From: Raspbian automatic forward porter Date: Tue, 28 Jul 2026 19:36:12 +0000 (+0100) Subject: Merge version 17.0.18+8-1~deb12u1+rpi1 and 17.0.20+8-1~deb12u1 to produce 17.0.20... X-Git-Tag: archive/raspbian/17.0.20+8-1_deb12u1+rpi1^0 X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=e6866d748ffb5195c06ebe6e12e93967452f508b;p=openjdk-17.git Merge version 17.0.18+8-1~deb12u1+rpi1 and 17.0.20+8-1~deb12u1 to produce 17.0.20+8-1~deb12u1+rpi1 --- e6866d748ffb5195c06ebe6e12e93967452f508b diff --cc debian/changelog index 4ddbee525,7d3d5f568..4a43b8662 --- a/debian/changelog +++ b/debian/changelog @@@ -1,17 -1,110 +1,119 @@@ - openjdk-17 (17.0.18+8-1~deb12u1+rpi1) bookworm-staging; urgency=medium ++openjdk-17 (17.0.20+8-1~deb12u1+rpi1) bookworm-staging; urgency=medium + + [changes taken from 17.0.4+8-1~deb11u1+rpt1 by Serge Schneider] + * Build with client jvm variant + - https://github.com/raspberrypi/linux/issues/3306#issuecomment-1030781000 + * Default to client jvm on armhf + - -- Raspbian forward porter Mon, 26 Jan 2026 12:17:17 +0000 ++ -- Raspbian forward porter Tue, 28 Jul 2026 19:36:10 +0000 + - openjdk-17 (17.0.18+8-1~deb12u1) bookworm-security; urgency=medium + openjdk-17 (17.0.20+8-1~deb12u1) bookworm-security; urgency=medium - * Rebuild for bookworm + * Non-maintainer upload by the LTS Team. + * Backport to bookworm. - -- Moritz Mühlenhoff Thu, 22 Jan 2026 23:15:51 +0100 + -- Emilio Pozuelo Monfort Mon, 27 Jul 2026 11:39:42 +0200 + + openjdk-17 (17.0.20+8-1) unstable; urgency=medium + + * OpenJDK 17.0.20 release, build 8. + - CVEs: + + CVE-2026-46968 + + CVE-2026-46917 + + CVE-2026-47010 + + CVE-2026-47021 + + CVE-2026-47027 + + CVE-2026-60147 + + CVE-2026-47059 + + CVE-2026-47063 + + CVE-2026-41254 + - Release notes: https://bit.ly/openjdk17020. + * d/watch: Regenerate. + + -- Vladimir Petko Wed, 22 Jul 2026 13:04:53 +1200 + + openjdk-17 (17.0.20~7ea-1) unstable; urgency=medium + + * OpenJDK 17.0.20 early access, build 7. + * d/copyright: Regenerate. + * d/p/jdk-8387580-proposed.diff: Apply proposed patch to resolve + S390x ftbfs (JDK-8387580). + * d/t/problems.csv: Drop obsolete versions, add openjdk-28, + add new exclusions. + + -- Vladimir Petko Thu, 16 Jul 2026 16:12:15 +1200 + + openjdk-17 (17.0.20~5ea-1) unstable; urgency=medium + + * OpenJDK 17.0.20 early access, build 5. + * d/rules: Do not perform copyright validation for old releases. + * d/rules: Check DEB_BUILD_PROFILES in addition to DEB_BUILD_OPTIONS + to set up with_check variable. Do not check control files if + with_check is disabled (Closes: #1137499). + * d/control.in: Add myself to uploaders. + * d/p/ldap-timeout-test-use-ip.patch: Refresh patch. + * d/JB-jre-{headless,zero}.overrides.in: Drop exit-in-shared-library + override. + * Regenerate files. + + -- Vladimir Petko Mon, 08 Jun 2026 12:54:18 +1200 + + openjdk-17 (17.0.19+10-1) unstable; urgency=medium + + * OpenJDK 17.0.19 release, build 10. + - CVEs: + + CVE-2026-22016: 8370529: Enhance Path Factories Redux + + CVE-2026-34282: 8374557: Enhance TLS connection handling + + CVE-2026-22021: 8371830: Enhance certificate chain validation + + CVE-2026-22013: 8370615: Improve Kerberos credentialing + + CVE-2026-23865: 8379158: Update FreeType to 2.14.2 + + CVE-2026-22018: 8370986: Enhance Zip file reading + + CVE-2026-22007: 8369575: Enhance crypto algorithm support + + CVE-2026-34268: 8371935: Enhance key generation + * d/rules: Check generated files only on amd64. This resolves riscv64 + ftbfs, as some architectures change with_check flag. + * d/t/problems.csv: Fix typo in loong64 excluded tests lists. + * Add common GPL and Apache license headers to copyright generator. + * d/copyright: Regenerate. + + -- Vladimir Petko Fri, 24 Apr 2026 14:03:13 +1200 + + openjdk-17 (17.0.19~9ea-2) unstable; urgency=medium + + * Ensure that all generated files are up to date: + - The copyright generator now checks if the current directory contains + an unpacked OpenJDK tree by verifying the presence of the + ASSEMBLY_EXCEPTION file. + - The copyright generator now drops common license text in-memory, + without running a shell script that modifies the source tree. + - d/rules: Add targets to generate all files and check that they match + the ones provided in the source package. + - d/rules: Add nogen DEB_BUILD_OPTION to disable file regeneration. + * d/rules: Use '-' instead of '~' in opt version string, swap package + version and distribution. + + -- Vladimir Petko Fri, 17 Apr 2026 09:49:19 +1200 + + openjdk-17 (17.0.19~9ea-1) unstable; urgency=medium + + * OpenJDK 17.0.19 early access, build 9. + * d/rules: Revert replace '~' with '-' in the optional version string. + This should be resolved upstream. + * d/t/problems.csv: Update problem list. + + -- Vladimir Petko Mon, 16 Mar 2026 15:31:01 +1300 + + openjdk-17 (17.0.19~6ea-1) unstable; urgency=medium + + * OpenJDK 17.0.19 early access, build 6. + * d/rules: Replace '~' with '-' in the optional version string. + * d/dbg.py: Fix syntax errors in gdb unwinder, do not install unwinder + for zero, install hotspot unwinder in the correct directory. + Disable debug traces. Load unwinder in the disabled state. + Return iterator rather than list from OpenJDKFrameFilter.flatten(). + Remove unused code from NativeMethodInfo. + + -- Vladimir Petko Fri, 13 Mar 2026 14:44:35 +1300 openjdk-17 (17.0.18+8-1) unstable; urgency=medium diff --cc debian/patches/series index 643927f7c,9caa7e144..d18bd39ba --- a/debian/patches/series +++ b/debian/patches/series @@@ -39,4 -39,4 +39,5 @@@ jdk-8334502-proposed.patc jdk-8336529-proposed.patch jdk-8312488.patch jdk-8359735.patch + jdk-8387580.diff +client_default.diff