-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 24 Apr 2026 11:20:53 +1200
Source: openjdk-26
Built-For-Profiles: noudeb
Architecture: source
Version: 26.0.1+8-1
Distribution: unstable
Urgency: medium
Maintainer: OpenJDK Team <openjdk-26@packages.debian.org>
Changed-By: Vladimir Petko <vladimir.petko@canonical.com>
Changes:
openjdk-26 (26.0.1+8-1) unstable; urgency=medium
.
* OpenJDK 26.0.1 release, build 8.
- CVEs:
+ CVE-2026-22016: 8370529: Enhance Path Factories Redux
+ CVE-2026-34282: 8374557: Enhance TLS connection handling
+ CVE-2026-22021: 8371830: Enhance certificate chain validation
+ CVE-2026-22013: 8370615: Improve Kerberos credentialing
+ CVE-2026-23865: 8379158: Update FreeType to 2.14.2
+ CVE-2026-22008: 8367463: Improved Arena allocations
+ CVE-2026-22018: 8370986: Enhance Zip file reading
+ CVE-2026-22007: 8369575: Enhance crypto algorithm support
+ CVE-2026-34268: 8371935: Enhance key generation
* d/rules: Check generated files only on amd64. This resolves riscv64
ftbfs, as some architectures change with_check flag.
* d/t/problems.csv: Add
tools/javac/patterns/SOEDeeplyNestedBlocksTest.java to problems.csv.
Test fails due to the insufficient default stack size.
* d/p/jdk-8352567.diff: Cherry-pick upstream patch to disable tests
for the unimplemented JFR features on S390x.
* d/t/problems.csv: Fix typo in loong64 excluded tests lists.
* Add common GPL and Apache license headers to copyright generator.
* d/copyright: Regenerate.
Checksums-Sha1:
ac393808d9777b49f32b0216ce5082894a96fc54 5175 openjdk-26_26.0.1+8-1.dsc
f757f831f55051a51c3dd670ea0368111b23c53a 613408 openjdk-26_26.0.1+8.orig-googletest.tar.xz
03f42c5588f1e8def94aa021e9e05f6da54e0b7d 75549444 openjdk-26_26.0.1+8.orig.tar.xz
955ca43a263373729611d20b83c194e933fd2226 379612 openjdk-26_26.0.1+8-1.debian.tar.xz
d3954fcafb2e91de0e9efe2c21301fac76d0c00b 20936 openjdk-26_26.0.1+8-1_source.buildinfo
Checksums-Sha256:
66de8976a2763e9d7f1417393a3101a96602c552b403699dfcfc1f4a7e4404cd 5175 openjdk-26_26.0.1+8-1.dsc
6e6699c442cd6bc008140d159b43a7a39bb811d1ecd380cf3b707cc535e04393 613408 openjdk-26_26.0.1+8.orig-googletest.tar.xz
1b430fb11a8b7b0107c5c8b8a50b6677e4451acbcfce4b7a1e664836ea2969e8 75549444 openjdk-26_26.0.1+8.orig.tar.xz
2104ff4d066390781e1882f49b5486cca8e8c2b8faef2efd501db58cceab6298 379612 openjdk-26_26.0.1+8-1.debian.tar.xz
f271956b18815827a434ae0999d8c93f2dfcd640dd607d763dd4febaba1ecabd 20936 openjdk-26_26.0.1+8-1_source.buildinfo
Files:
72250652662f415600fc3b0deb21a1d4 5175 java optional openjdk-26_26.0.1+8-1.dsc
ae1c58d38d39133ebcdc47e09d77a661 613408 java optional openjdk-26_26.0.1+8.orig-googletest.tar.xz
badf52baf2b0cfc16ff2e894167a9016 75549444 java optional openjdk-26_26.0.1+8.orig.tar.xz
e1200544c5684cc8ee2d18965bbd12ad 379612 java optional openjdk-26_26.0.1+8-1.debian.tar.xz
ea7815bb5e9a0977c8b68e6d1f639b05 20936 java optional openjdk-26_26.0.1+8-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=6gDH
-----END PGP SIGNATURE-----
