- openjdk-17 (17.0.18+8-1~deb12u1+rpi1) bookworm-staging; urgency=medium
++openjdk-17 (17.0.20+8-1~deb12u1+rpi1) bookworm-staging; urgency=medium
+
+ [changes taken from 17.0.4+8-1~deb11u1+rpt1 by Serge Schneider]
+ * Build with client jvm variant
+ - https://github.com/raspberrypi/linux/issues/3306#issuecomment-1030781000
+ * Default to client jvm on armhf
+
- -- Raspbian forward porter <root@raspbian.org> Mon, 26 Jan 2026 12:17:17 +0000
++ -- Raspbian forward porter <root@raspbian.org> Tue, 28 Jul 2026 19:36:10 +0000
+
- openjdk-17 (17.0.18+8-1~deb12u1) bookworm-security; urgency=medium
+ openjdk-17 (17.0.20+8-1~deb12u1) bookworm-security; urgency=medium
- * Rebuild for bookworm
+ * Non-maintainer upload by the LTS Team.
+ * Backport to bookworm.
- -- Moritz Mühlenhoff <jmm@debian.org> Thu, 22 Jan 2026 23:15:51 +0100
+ -- Emilio Pozuelo Monfort <pochu@debian.org> Mon, 27 Jul 2026 11:39:42 +0200
+
+ openjdk-17 (17.0.20+8-1) unstable; urgency=medium
+
+ * OpenJDK 17.0.20 release, build 8.
+ - CVEs:
+ + CVE-2026-46968
+ + CVE-2026-46917
+ + CVE-2026-47010
+ + CVE-2026-47021
+ + CVE-2026-47027
+ + CVE-2026-60147
+ + CVE-2026-47059
+ + CVE-2026-47063
+ + CVE-2026-41254
+ - Release notes: https://bit.ly/openjdk17020.
+ * d/watch: Regenerate.
+
+ -- Vladimir Petko <vladimir.petko@canonical.com> Wed, 22 Jul 2026 13:04:53 +1200
+
+ openjdk-17 (17.0.20~7ea-1) unstable; urgency=medium
+
+ * OpenJDK 17.0.20 early access, build 7.
+ * d/copyright: Regenerate.
+ * d/p/jdk-8387580-proposed.diff: Apply proposed patch to resolve
+ S390x ftbfs (JDK-8387580).
+ * d/t/problems.csv: Drop obsolete versions, add openjdk-28,
+ add new exclusions.
+
+ -- Vladimir Petko <vladimir.petko@canonical.com> Thu, 16 Jul 2026 16:12:15 +1200
+
+ openjdk-17 (17.0.20~5ea-1) unstable; urgency=medium
+
+ * OpenJDK 17.0.20 early access, build 5.
+ * d/rules: Do not perform copyright validation for old releases.
+ * d/rules: Check DEB_BUILD_PROFILES in addition to DEB_BUILD_OPTIONS
+ to set up with_check variable. Do not check control files if
+ with_check is disabled (Closes: #1137499).
+ * d/control.in: Add myself to uploaders.
+ * d/p/ldap-timeout-test-use-ip.patch: Refresh patch.
+ * d/JB-jre-{headless,zero}.overrides.in: Drop exit-in-shared-library
+ override.
+ * Regenerate files.
+
+ -- Vladimir Petko <vladimir.petko@canonical.com> Mon, 08 Jun 2026 12:54:18 +1200
+
+ openjdk-17 (17.0.19+10-1) unstable; urgency=medium
+
+ * OpenJDK 17.0.19 release, build 10.
+ - CVEs:
+ + CVE-2026-22016: 8370529: Enhance Path Factories Redux
+ + CVE-2026-34282: 8374557: Enhance TLS connection handling
+ + CVE-2026-22021: 8371830: Enhance certificate chain validation
+ + CVE-2026-22013: 8370615: Improve Kerberos credentialing
+ + CVE-2026-23865: 8379158: Update FreeType to 2.14.2
+ + CVE-2026-22018: 8370986: Enhance Zip file reading
+ + CVE-2026-22007: 8369575: Enhance crypto algorithm support
+ + CVE-2026-34268: 8371935: Enhance key generation
+ * d/rules: Check generated files only on amd64. This resolves riscv64
+ ftbfs, as some architectures change with_check flag.
+ * d/t/problems.csv: Fix typo in loong64 excluded tests lists.
+ * Add common GPL and Apache license headers to copyright generator.
+ * d/copyright: Regenerate.
+
+ -- Vladimir Petko <vladimir.petko@canonical.com> Fri, 24 Apr 2026 14:03:13 +1200
+
+ openjdk-17 (17.0.19~9ea-2) unstable; urgency=medium
+
+ * Ensure that all generated files are up to date:
+ - The copyright generator now checks if the current directory contains
+ an unpacked OpenJDK tree by verifying the presence of the
+ ASSEMBLY_EXCEPTION file.
+ - The copyright generator now drops common license text in-memory,
+ without running a shell script that modifies the source tree.
+ - d/rules: Add targets to generate all files and check that they match
+ the ones provided in the source package.
+ - d/rules: Add nogen DEB_BUILD_OPTION to disable file regeneration.
+ * d/rules: Use '-' instead of '~' in opt version string, swap package
+ version and distribution.
+
+ -- Vladimir Petko <vladimir.petko@canonical.com> Fri, 17 Apr 2026 09:49:19 +1200
+
+ openjdk-17 (17.0.19~9ea-1) unstable; urgency=medium
+
+ * OpenJDK 17.0.19 early access, build 9.
+ * d/rules: Revert replace '~' with '-' in the optional version string.
+ This should be resolved upstream.
+ * d/t/problems.csv: Update problem list.
+
+ -- Vladimir Petko <vladimir.petko@canonical.com> Mon, 16 Mar 2026 15:31:01 +1300
+
+ openjdk-17 (17.0.19~6ea-1) unstable; urgency=medium
+
+ * OpenJDK 17.0.19 early access, build 6.
+ * d/rules: Replace '~' with '-' in the optional version string.
+ * d/dbg.py: Fix syntax errors in gdb unwinder, do not install unwinder
+ for zero, install hotspot unwinder in the correct directory.
+ Disable debug traces. Load unwinder in the disabled state.
+ Return iterator rather than list from OpenJDKFrameFilter.flatten().
+ Remove unused code from NativeMethodInfo.
+
+ -- Vladimir Petko <vladimir.petko@canonical.com> Fri, 13 Mar 2026 14:44:35 +1300
openjdk-17 (17.0.18+8-1) unstable; urgency=medium
projects / openjdk-17.git / commitdiff