-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 21 Oct 2018 12:23:32 +0200 Source: openjdk-8 Binary: openjdk-8-jdk-headless openjdk-8-jre-headless openjdk-8-jdk openjdk-8-jre openjdk-8-demo openjdk-8-source openjdk-8-doc openjdk-8-dbg openjdk-8-jre-zero Architecture: source Version: 8u181-b13-2 Distribution: unstable Urgency: high Maintainer: OpenJDK Team <openjdk@lists.launchpad.net> Changed-By: Matthias Klose <doko@ubuntu.com> Description: openjdk-8-dbg - Java runtime based on OpenJDK (debugging symbols) openjdk-8-demo - Java runtime based on OpenJDK (demos and examples) openjdk-8-doc - OpenJDK Development Kit (JDK) documentation openjdk-8-jdk - OpenJDK Development Kit (JDK) openjdk-8-jdk-headless - OpenJDK Development Kit (JDK) (headless) openjdk-8-jre - OpenJDK Java runtime, using openjdk-8-jre-headless - OpenJDK Java runtime, using (headless) openjdk-8-jre-zero - Alternative JVM for OpenJDK, using Zero/Shark openjdk-8-source - OpenJDK Development Kit (JDK) source files Closes: 910672 Changes: openjdk-8 (8u181-b13-2) unstable; urgency=high . [ Tiago Stürmer Daitx ] * Apply patches from 8u191-b12 security update. - CVE-2018-3136, S8194534: Manifest better support. - CVE-2018-3139, S8196902: Better HTTP Redirection. - CVE-2018-3149, S8199177: Enhance JNDI lookups. - CVE-2018-3169, S8199226: Improve field accesses. - CVE-2018-3180, S8202613: Improve TLS connections stability. - CVE-2018-3183, S8202936: Improve script engine support. - CVE-2018-3214, S8205361: Better RIFF reading support. - CVE-2018-3211: Unspecified vulnerability in the Serviceability component. - S8195868: Address Internet Addresses. - S8195874: Improve jar specification adherence. - S8201756: Improve cipher inputs. - S8203654: Improve cypher state updates. - S8204497: Better formatting of decimals. * debian/patches/jdk-freetypeScaler-crash.diff: removed as this patch causes a memory leak; upstream fixed it in openjdk-7, albeit in a different way. Closes: #910672. . [ Matthias Klose ] * Bump standards version. Checksums-Sha1: 655a0c359c43a2ad64249c7086fa6af2dfa9a81a 4496 openjdk-8_8u181-b13-2.dsc 64fd4a378d0a067f3a4da4d5e5051f849bc4d04e 255640 openjdk-8_8u181-b13-2.debian.tar.xz b851266a96836ce1f9c7b3abd20548cd7cc20346 17455 openjdk-8_8u181-b13-2_source.buildinfo Checksums-Sha256: 73824b4b81020527c3ce278762f548f593eee5fb5817b24bf2d1b8f7a1ce2d19 4496 openjdk-8_8u181-b13-2.dsc dc5b1f9cccd31a3f368dfbe87f505afd9eeb70221f9295dfe7094d6c9f3f7705 255640 openjdk-8_8u181-b13-2.debian.tar.xz 4a8aa6ff4c5327fc6f5e7a20c78050c7151fe8cda0922d58f1b202b5cbd394f9 17455 openjdk-8_8u181-b13-2_source.buildinfo Files: 6929e18d05de560d845e19d2dbd237c3 4496 java optional openjdk-8_8u181-b13-2.dsc 5567145c1e0a441a1e0b68b7f5c49940 255640 java optional openjdk-8_8u181-b13-2.debian.tar.xz 41c6bc769e702239db53659c38236473 17455 java optional openjdk-8_8u181-b13-2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJEBAEBCAAuFiEE1WVxuIqLuvFAv2PWvX6qYHePpvUFAlvMU7EQHGRva29AdWJ1 bnR1LmNvbQAKCRC9fqpgd4+m9SrLEADDhAtrmNBO2uToVAFOtNH8SOEbcchWi5uR ZP5nfPxnR+cD0AV4Twa/2shqqt6wBndo4avJGcoSIWsxTx30sN1Ou+WiJ99PPf3W QEg1qh+c0ibCC2AObIlS5n7px+K64F0srRr6ZgFYL8sXBg9aDJBXqWrIBBbbmUXK H1JN+kITq2Psi+bt/mO6WSCkaUTjZVY9OMtOWX/H/QyODdVvBoZ2ow9eMdcq630S dS4/YT8xS0Q+8O5TseR4a2tVGb0rWg1KFfPJtduY3sR/ppr11du8bL/qdOXV7rok 9OG1XdRT++sB3eyqqaLuIOqWdq7njg+PgqV/j9SjaKAcA68uqWCbJkGUxS6WNvEw XkvD+gg4xX7HqkYTgwH2ye4ylx/WZg8E8hpDW5thasiV+3CKPhVmn8CGKj5NYoO6 g1a7wtHvDRkIHSzwrwcQ5HyB5ZyHPCV22eZS/b9j8Lsglr3yXaY/HtzgKwIHGb2r HGmKict284kMqsSU+uSfmjXG9Zud6OECbTzPpwQwHz2R8DLOSqqdsbzWfpYBTa5g 3PpxMnrwji9xV2S71O6gIka2CLvQWD7CelVJi/K5NmMpaE7nTKTuu4NAvztaVZ09 fIjCCd1Wu34kvgraSvsV+/Dlm0I1osQONX/lGDQXQO/doDf8iqUTXjFPS0QGCkRN VWhRd/uIwQ== =98D3 -----END PGP SIGNATURE-----