-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 22 Jan 2026 10:10:25 +1300
Source: openjdk-25
Built-For-Profiles: noudeb
Architecture: source
Version: 25.0.2+10-1
Distribution: unstable
Urgency: medium
Maintainer: OpenJDK Team <openjdk-25@packages.debian.org>
Changed-By: Vladimir Petko <vladimir.petko@canonical.com>
Changes:
openjdk-25 (25.0.2+10-1) unstable; urgency=medium
.
* OpenJDK 25.0.2 release, build 10.
- CVEs:
+ CVE-2026-21945: 8368032: Enhance Certificate Checking.
+ CVE-2026-21932: 8359501: Enhance Handling of URIs.
+ CVE-2026-21933: 8362632: Improve HttpServer Request handling.
+ CVE-2026-21925: 8341496: Improve JMX connections.
* d/rules: Use jtreg8 package for the tests.
* d/p/power-opt.diff: Refresh patch.
* Drop patches applied upstream:
- d/p/jdk-8359735.patch.
- d/p/jdk-8369450-proposed.patch.
- d/p/jdk-8370049-proposed.patch.
Checksums-Sha1:
201cf613ee05872bde0471b51c0dc04e27c2a6db 5117 openjdk-25_25.0.2+10-1.dsc
f757f831f55051a51c3dd670ea0368111b23c53a 613408 openjdk-25_25.0.2+10.orig-googletest.tar.xz
7d2ba7f1a88da3c6a625b9401bf1b74d40129c3d 74028008 openjdk-25_25.0.2+10.orig.tar.xz
c4b57d1e3aa99c07b305f12ff824dcaa82c23469 207700 openjdk-25_25.0.2+10-1.debian.tar.xz
5b358b34fe63ef8ffddd44f5fff192cf30e97a12 19903 openjdk-25_25.0.2+10-1_source.buildinfo
Checksums-Sha256:
93c6bcbc962dcdd9449ba923fb54193cc3a7a8ee2e26c0e31145454d65e07490 5117 openjdk-25_25.0.2+10-1.dsc
6e6699c442cd6bc008140d159b43a7a39bb811d1ecd380cf3b707cc535e04393 613408 openjdk-25_25.0.2+10.orig-googletest.tar.xz
6657d76684eb6d509403095f87291120f258e09aef3065104df302ec2f716f15 74028008 openjdk-25_25.0.2+10.orig.tar.xz
95060e1d578ccef696b66ce033154e76904c9ca5c3dae8a331195f0a82a47bf8 207700 openjdk-25_25.0.2+10-1.debian.tar.xz
c5948e6b0a30694959a6a6c13dda6975d9f9e66382ae03f0b1ee754f8d9c1cd1 19903 openjdk-25_25.0.2+10-1_source.buildinfo
Files:
6d3c869346aa9ad7db0da9bcadc7897b 5117 java optional openjdk-25_25.0.2+10-1.dsc
ae1c58d38d39133ebcdc47e09d77a661 613408 java optional openjdk-25_25.0.2+10.orig-googletest.tar.xz
653699665128e7dc29a21f11770bba18 74028008 java optional openjdk-25_25.0.2+10.orig.tar.xz
230f7279d4f4a4ff6aea07e58529dc16 207700 java optional openjdk-25_25.0.2+10-1.debian.tar.xz
710689dc082a9c556f17d269fdcf8cdf 19903 java optional openjdk-25_25.0.2+10-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=0jcx
-----END PGP SIGNATURE-----
