[ubuntu/resolute-updates] openjdk-25-crac 25.0.4+7-0ubuntu1~26.04 (Accepted)

[Ubuntu Archive Robot]

openjdk-25-crac (25.0.4+7-0ubuntu1~26.04) resolute-security; urgency=medium

  * Upload to Ubuntu 26.04.

openjdk-25-crac (25.0.4+7-0ubuntu1) stonking; urgency=medium

  * New release based on OpenJDK 25.0.4 release, build 7.
    - CVEs:
      + CVE-2026-46968
      + CVE-2026-46917
      + CVE-2026-47010
      + CVE-2026-47021
      + CVE-2026-47027
      + CVE-2026-60147
      + CVE-2026-47059
      + CVE-2026-47063
      + CVE-2026-41254
    - Release notes: https://bit.ly/openjdk2504
  * d/man: Regenerate.
  * d/rules: Do not perform copyright validation for old releases.
  * d/rules: Check DEB_BUILD_PROFILES in addition to DEB_BUILD_OPTIONS
    to set up with_check variable. Do not check control files if
    with_check is disabled (Closes: #1137499).
  * d/p/jdk-8385738.diff: Cherry-pick upstream patch to generate
    reproducible javadoc snippet ids (JDK-8385738).
  * d/p/{jdk-8369817.diff,missing-method-code.diff,
    zero-crac-ftbfs-fix.patch} : Drop patch applied upstream.

openjdk-25-crac (25.0.3+9-0ubuntu1) stonking; urgency=medium

  * New release based on OpenJDK 25.0.3 release, build 9.
    - CVEs:
      + CVE-2026-22016: 8370529: Enhance Path Factories Redux
      + CVE-2026-34282: 8374557: Enhance TLS connection handling
      + CVE-2026-22021: 8371830: Enhance certificate chain validation
      + CVE-2026-22013: 8370615: Improve Kerberos credentialing
      + CVE-2026-23865: 8379158: Update FreeType to 2.14.2
      + CVE-2026-22008: 8367463: Improved Arena allocations
      + CVE-2026-22018: 8370986: Enhance Zip file reading
      + CVE-2026-22007: 8369575: Enhance crypto algorithm support
      + CVE-2026-34268: 8371935: Enhance key generation
  * Synchronize packaging with openjdk-25:
    - d/t/jtreg-autopkgtest.in: Increase the timeout from 10 to 30 seconds
      on loong64 (zero VM).
    - Ensure that all generated files are up to date:
      + The copyright generator now checks if the current directory contains
        an unpacked OpenJDK tree by verifying the presence of the
        ASSEMBLY_EXCEPTION file.
      + The copyright generator now drops common license text in-memory,
        without running a shell script that modifies the source tree.
      + d/rules: Add targets to generate all files and check that they match
        the ones provided in the source package.
      + d/rules: Add nogen DEB_BUILD_OPTION to disable file regeneration.
    - d/{rules/control.in/test/control.in}: Replace dbus-x11 with dbus-
      daemon dependency. Closes: #1117100.
    - Use pre-generated man pages on architectures where pandoc is not
      available. Closes: #1128485.
    - d/rules: Use '-' instead of '~' in opt version string, swap package
      version and distribution.
    - d/dbg.py: Fix syntax errors in gdb unwinder, do not install unwinder
      for zero, install hotspot unwinder in the correct directory.
      Disable debug traces. Load unwinder in the disabled state.
      Return iterator rather than list from OpenJDKFrameFilter.flatten().
      Remove unused code from NativeMethodInfo.
    - d/rules: Synchornize with_check and any_arches variables with
      openjdk-25. Synchronize formatting.
    - d/p: Synchronize patches with openjdk-25.
  * d/p/missing-method-code.diff: Add missing include to resolve the
    link error.
  * Regenerate copyright and control files.

Date: 2026-07-31 19:46:11.201472+00:00
Changed-By: Pushkar Kulkarni <pushkar.kulkarni at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.4+7-0ubuntu1~26.04
-------------- next part --------------
Sorry, changesfile not available.