath expression handling - JDK-8272255: Completely handle MIDI files - JDK-8272261: Improve JFR recording file processing - JDK-8272594: Better record of recordings - JDK-8274221: More definite BER encodings - JDK-8275151, CVE-2022-21443: Improved Object Identification - JDK-8277227: Better identification of OIDs - JDK-8277672, CVE-2022-21434: Better invocation handler handling - JDK-8278008, CVE-2022-21476: Improve Santuario processing - JDK-8278356: Improve file creation - JDK-8278449: Improve keychain support - JDK-8278805: Enhance BMP image loading - JDK-8278972, CVE-2022-21496: Improve URL supports - JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo * Other changes: see https://mail.openjdk.java.net/pipermail/jdk8u-dev/2022-April/014839.html * Use stock jdk8u on arm64 instead of aarch64-shenandoah hotspot+GC * Upload sponsored by ⮡ tarent Checksums-Sha1: d50d580144c539a7313329539a9649c18c4175a0 4738 openjdk-8_8u332~b09-2.dsc 3a6d5d7bc1205070a9e964ba20e2df50726c7ba0 178152 openjdk-8_8u332~b09-2.debian.tar.xz Checksums-Sha256: 9a92ec214815204572bd48f208c708ee9abc8ad11c35447ff1f5cd7217b1b468 4738 openjdk-8_8u332~b09-2.dsc a0c981faf36712284057d8e33833d64ae720f2c038ec2531fc59bef919feb627 178152 openjdk-8_8u332~b09-2.debian.tar.xz Files: be7ac94edeb6d4f404565b16771fb6d8 4738 java optional openjdk-8_8u332~b09-2.dsc 30e53cb132390c61f03f530ec6aeb3bb 178152 java optional openjdk-8_8u332~b09-2.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (MirBSD) iQIcBAEBCQAGBQJiZJCMAAoJEHa1NLLpkAfg9lsQAM3RzIAnQf+kv7lWAaoD0VfJ zgWg6izT0ylCZY/c+9wEKLIqO6DjgOy0zPVx5aHidjv8rCfm9t7snun+N5eTgrwN 38rYdntPmBUXAsftJY2b5GhC++ZZGJjwEfpLBHHNJGxr44RmrvSqAwxcPuymnmEh YwfbD2F9JMSsTRhRkH98XhpLdtUdOrRNTVTCMKUSXs6e/o1OElCmRmVk35WW9uUB ZR1zoqEfCbs9knJxxARl+kh7p3TGhspJW1WljGUWcCHdnXNZG66klQ/BrAAN17TY i463frQ4wdkbopP7SZEy1y/Dk4Mmt5kuO7QhN2CJl82bp956nX9Y+wFs7ZY/unsO jO7/60hZ0lktXcQwsi/8R4ZeYZmZZIjPs1XYGYJ/sateruXtb8JcEaL/JUlejAEz aVWxY/sjt6obgoCIpDe/sV343xTMqRV7hLtK75GTqCcqIeGOaHs30LZGv0oSxCJN BQZ3kc0s6LpodMgHilWFVRE/hs03oZKANLKm+0tmg9A3uad67HDesSNSHakwRIkK TTY37Y8tuprpOYbd0G/HH9sUg194LNMGAxZdPmPKABWJtpj2xlwJsIY26d7qhXlf MjfDgDfc8qHDxrYSNGPNMwCHr6hxVfl+sdpiMDZC8TUCJZkl0xMXu8K/it3otXGe LWf76G8Hd/n18ek5almY =v3NF -----END PGP SIGNATURE-----