-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 11 Jun 2023 12:55:28 +0200
Source: openjdk-11
Architecture: source
Version: 11.0.19+7-1
Distribution: unstable
Urgency: high
Maintainer: OpenJDK Team <openjdk-11@packages.debian.org>
Changed-By: Matthias Klose <doko@ubuntu.com>
Changes:
openjdk-11 (11.0.19+7-1) unstable; urgency=high
.
* OpenJDK 11.0.19 release, build 7.
- CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939,
CVE-2023-21954, CVE-2023-21967, CVE-2023-21968.
- Release notes:
https://mail.openjdk.org/pipermail/jdk-updates-dev/2023-April/021900.html
- d/p/*: refresh patches.
.
[ Vladimir Petko ]
* debian/JB-jre-headless.postinst.in: trigger ca-certificates-java after jre
is set up.
* d/p: drop obsolete patches (LP: #2011653).
- workaround_expand_exec_shield_cs_limit.diff: obsoleted by
hotspot-disable-exec-shield-workaround.diff.
- generated-headers.patch: include is already added by openjdk makefile.
- parallel-build-fix.diff: include is not necessary.
* d/copyright, d/watch: implement uscan repackaging (LP: #2011749).
* d/rules: use --with-debug-symbols=none (LP: #2003820).
* d/control: add jtreg6 dependencies, regenerate control.
* d/t/{jdk,hotspot,jaxp,langtools}: run tier1 and tier2 jtreg tests only,
add test options from OpenJDK makefile.
* d/t/*: fix test environment: add missing -nativepath (LP: #2001563).
* d/t/jdk: provide dbus session for the window manager (LP: #2001576).
* d/p/*: add patches for jtreg tests:
- disable-thumb-assertion.patch: fix JDK-8305481.
- update-assertion-for-armhf.patch: fix JDK-8305480.
- log-generated-classes-test.patch: workaround JDK-8166162.
- update-permission-test.patch: add security permissions for testng 7.
- ldap-timeout-test-use-ip.patch, test-use-ip-address.patch: Ubuntu-specific
patches to workaround missing DNS resolver on the build machines.
- exclude_broken_tests.patch: quarantine failing tests.
* d/rules: package external debug symbols (LP: #2015835).
* drop d/p/{jaw-classpath.diff, jaw-optional.diff}: the atk wrapper is disabled
and these patches cause class data sharing tests to fail (LP: #2016194).
* d/p/exclude-broken-tests.patch: add OpenJDK 11 failures.
* d/t/jtreg-autopkgtest.in: pass JTREG home to locate junit.jar, regenerate
d/t/jtreg-autopkgtest.sh (LP: #2016206).
* d/t/control.in: disable jtreg autopkgtests in line with openjdk 17,
regenerate control (LP: #2016438).
* d/rules: pack external debug symbols with build-id, do not pack duplicate
symbols, do not strip JVM shared libraries (LP: #2012326, LP: #2016739).
* d/rules: always use jtreg6.
.
[ Matthias Klose ]
* d/rules: Fix using CC/CXX for recent releases.
Checksums-Sha1:
38ed90cfba304561c4aedb5231cec209040eabd0 4600 openjdk-11_11.0.19+7-1.dsc
bf2ecbb084c3ae6b51fdcff3bf6403b9c09d58fd 78706772 openjdk-11_11.0.19+7.orig.tar.xz
ca228c0ee6838c9c4a76a75ced8f33948bf7c6f6 160416 openjdk-11_11.0.19+7-1.debian.tar.xz
4c62e92c386a6e432d892a901b112a2390938bcd 15430 openjdk-11_11.0.19+7-1_source.buildinfo
Checksums-Sha256:
da3f0f2f788576285f11c250e0cbfd913a9773a655e7cbb30394b93475a98d9c 4600 openjdk-11_11.0.19+7-1.dsc
8aeb8c865b11b102268bcea4e0e9d1dc39c1b0596b8ec0fb184dd2deed5b8b61 78706772 openjdk-11_11.0.19+7.orig.tar.xz
490efad4888f606a82e1021983d0f1aa44c12132357797aa5147fca27a890b62 160416 openjdk-11_11.0.19+7-1.debian.tar.xz
7c20e50d71bd1d4e22b5637da89db5e00d2a5ad4c1a93dbc17c6fbe7334257f3 15430 openjdk-11_11.0.19+7-1_source.buildinfo
Files:
9ac81a9ef773773ccc4dc28dd7d34553 4600 java optional openjdk-11_11.0.19+7-1.dsc
ff2769235b5aae5c116e19a104d26397 78706772 java optional openjdk-11_11.0.19+7.orig.tar.xz
9cc4c03e13388e480a52c9158ae04ff2 160416 java optional openjdk-11_11.0.19+7-1.debian.tar.xz
1351e8f6e9266f524f15c88a789ea7a2 15430 java optional openjdk-11_11.0.19+7-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=YQZK
-----END PGP SIGNATURE-----
