-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 17 Jan 2024 13:14:57 +0100 Source: openjdk-21 Architecture: source Version: 21.0.2+13-1 Distribution: unstable Urgency: high Maintainer: OpenJDK Team <openjdk-21@packages.debian.org> Changed-By: Matthias Klose <doko@ubuntu.com> Closes: 1057390 Changes: openjdk-21 (21.0.2+13-1) unstable; urgency=high . * OpenJDK 21.0.2 release, build 13. - CVEs: + CVE-2024-20918 + CVE-2024-20919 + CVE-2024-20921 + CVE-2024-20945 + CVE-2024-20952 - Security fixes: + JDK-8308204: Enhanced certificate processing. + JDK-8314295: Enhance verification of verifier. + JDK-8314307: Improve loop handling. + JDK-8314468: Improve Compiler loops. + JDK-8316976: Improve signature handling. + JDK-8317547: Enhance TLS connection support. . [ Pushkar Kulkarni ] * debian/copyright: Fix whitespace issues. * Minor improvements to the copyright-generator. . [ Vladimir Petko ] * d/copyright: Fix lintian warning. * Generate d/watch to cope with early access and release builds. . [ Matthias Klose ] * Add sparc64 defines (patch by Adrian Glaubitz). Closes: #1057390. * d/copyright: Fix source location. * Update the arch-add-ports patch, taken from 22. * Regenerate debian files. Checksums-Sha1: 5a037d3180b8d2ca8b99db8db2c67cdbf9d8971f 4908 openjdk-21_21.0.2+13-1.dsc f79e6a505ea852f725e079367b8c0bc70089382e 616652 openjdk-21_21.0.2+13.orig-googletest.tar.xz 5b32b69c9a7f73675d394667a50baed38b862da3 66265308 openjdk-21_21.0.2+13.orig.tar.xz 99d0808e3d4858c9bbddaf64ef69464590b7a821 203080 openjdk-21_21.0.2+13-1.debian.tar.xz 003308d1106046e20595c9c847fa7ba94ee8fffd 16114 openjdk-21_21.0.2+13-1_source.buildinfo Checksums-Sha256: a67e906d5572e332729fd68c22e1875017987afc495cf2e6dc865120b37e48cb 4908 openjdk-21_21.0.2+13-1.dsc c2013181c6fbd98d7aa2b868ee6dec7ca24f0ebee05f6b074a420b0910866f38 616652 openjdk-21_21.0.2+13.orig-googletest.tar.xz 5cea1bb1b6344cd9afc2ea405587166cbef03c58cb78c778a0225615940e70c4 66265308 openjdk-21_21.0.2+13.orig.tar.xz e81b1f38b500a26012842bb5d5a5e116ced78215bac118672f0998c4002b3ed8 203080 openjdk-21_21.0.2+13-1.debian.tar.xz b192fde7b40e4acafe069ded96a464757ac6a5a18cf4ef66a01980c50e082ff1 16114 openjdk-21_21.0.2+13-1_source.buildinfo Files: 73b8032d167f6f8bc91effa2ce7b0b28 4908 java optional openjdk-21_21.0.2+13-1.dsc edcb7552a0ef4a3f0261203a675ad342 616652 java optional openjdk-21_21.0.2+13.orig-googletest.tar.xz d7ced1c635cd9999fd311895235e89bf 66265308 java optional openjdk-21_21.0.2+13.orig.tar.xz 38a6d64a5fbb731ad0de86f30468bf78 203080 java optional openjdk-21_21.0.2+13-1.debian.tar.xz a3e793da689d6d2ae4fdfaae47d93a14 16114 java optional openjdk-21_21.0.2+13-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJEBAEBCgAuFiEE1WVxuIqLuvFAv2PWvX6qYHePpvUFAmWnxSEQHGRva29AdWJ1 bnR1LmNvbQAKCRC9fqpgd4+m9XmQEAC9JFVPVirvGCbSJKB8QOxOpQu/GsIdE2H5 ENqYGxLeMLECv4hJcfEQrIOXweL/Y7JSGPMnaf2AJsY4HKW7EloE31tsl86MpHvH Lan7+5EpAta4skx8m1iK0ok2Mbydo6kfip1llDXG2dC3aubJDIAXN5Co00jdTQPe pSB5fRFa4kIgCzuCDY2eaNgmPJjkBRw5nmMFQ3Ijp4zXfxiFfKJmLvWGwaTH8Gqv 1FCS1zHsJ+YqdgtNTAyfv+uNIHglYDDzamySQ0SNmvY9ryMaqUotRdcSttm45JXL cXM6ElE72BDk+K+78ye0Xxv9BNNvsZrchhXdIJ0anUcXb2c5u8sQ/zBxdLvpu2tP 4P22PyikvaeyD/BNb1QIPN6lq3XoWFJlEIt5XivBWBiqMniG9/5BksJ8fIMCrBFa 4a62uhWWlqNl0eQfpMfat2Di8cLMZZ7ad9CSUmap2nnphhc+qb1W5JfWJeyNUCRW XOYXwJ2I51aTZSHYxdbnuODPAqIWraSJAe08X8A6Rj7QpZ5AvqLZDARca8i9uQAr 65+N1ZS/7ME8p/GDGYDZNclmBBZ2lZRWNZvxQk4MPkiqvAVy7b7SZqSkTyVKxglJ t1o0W6LJ8T75HeXZ36cpgpHKOS9FvFd5bKSWBbmm+py3ZrkYt36MbcNpVbnl1/mC xDkBUl/rKg== =zYs9 -----END PGP SIGNATURE-----