-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 22 Oct 2025 12:19:10 +0200 Source: openjdk-25 Architecture: source Version: 25.0.1+8-1 Distribution: unstable Urgency: medium Maintainer: OpenJDK Team <openjdk-25@packages.debian.org> Changed-By: Matthias Klose <doko@ubuntu.com> Closes: 1105520 Changes: openjdk-25 (25.0.1+8-1) unstable; urgency=medium . * OpenJDK 25.0.1 release, build 8. - CVEs: + CVE-2025-53057, 8360937: Enhance certificate handling. + CVE-2025-53066, 8356294: Enhance Path Factories. + CVE-2025-61748, 8359454: Enhance String handling. . [ Vladimir Petko ] * d/s/lintian-overrides: Override false positive nproc warning. * d/{JB-doc.overrides.in, JB-jre-headless.overrides.in}: Add override for old FSF copyright address. * d/JB-jvmci-jdk.overrides.in: Update overrides for jvmci package. * d/t/problems.csv: DocRootDirPermissionsTest.java - Fix typo in the test name. * d/t/problems.csv: Synchronize problem list. * d/t/dependencies.sh: Relax test assertion for PC/SC library. * d/rules: Prefer openjdk-25 for bootstrap. * d/control: Regenerate. * d/p/jdk-8369450.patch: Fix ftbfs due to rust-coreutils date. LP: #2127120. * Security Manager was removed in -25, so the JDK image no longer has default.policy and java.policy. * jaxp-strict.properties.template was moved by d/rules to jaxp-strict.properties, but we still created symlink to jaxp-strict.properties.template. Replace mv with cp so that link to jaxp-strict.properties.template is not broken. * d/rules: Run jtreg autopkgtests only on jtreg architectures. * d/t/{hotspot-autopkgtest.in, jdk-autopkgtest.in}: Skip tests that require a large amount of memory. * d/t/{control,hotspot-autopkgtest.sh, jdk-autopkgtest.sh}: Regenerate. * d/p/jdk-8370049-proposed.patch: s390x G1 barrier compare and exchange operation should update output parameter instead of input. LP: #2127750. . [ Matthias Klose ] * d/rules: Let the install target depend on the build target. Closes: #1105520. * Update the location of the upstream VCS. Checksums-Sha1: 69a9cb9b6abf63057dcea489d57632a437b88696 5362 openjdk-25_25.0.1+8-1.dsc 963d08e242ea43318a36d8b950f71a9e3cf2bf84 616792 openjdk-25_25.0.1+8.orig-googletest.tar.xz 21da8c33b4ecdd1b00a8b0be0877490159699030 74074532 openjdk-25_25.0.1+8.orig.tar.xz 462cb100c8cb83c6de4df26aa00dd93891a8b683 209324 openjdk-25_25.0.1+8-1.debian.tar.xz c0c234eb0e1379d4085c72b95f5f77b5e860ec5c 15601 openjdk-25_25.0.1+8-1_source.buildinfo Checksums-Sha256: 91242d9b19421092a74ec01aa6812f3acbff91c670270d2b4dd46e8cf06afd1c 5362 openjdk-25_25.0.1+8-1.dsc db220ce29459378d5fd0d725da4379cac15f0158962e018b862fdb10b460a1ee 616792 openjdk-25_25.0.1+8.orig-googletest.tar.xz 5621428d358067d8542bdabeb95e738529386c68b38d790ad456f95ac0a2297b 74074532 openjdk-25_25.0.1+8.orig.tar.xz ce34357e226e828494437a9b74671ae1edbf91a4fdb76505ee935bb968e8a747 209324 openjdk-25_25.0.1+8-1.debian.tar.xz f98d171e68aa9c9ce6841ae69a6f25f6bbb5011f9fa7f2227d9f75282d11a0f7 15601 openjdk-25_25.0.1+8-1_source.buildinfo Files: b62169ec6723f8f739cf7d3bfecc68d5 5362 java optional openjdk-25_25.0.1+8-1.dsc de5c55b8e5bce1324d6baa80dc60ef28 616792 java optional openjdk-25_25.0.1+8.orig-googletest.tar.xz b4dcf7d6204bb7a85571276e30693215 74074532 java optional openjdk-25_25.0.1+8.orig.tar.xz 199ebc330e441dbbf15e90316139baa9 209324 java optional openjdk-25_25.0.1+8-1.debian.tar.xz 1f983f63e6eed0342c8d3c738b5aeee0 15601 java optional openjdk-25_25.0.1+8-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJEBAEBCgAuFiEE1WVxuIqLuvFAv2PWvX6qYHePpvUFAmj4wk0QHGRva29AdWJ1 bnR1LmNvbQAKCRC9fqpgd4+m9ZvXEACODDgWMLszJS3LZ2wVjknpSFN/2JfGQQQu 8hoOee/sBKFYnZbIu/YPTpvPRlRBuWw5H/Gdcb3eHrygdajHx9Np2r9OKYEIf7QL PmuATE3hlTfwc0Hwpeoxw95cbOWBcCrhcAcshlPiIDsPLaYbd+SY2Qim6jmwQcrb 7JonLvqVuo2cqg53Oj72RSMwfAw535FSO5P5t7ZLNUAxoB8zwCKSh79lcc8SX/n9 BS9SRYjS71hINb9/bADIM0wDRptvEs58YWDyddA+Y4JZxBA9QweCTSi1T/LlmrN+ Sn0R6uXvkOQug3NIctFsB+aADbOZLvDR5CMZ0c8i+Bhaf2cqWjbM3f45TA4Q2kOE nMpHQnpNvoyakRLXlPR0ehOLru4GA3AsBJEHOj7uaYLXFjJ4+hPCYI82rXo4FDJN 3/S0CM8cmtZH4iDJgbrUlCPvPgGJwcVzhQ7YmQlrSNxjEigDODwkOX93ZxGhIGuU NIvr/bUNPXpskXKojlrAieQvtZxHB3hUreZLctDMPl4mm7bFjb/9yIprQsYVMZtg 1uSrxHU6U3CiFs4PhMpjXvw3wsNWWO8A+MElxw5xFwyRHWdWoW7Xi3LK0eGdGIh8 izwajA45JbihU//G8Ja6ywk/RSPVJhwJ9iKHco2zVxCK0pLigapJYe1gxx1/Kg5p s2egviX6MQ== =0V+5 -----END PGP SIGNATURE-----
