[ubuntu/jammy-security] openjdk-17 17.0.20+8-1~22.04 (Accepted)

John Breton john.breton at canonical.com
Tue Aug 25 12:28:32 UTC 2026


openjdk-17 (17.0.20+8-1~22.04) jammy-security; urgency=medium

  * Upload to Ubuntu 22.04.
  * d/control: regenerate for jammy

openjdk-17 (17.0.20+8-1) unstable; urgency=medium

  * OpenJDK 17.0.20 release, build 8.
    - CVEs:
      + CVE-2026-46968
      + CVE-2026-46917
      + CVE-2026-47010
      + CVE-2026-47021
      + CVE-2026-47027
      + CVE-2026-60147
      + CVE-2026-47059
      + CVE-2026-47063
      + CVE-2026-41254
    - Release notes: https://bit.ly/openjdk17020.
  * d/watch: Regenerate.

openjdk-17 (17.0.20~7ea-1) unstable; urgency=medium

  * OpenJDK 17.0.20 early access, build 7.
  * d/copyright: Regenerate.
  * d/p/jdk-8387580-proposed.diff: Apply proposed patch to resolve
    S390x ftbfs (JDK-8387580).
  * d/t/problems.csv: Drop obsolete versions, add openjdk-28,
    add new exclusions.

openjdk-17 (17.0.20~5ea-1) unstable; urgency=medium

  * OpenJDK 17.0.20 early access, build 5.
  * d/rules: Do not perform copyright validation for old releases.
  * d/rules: Check DEB_BUILD_PROFILES in addition to DEB_BUILD_OPTIONS
    to set up with_check variable. Do not check control files if
    with_check is disabled (Closes: #1137499).
  * d/control.in: Add myself to uploaders.
  * d/p/ldap-timeout-test-use-ip.patch: Refresh patch.
  * d/JB-jre-{headless,zero}.overrides.in: Drop exit-in-shared-library
    override.
  * Regenerate files.

openjdk-17 (17.0.19+10-1) unstable; urgency=medium

  * OpenJDK 17.0.19 release, build 10.
    - CVEs:
      + CVE-2026-22016: 8370529: Enhance Path Factories Redux
      + CVE-2026-34282: 8374557: Enhance TLS connection handling
      + CVE-2026-22021: 8371830: Enhance certificate chain validation
      + CVE-2026-22013: 8370615: Improve Kerberos credentialing
      + CVE-2026-23865: 8379158: Update FreeType to 2.14.2
      + CVE-2026-22018: 8370986: Enhance Zip file reading
      + CVE-2026-22007: 8369575: Enhance crypto algorithm support
      + CVE-2026-34268: 8371935: Enhance key generation
  * d/rules: Check generated files only on amd64. This resolves riscv64
    ftbfs, as some architectures change with_check flag.
  * d/t/problems.csv: Fix typo in loong64 excluded tests lists.
  * Add common GPL and Apache license headers to copyright generator.
  * d/copyright: Regenerate.

Date: 2026-07-23 13:51:54.303530+00:00
Changed-By: Pushkar Kulkarni <pushkar.kulkarni at canonical.com>
Signed-By: John Breton <john.breton at canonical.com>
https://launchpad.net/ubuntu/+source/openjdk-17/17.0.20+8-1~22.04
-------------- next part --------------
Sorry, changesfile not available.


More information about the jammy-changes mailing list