-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA384
Format: 1.8
Date: Sat, 21 Oct 2023 21:26:54 +0200
Source: openjdk-8
Architecture: source
Version: 8u392-ga-1
Distribution: unstable
Urgency: low
Maintainer: Java Maintenance <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Thorsten Glaser <tg@mirbsd.de>
Changes:
openjdk-8 (8u392-ga-1) unstable; urgency=low
.
[ Emmanuel Bourg ]
* Provide versioned java-runtime, java-runtime-headless, java-sdk
and java-sdk-headless virtual packages
.
[ Thorsten Glaser ]
* Link with -Wl,--no-as-needed like openjdk-11 in case 8u ever loses
the mapfiles (cf. #1031521)
* Depend on libasmtools-java on buster, bullseye as well
* New upstream release
* CVEs
- CVE-2023-22067
- CVE-2023-22081
* Security fixes
- JDK-8286503, JDK-8312367: Enhance security classes
- JDK-8297856: Improve handling of Bidi characters
- JDK-8303384: Improved communication in CORBA
- JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
(not relevant, as we use the system libraries)
- JDK-8309966: Enhanced TLS connections
* Other changes see
https://mail.openjdk.org/pipermail/jdk8u-dev/2023-October/017616.html
* Use b07 for aarch32, patch it to b08/ga, aarch32-b08 doesn’t exist yet
* Update pathnames used by the embedded library removal code (repacking)
* Overhaul d/copyright using both upstream notices and diff review
* Upload sponsored by QVEST ⮡ dıgıtal
Checksums-Sha1:
1aabfa77b7a4e1eaf99318b9f3532343cc00fbd9 4568 openjdk-8_8u392-ga-1.dsc
d720a766e782530423811d506fef59a759bf15c3 67602831 openjdk-8_8u392-ga.orig.tar.gz
22ff34eeedfb1da0ba898504875dc3848e6f2e40 169220 openjdk-8_8u392-ga-1.debian.tar.xz
Checksums-Sha256:
cf4b3b848299f82592aae862f3445ff370d8d5b9748d42a0d1fbf1fb5bb52f7f 4568 openjdk-8_8u392-ga-1.dsc
82241f9052233f31c59bc6f14f2356e8a62bedd10fafbc2af6f508cd3ae04c17 67602831 openjdk-8_8u392-ga.orig.tar.gz
97844437d4c953f6100b6147215fcea980da3a4283c6cdddd8caf0e373497c0c 169220 openjdk-8_8u392-ga-1.debian.tar.xz
Files:
f3bc6a1384cb128257491c6ef5af872e 4568 java optional openjdk-8_8u392-ga-1.dsc
850746fdc6ed7451d22661b299fc4967 67602831 java optional openjdk-8_8u392-ga.orig.tar.gz
4fb7d81aa78a314365637904c070728e 169220 java optional openjdk-8_8u392-ga-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (MirBSD)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=xuBI
-----END PGP SIGNATURE-----
