openjdk team mailing list archive

[Bryce Harrington <2040352@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package openjdk-8 - 8u392-ga-1
Sponsored for Vladimir Petko (vpa1977)

---------------
openjdk-8 (8u392-ga-1) unstable; urgency=low

  [ Emmanuel Bourg ]
  * Provide versioned java-runtime, java-runtime-headless, java-sdk
    and java-sdk-headless virtual packages

  [ Thorsten Glaser ]
  * Link with -Wl,--no-as-needed like openjdk-11 in case 8u ever loses
    the mapfiles (cf. #1031521)
  * Depend on libasmtools-java on buster, bullseye as well
  * New upstream release
  * CVEs
    - CVE-2023-22067
    - CVE-2023-22081
  * Security fixes
    - JDK-8286503, JDK-8312367: Enhance security classes
    - JDK-8297856: Improve handling of Bidi characters
    - JDK-8303384: Improved communication in CORBA
    - JDK-8305815, JDK-8307278: Update Libpng to 1.6.39
      (not relevant, as we use the system libraries)
    - JDK-8309966: Enhanced TLS connections
  * Other changes see
    https://mail.openjdk.org/pipermail/jdk8u-dev/2023-October/017616.html
  * Use b07 for aarch32, patch it to b08/ga, aarch32-b08 doesn’t exist yet
  * Update pathnames used by the embedded library removal code (repacking)
  * Overhaul d/copyright using both upstream notices and diff review
  * Upload sponsored by QVEST ⮡ dıgıtal

 -- Thorsten Glaser <tg@xxxxxxxxx>  Sat, 21 Oct 2023 21:26:54 +0200

openjdk-8 (8u382-ga-2) unstable; urgency=low

  * Update 8u382-ga-1 changelog entry
  * On releases that have it, switch to libjpeg-dev B-D so that
    certain derivatives can reuse d/control (Closes: #1042855)
  * Use default gcc-13 on trixie/sid, mantic

 -- Thorsten Glaser <tg@xxxxxxxxx>  Thu, 03 Aug 2023 02:55:51 +0200

** Changed in: openjdk-8 (Ubuntu)
       Status: Triaged => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-22067

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-22081

-- 
You received this bug notification because you are a member of OpenJDK,
which is subscribed to openjdk-8 in Ubuntu.
https://bugs.launchpad.net/bugs/2040352

Title:
  Please sync openjdk-8 8u392-ga-1 from Debian unstable to Noble

Status in openjdk-8 package in Ubuntu:
  Fix Released

Bug description:
  Please sync openjdk-8 8u392-ga-1 from Debian unstable to Noble.

  The Ubuntu delta was integrated in openjdk-8 8u382-ga-2[1].

  PPA build[2].

  
  [1] https://tracker.debian.org/news/1449978/accepted-openjdk-8-8u382-ga-2-source-into-unstable/
  [2] https://launchpad.net/~vpa1977/+archive/ubuntu/october-21/+sourcepub/15334827/+listing-archive-extra

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openjdk-8/+bug/2040352/+subscriptions