Accepted openjdk-8 8u322-ga-1 (source) into unstable
- To: debian-devel-changes@lists.debian.org
- Subject: Accepted openjdk-8 8u322-ga-1 (source) into unstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Thu, 21 Apr 2022 23:19:27 +0000
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Subject: Content-Transfer-Encoding:Content-Type:MIME-Version:To:Reply-To:From:Cc: Content-ID:Content-Description:In-Reply-To:References; bh=c64eD99GaIccOxPsuyDdkLD4qi7TpSedrsYcHBKRFAo=; b=CWQyBnUO2qE7desyMd1jhrGDpP hU4uXCzsOaDA/UuxZi3gBcCH9o5iU+k3trh6kPiGGfcS6KA9tUkprq8hkqnyoj0eg7BMLz5UDfZxo LwD10lo0pgAKNCCqxDVcL/HfdQhQ0UCoJpirXKpHUgzMRLXGJ5D60uesjApFbVQI0Hp1F9z7KOK5Z HFCf2U9RuoQZbXmqxai9IL3bpBcdeFcnceeiopACGwPVPprd3dJxvLXAP6U8FU/mOP/Xg2p2je94T QEZtmALDaScCXnjDYaebp/+A1p4P63xgUYfjEBMg97yQzHiCwdDWrszVhO/owD04MCJPvMgnH64qF ZRAPkNdw==;
- Mail-followup-to: debian-devel@lists.debian.org
- Message-id: <E1nhg59-00089E-Q2@fasolo.debian.org>
- Reply-to: debian-devel@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA384
Format: 1.8
Date: Thu, 21 Apr 2022 23:06:27 +0200
Source: openjdk-8
Architecture: source
Version: 8u322-ga-1
Distribution: unstable
Urgency: low
Maintainer: Java Maintenance <debian-java@lists.debian.org>
Changed-By: Thorsten Glaser <tg@mirbsd.de>
Changes:
openjdk-8 (8u322-ga-1) unstable; urgency=low
.
* Synchronise versions of G++ used with current distro defaults
* Switch to github-based download workflow
* Refresh patches, d/copyright, packaging
* New upstream release
* Security fixes:
- JDK-8264934, CVE-2022-21248: Enhance cross VM serialization
- JDK-8268488: More valuable DerValues
- JDK-8268494: Better inlining of inlined interfaces
- JDK-8268512: More content for ContentInfo
- JDK-8268795: Enhance digests of Jar files
- JDK-8268801: Improve PKCS attribute handling
- JDK-8268813, CVE-2022-21283: Better String matching
- JDK-8269151: Better construction of EncryptedPrivateKeyInfo
- JDK-8269944: Better HTTP transport redux
- JDK-8270392, CVE-2022-21293: Improve String constructions
- JDK-8270416, CVE-2022-21294: Enhance construction of
Identity maps
- JDK-8270492, CVE-2022-21282: Better resolution of URIs
- JDK-8270498, CVE-2022-21296: Improve SAX Parser configuration
management
- JDK-8270646, CVE-2022-21299: Improved scanning of XML entities
- JDK-8271962: Better TrueType font loading
- JDK-8271968: Better canonical naming
- JDK-8271987: Manifest improved manifest entries
- JDK-8272014, CVE-2022-21305: Better array indexing
- JDK-8272026, CVE-2022-21340: Verify Jar Verification
- JDK-8272236, CVE-2022-21341: Improve serial forms for transport
- JDK-8272272: Enhance jcmd communication
- JDK-8272462: Enhance image handling
- JDK-8273290: Enhance sound handling
- JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
- JDK-8273756, CVE-2022-21360: Enhance BMP image support
- JDK-8273838, CVE-2022-21365: Enhanced BMP processing
* Other changes: see
https://mail.openjdk.java.net/pipermail/jdk8u-dev/2022-January/014522.html
* Upload sponsored by ⮡ tarent
in preparation for a quick 8u332 once available
Checksums-Sha1:
90a9e4c9a437285d00a75208b137f3f5e128d569 4771 openjdk-8_8u322-ga-1.dsc
96fd37491051bdc300f91bd809733dc57f5691e4 73641305 openjdk-8_8u322-ga.orig.tar.gz
1a4f09f5a8a9805f847d0b8edfe39e8e89208476 177476 openjdk-8_8u322-ga-1.debian.tar.xz
Checksums-Sha256:
4e5d23271b6d40af0736216d33ae6c75602cc22c671d7c49df5ebc31aab60de1 4771 openjdk-8_8u322-ga-1.dsc
a4ae47cec4bb762df2a62ef76673f78de893f35d67fd64a33572394cb9594ee8 73641305 openjdk-8_8u322-ga.orig.tar.gz
fc088e56c5127de459e4d31856c10826d930d8fcc091e76f3511d97085f0b9aa 177476 openjdk-8_8u322-ga-1.debian.tar.xz
Files:
53f00b1e1797c7fd4ddbb02112833c83 4771 java optional openjdk-8_8u322-ga-1.dsc
b7b09774c79d3adb6cc6d56634a17d15 73641305 java optional openjdk-8_8u322-ga.orig.tar.gz
fa35cfce478922d0b04c1d9b5152d0fb 177476 java optional openjdk-8_8u322-ga-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (MirBSD)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=td2W
-----END PGP SIGNATURE-----