[ubuntu/resolute-security] openjdk-17-crac 17.0.20+8-0ubuntu1~26.04 (Accepted)

[John Breton]

openjdk-17-crac (17.0.20+8-0ubuntu1~26.04) resolute-security; urgency=medium

  * Upload to Ubuntu 26.04.

openjdk-17-crac (17.0.20+8-0ubuntu1) stonking; urgency=medium

  * New release based on OpenJDK 17.0.20 release, build 8.
    - CVEs:
      + CVE-2026-46968
      + CVE-2026-46917
      + CVE-2026-47010
      + CVE-2026-47021
      + CVE-2026-47027
      + CVE-2026-60147
      + CVE-2026-47059
      + CVE-2026-47063
      + CVE-2026-41254
    - Release notes: https://bit.ly/openjdk17020.
  * d/control, d/t/control: Bump the minimum jtreg version
    required by the testsuite to 7.5.2+1~.
  * d/copyright: Regenerate.
  * d/rules: Do not perform copyright validation for old releases.
  * d/rules: Check DEB_BUILD_PROFILES in addition to DEB_BUILD_OPTIONS
    to set up with_check variable. Do not check control files if
    with_check is disabled (Closes: #1137499).
  * d/p/ldap-timeout-test-use-ip.patch: Refresh patch.
  * d/JB-jre-{headless,zero}.overrides.in: Drop exit-in-shared-library
    override.

openjdk-17-crac (17.0.19+10-0ubuntu1) stonking; urgency=medium

  * New release based on OpenJDK 17.0.19 release, build 10.
    - CVEs:
      + CVE-2026-22016: 8370529: Enhance Path Factories Redux
      + CVE-2026-34282: 8374557: Enhance TLS connection handling
      + CVE-2026-22021: 8371830: Enhance certificate chain validation
      + CVE-2026-22013: 8370615: Improve Kerberos credentialing
      + CVE-2026-23865: 8379158: Update FreeType to 2.14.2
      + CVE-2026-22018: 8370986: Enhance Zip file reading
      + CVE-2026-22007: 8369575: Enhance crypto algorithm support
      + CVE-2026-34268: 8371935: Enhance key generation
  * Ensure that all generated files are up to date:
    - The copyright generator now checks if the current directory contains
      an unpacked OpenJDK tree by verifying the presence of the
      ASSEMBLY_EXCEPTION file.
    - The copyright generator now drops common license text in-memory,
      without running a shell script that modifies the source tree.
    - d/rules: Add targets to generate all files and check that they match
      the ones provided in the source package.
    - d/rules: Add nogen DEB_BUILD_OPTION to disable file regeneration.
  * d/rules: Use '-' instead of '~' in opt version string, swap package
    version and distribution.
  * d/dbg.py: Fix syntax errors in gdb unwinder, do not install unwinder
    for zero, install hotspot unwinder in the correct directory.
    Disable debug traces. Load unwinder in the disabled state.
    Return iterator rather than list from OpenJDKFrameFilter.flatten().
    Remove unused code from NativeMethodInfo.
  * d/p: Refresh patches.
  * d/copyright: Regenerate.
  * d/rules: Synchronize with_check condition with openjdk-17.

Date: 2026-07-31 19:41:11.558704+00:00
Changed-By: Pushkar Kulkarni <pushkar.kulkarni at canonical.com>
Signed-By: John Breton <john.breton at canonical.com>
https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.20+8-0ubuntu1~26.04
-------------- next part --------------
Sorry, changesfile not available.