[ubuntu/lunar-security] openjdk-17 17.0.8+7-1~23.04 (Accepted)

[Eduardo Barretto]

openjdk-17 (17.0.8+7-1~23.04) lunar-security; urgency=high

  * Upload to Ubuntu 23.04.
  * d/t/jtreg-autopkgtest.{sh,in}: JDK-8232153 - set NSS_DEFAULT_DB_TYPE
    to let sun/security/pkcs11/Secmod/AddTrustedCert.java pass.
  * d/p/exclude-broken-tests.patch: disable pkcs11 tests failing with
    NSS 3.91.
  * d/t/problems-armhf.txt: disable armf tests -
    java/util/Random/RandomTestBsi1999.java (deadlock in CI),
    java/net/httpclient/ManyRequestsLegacy.java (SSL request timeout).
  * Enable jtreg tests for bionic and focal.

openjdk-17 (17.0.8+7-1) unstable; urgency=high

  * OpenJDK 17.0.8 release, build 7.
    - CVE-2023-22006, CVE-2023-22036, CVE-2023-22041, CVE-2023-22044,
      CVE-2023-22045, CVE-2023-22049, CVE-2023-25193.
    - Release notes:
      https://www.oracle.com/java/technologies/javase/17-0-8-relnotes.html#R17_0_8

  * Don't run the tests on powerpc, hangs on the buildd.
  * Refresh patches.

openjdk-17 (17.0.8~6-5) unstable; urgency=medium

  * Revert back to the riscv64 hotspot patch to v7.

openjdk-17 (17.0.8~6-4) unstable; urgency=medium

  [ Matthias Klose ]
  * Update the riscv64 hotspot patch to v9.
  * Run the hotspot tests on riscv64.
  * Link with --no-as-needed. Closes: #1031521.
  * d/rules: Remove EXTRA_.*FLAGS_JDK macros.
  * Fix FTCBFS: Add libffi-dev:native to B-D (Helmut Grohne).

  [ Vladimir Petko ]
  * Disable runtime/jni/nativeStack/TestNativeStack.java for armhf pending
    upstream fix.

openjdk-17 (17.0.8~6-3) unstable; urgency=medium

  [ Vladimir Petko ]
  * Use libtestng7-java as jtreg6 dependency as TestNG 7.x is required
    at runtime.
  * Regenerate the control file.

openjdk-17 (17.0.8~6-2) unstable; urgency=medium

  * Provide versioned java-runtime, java-runtime-headless, java-sdk
    and java-sdk-headless virtual packages (Emmanuel Bourg). Closes: #1023869.
  * Install jhsb binary and man page on riscv64.
  * Bump standards version.

openjdk-17 (17.0.8~6-1) experimental; urgency=medium

  * OpenJDK 17.0.8 early access, build 6.
  * Bump debhelper version to 11.

openjdk-17 (17.0.7+7-2) unstable; urgency=medium

  [ Vladimir Petko ]
  * d/rules: backport testng selection logic.

  [ Matthias Klose ]
  * Apply the backport patch for 8276799 (RISC-V Hotspot).
  * Build both JREs (hotspot and zero) on riscv64.

openjdk-17 (17.0.7+7-1) unstable; urgency=high

  * OpenJDK 17.0.7 release, build 7.
    - CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939,
      CVE-2023-21954, CVE-2023-21967, CVE-2023-21968.
    - Release notes:
      https://mail.openjdk.org/pipermail/jdk-updates-dev/2023-April/021899.html

  [ Vladimir Petko ]
  * Refresh patches.
  * debian/copyright: Convert to machine readable format.
  * Update watch file.
  * Update tag and version handling in the rules file.
  * debian/JB-jre-headless.postinst.in: trigger ca-certificates-java after
    the JRE is set up.
  * d/control: add jtreg6 dependencies, regenerate control.
  * d/rules: only compile google tests when with_check is enabled, disable them
    for bullseye and jammy.
  * d/rules: always use jtreg6.
  * d/p/exclude-broken-tests.patch: add OpenJDK 17 failures.
  * d/p/*: add patches for jtreg tests:
    - disable-thumb-assertion.patch: fix JDK-8305481.
    - update-assertion-for-armhf.patch: fix JDK-8305480.
    - misalign-pointer-for-armhf.patch: packaging-specific patch to fix test
    - failure introduced by d/p/m68k-support.diff.
    - log-generated-classes-test.patch: workaround JDK-8166162.
    - update-permission-test.patch: add security permissions for testng 7.
    - ldap-timeout-test-use-ip.patch, test-use-ip-address.patch: Ubuntu-specific
    - patches to workaround missing DNS resolver on the build machines.
    - exclude_broken_tests.patch: quarantine failing tests.
  * d/t/{jdk,hotspot,jaxp,lantools}: run tier1 and tier2 jtreg tests only,
  * add test options from OpenJDK Makefile, patch problem list to exclude
    architecture-specific failing tests.
  * d/t/*: fix test environment: add missing -nativepath (LP: #2001563).
  * d/t/jdk: provide dbus session for the window manager (LP: #2001576).
  * d/t/jtreg-autopkgtest.in: pass JTREG home to locate junit.jar, regenerate
  * d/t/jtreg-autopkgtest.sh (LP: #2016206).
  * d/rules: pack external debug symbols with build-id, do not strip JVM shared
    libraries (LP: #2012326, LP: #2016739).
  * drop d/p/{jaw-classpath.diff, jaw-optional.diff}: the atk wrapper is
    disabled and these patches cause class data sharing tests to fail.
    LP: #2016194.

Date: 2023-07-20 09:16:08.261688+00:00
Changed-By: Vladimir Petko <vladimir.petko at canonical.com>
Signed-By: Eduardo Barretto <eduardo.barretto at canonical.com>
https://launchpad.net/ubuntu/+source/openjdk-17/17.0.8+7-1~23.04
-------------- next part --------------
Sorry, changesfile not available.