OpenJDK Team [Wed, 17 Jan 2024 11:09:47 +0000 (12:09 +0100)]
Misalign address in the test rather than structure
mk68-support.diff aligned metaspace structures by 4 bytes breaking the test.
Add 1 to address type rather than aligned structure to produce misaligned pointer.
jexec uses argv[0] parameter to find its own location.
argv[0] is populated with the command value causing a failure to locate java
when jexec is found in the PATH (in this case argv[0] contains just 'jexec')
The cause is the use of dh_strip_nondeterminism late in the build
process. This reorganises the jmod files, which in turn changes their
SHA256 checksums. This would not be a problem, except that the
checksums are saved in java.base.jmod *before* the use of
dh_strip_nondeterminism. Performing this stripping immediately after
each jmod file is created results in the checksums being consistent
throughout.
OpenJDK Team [Wed, 17 Jan 2024 11:09:47 +0000 (12:09 +0100)]
Revert upstream default to GTK2
OpenJDK 11 uses GTK3 by default for the GTK Look and Feel but it still
has too many pending issues and artifacts and is not on par with GTK2
support. This patch is the reverse of the upstream commit which ensures
that GTK2 is tried before GTK3.
When GTK3 becomes better supported we should drop this and update the
dlopen_jre_depends variable in debian/rules accordingly.
Origin: upstream, http://hg.openjdk.java.net/jdk-updates/jdk11u/rev/3e3696a308e1
Bug: https://bugs.openjdk.java.net/browse/JDK-8198649,
https://bugs.java.com/bugdatabase/view_bug.do?bug_id=JDK-8198654
Bug-Ubuntu: https://launchpad.net/bugs/1770278
Forwarded: not-needed
Applied-Upstream: http//hg.openjdk.java.net/jdk-updates/jdk11u/rev/3e3696a308e1 Reviewed-by: <name and email of a reviewer, optional>
Last-Update: 2019-03-27 <YYYY-MM-DD, last update of the meta-information, optional>
Matthias Klose [Wed, 17 Jan 2024 11:09:47 +0000 (12:09 +0100)]
openjdk-17 (17.0.10+7-1) unstable; urgency=high
* OpenJDK 17.0.10 release, build 7.
- CVEs:
+ CVE-2024-20918
+ CVE-2024-20919
+ CVE-2024-20921
+ CVE-2024-20932
+ CVE-2024-20945
+ CVE-2024-20952
- Security fixes:
+ JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a file entry
when there is a directory entry of the same name within a Zip File.
+ JDK-8308204: Enhanced certificate processing.
+ JDK-8314295: Enhance verification of verifier.
+ JDK-8314307: Improve loop handling.
+ JDK-8314468: Improve Compiler loops.
+ JDK-8316976: Improve signature handling.
+ JDK-8317547: Enhance TLS connection support.
[ Vladimir Petko ]
* d/t/jtreg-autopkgtest.sh: Regenerate test script.
* Generate d/watch to cope with early access and release builds.
* d/rules: Trim trailing whitespaces from debian/control.
[ Matthias Klose ]
* Build again zero on amd64 (accidental change in 6ea-1).
[ Pushkar Kulkarni ]
* Minor improvements to the copyright-generator.