This bug was fixed in the package openjdk-8 - 8u392-ga-1 Sponsored for Vladimir Petko (vpa1977)
--------------- openjdk-8 (8u392-ga-1) unstable; urgency=low [ Emmanuel Bourg ] * Provide versioned java-runtime, java-runtime-headless, java-sdk and java-sdk-headless virtual packages [ Thorsten Glaser ] * Link with -Wl,--no-as-needed like openjdk-11 in case 8u ever loses the mapfiles (cf. #1031521) * Depend on libasmtools-java on buster, bullseye as well * New upstream release * CVEs - CVE-2023-22067 - CVE-2023-22081 * Security fixes - JDK-8286503, JDK-8312367: Enhance security classes - JDK-8297856: Improve handling of Bidi characters - JDK-8303384: Improved communication in CORBA - JDK-8305815, JDK-8307278: Update Libpng to 1.6.39 (not relevant, as we use the system libraries) - JDK-8309966: Enhanced TLS connections * Other changes see https://mail.openjdk.org/pipermail/jdk8u-dev/2023-October/017616.html * Use b07 for aarch32, patch it to b08/ga, aarch32-b08 doesn’t exist yet * Update pathnames used by the embedded library removal code (repacking) * Overhaul d/copyright using both upstream notices and diff review * Upload sponsored by QVEST ⮡ dıgıtal -- Thorsten Glaser <t...@mirbsd.de> Sat, 21 Oct 2023 21:26:54 +0200 openjdk-8 (8u382-ga-2) unstable; urgency=low * Update 8u382-ga-1 changelog entry * On releases that have it, switch to libjpeg-dev B-D so that certain derivatives can reuse d/control (Closes: #1042855) * Use default gcc-13 on trixie/sid, mantic -- Thorsten Glaser <t...@mirbsd.de> Thu, 03 Aug 2023 02:55:51 +0200 ** Changed in: openjdk-8 (Ubuntu) Status: Triaged => Fix Released ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-22067 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-22081 -- You received this bug notification because you are a member of OpenJDK, which is subscribed to openjdk-8 in Ubuntu. https://bugs.launchpad.net/bugs/2040352 Title: Please sync openjdk-8 8u392-ga-1 from Debian unstable to Noble Status in openjdk-8 package in Ubuntu: Fix Released Bug description: Please sync openjdk-8 8u392-ga-1 from Debian unstable to Noble. The Ubuntu delta was integrated in openjdk-8 8u382-ga-2[1]. PPA build[2]. [1] https://tracker.debian.org/news/1449978/accepted-openjdk-8-8u382-ga-2-source-into-unstable/ [2] https://launchpad.net/~vpa1977/+archive/ubuntu/october-21/+sourcepub/15334827/+listing-archive-extra To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openjdk-8/+bug/2040352/+subscriptions _______________________________________________ Mailing list: https://launchpad.net/~openjdk Post to : openjdk@lists.launchpad.net Unsubscribe : https://launchpad.net/~openjdk More help : https://help.launchpad.net/ListHelp