-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA384 Format: 1.8 Date: Sat, 23 Jul 2022 01:34:54 +0200 Source: openjdk-8 Architecture: source Version: 8u342-b07-1 Distribution: unstable Urgency: medium Maintainer: Java Maintenance <debian-java@lists.debian.org> Changed-By: Thorsten Glaser <tg@mirbsd.de> Changes: openjdk-8 (8u342-b07-1) unstable; urgency=medium . * New upstream release * Security fixes: - JDK-8272243: Improve DER parsing - JDK-8272249: Better properties of loaded Properties - JDK-8277608: Address IP Addressing - JDK-8281859, CVE-2022-21540: Improve class compilation - JDK-8281866, CVE-2022-21541: Enhance MethodHandle invocations - JDK-8283190: Improve MIDI processing - JDK-8284370: Improve zlib usage - JDK-8285407, CVE-2022-34169: Improve Xalan supports * Other changes see https://mail.openjdk.org/pipermail/jdk8u-dev/2022-July/015254.html * Add patch to undo user.dir change prohibition; this breaks legacy software like Gradle * Upload sponsored by ⮡ tarent Checksums-Sha1: b356587382db62ac639ac3e535a65a71691b84b3 4778 openjdk-8_8u342-b07-1.dsc e805e012777b8cf2377bcfc904067d74233d36ce 66407869 openjdk-8_8u342-b07.orig.tar.gz 8fe1b2a28a789a3c1f3ffa7bc205091cf0e33b3b 179664 openjdk-8_8u342-b07-1.debian.tar.xz Checksums-Sha256: 29c55a0b78085af2b99462d191ee1c4eb3a2f5dd1557b291c30f8ca280598ddf 4778 openjdk-8_8u342-b07-1.dsc 95431bfecb3c20760f21fd9e75a9d0537e94177ca81209d1f5f52eb01daa313b 66407869 openjdk-8_8u342-b07.orig.tar.gz 3a87828fa555e93231b005d6c578db14c7621519338ebaabe995a16b393a13f6 179664 openjdk-8_8u342-b07-1.debian.tar.xz Files: 0be393e43c60243367e851afb6957ca5 4778 java optional openjdk-8_8u342-b07-1.dsc b633bb5423c5e41a6862968e9b90c5fe 66407869 java optional openjdk-8_8u342-b07.orig.tar.gz bf02c5e44c5eb56db02c60ccbec540ce 179664 java optional openjdk-8_8u342-b07-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (MirBSD) iQIcBAEBCQAGBQJi20O/AAoJEHa1NLLpkAfgKvYP/3vqF/fhpAdxeqYyZdk68YtD ZNF+vr0dlBa6D6ZPutZq7pZPSE7Dm4BZ4NW+Z89U82KpoahO3zXBdZcvfbxLUZt7 Keaz9132smgPkI9TAZuCk8DMni+x3GvvJpQdlwMaZdtKykC7MCH462NLURrsKE1g FrK7jSDphtlMI05LX1PsqkrbsSCbMxVc7lcQDxzOzoct/4nPnY8AlzY3ZdIJvhHV pOAhT1jyAQhoNqB7fLZSK5y4PEZlP+zpcCLA+s/48bCegumBpDa6SquF4l4ZjkAo THsxTcerecJbMgB9KTKlBI7S/HJMddaSDtiuWijK/yg4aCjliScAjwwkUdA6jxtO g4+gzyo0LQJJbqKtCHdyPO6QmSAMwow77ZXTv7pTYnTpHfX5h4aMU/DM9PuWkBmc sEx91mb5C9RjBkrC9REvOQRhnVsKABH5hq3ZKn8x2j3nuRRUOhENW8jtC6sJMsSM J20QdwGi35P8nq64NVU2twyKjZwwxCtZOlQGsNvl6jH14M46n9enaPYUs1F+bMbQ A4sIQMz2T6dxChThOiB0njyPRaM0e/+6CNGawrHfmuawrS75RR3rijW7VpRzt5NJ gNuWnllsDpxbwiBqUJvgKAkVwXLfTuwXrUDeMj49LObkFbpjqriv2QLAtyOWv1tq 4dFYKY8hQDdJmDG0E5y1 =8dOt -----END PGP SIGNATURE-----