openjdk-17 (17.0.15+6~us1-0ubuntu1~20.04) focal-security; urgency=medium

  * OpenJDK 17.0.15 release, build 6. Release notes:
    https://mail.openjdk.org/pipermail/jdk-updates-dev/2025-April/043307.html

    - CVEs:
      + CVE-2025-21587
      + CVE-2025-30691
      + CVE-2025-30698

  [ Matthias Klose ]
  * Honour DEB_BUILD_OPTIONS=parallel=N while running jtreg tests (Helmut
    Grohne). Addresses: #1095920.

  [ Pushkar Kulkarni ]
  * d/control: regenerate for Ubuntu 20.04
  * Upload to Ubuntu 20.04

 -- Pushkar Kulkarni <pushkar.kulkarni@canonical.com>  Thu, 17 Apr 2025 11:54:53 +0530

openjdk-17 (17.0.15~5ea-1) unstable; urgency=medium

  * OpenJDK 17.0.14 early access, build 5.

  [ Vladimir Petko ]
  * d/t/problems.csv: Disable tests failing due to upstream bugs.

 -- Matthias Klose <doko@ubuntu.com>  Thu, 27 Mar 2025 13:35:58 +0100

openjdk-17 (17.0.15~4ea-1) unstable; urgency=medium

  * OpenJDK 17.0.14 early access, build 4.

  [ Vladimir Petko ]
  * d/rules: Disable dtrace on jammy armhf (was not enabled before and cannot
    be built due to a GCC ICE (see LP #2091225).

 -- Matthias Klose <doko@ubuntu.com>  Sat, 15 Mar 2025 09:45:37 +0100

openjdk-17 (17.0.14+7-1) unstable; urgency=medium

  * OpenJDK 17.0.14 release, build 7. Release notes:
    https://mail.openjdk.org/pipermail/jdk-updates-dev/2025-January/040827.html

    - CVEs:
      + CVE-2025-21502 - 8330045: Enhance array handling.

  [ Vladimir Petko ]
  * d/rules: Dump complete hs_err_pid and replay_pid logs to stdout.
  * d/t/problems.csv: Add openjdk-24 and openjdk-25 to the problems.csv.
  * d/rules: Create link to jquery-3.7.1.min.js instead of jquery-3.6.1.min.js
    (LP: #2095455).
  * d/copyright: Regenerate.

  [ Matthias Klose ]
  * d/rules: Also dump logs for zero builds and for build failures.

 -- Matthias Klose <doko@ubuntu.com>  Wed, 22 Jan 2025 10:17:58 +0100

openjdk-17 (17.0.14~6ea-1) unstable; urgency=medium

  * OpenJDK 17.0.14 early access, build 6.

  [ Pushkar Kulkarni ]
  * d/t/problems.csv: Update based on recent JTREG runs.

 -- Matthias Klose <doko@ubuntu.com>  Fri, 20 Dec 2024 11:09:22 +0100

openjdk-17 (17.0.13+11-2) unstable; urgency=high

  * Don't enable dtrace on POWER* architectures.

 -- Matthias Klose <doko@ubuntu.com>  Thu, 17 Oct 2024 10:59:51 +0200

openjdk-17 (17.0.13+11-1) unstable; urgency=high

  * OpenJDK 17.0.13 release, build 11.
    - CVE-2024-21208
    - CVE-2024-21210
    - CVE-2024-21217
    - CVE-2024-21235

  [ Vladimir Petko ]
  * d/rules: do not include dtrace support for S390x (JDK-8305174).
  * d/t/problems.csv: Disable jdk/sun/security/util/Debug/DebugOptions.java
    due to JDK-8339713.

 -- Matthias Klose <doko@ubuntu.com>  Wed, 16 Oct 2024 12:01:58 +0200

openjdk-17 (17.0.13~6ea-1) unstable; urgency=medium

  * OpenJDK 17.0.13 early access, build 6.

  [ Vladimir Petko ]
  * d/copyright-generator/strip-common-licenses.sh: Add GPLv3 to the
    list of common licenses.
  * d/JB-*.override.in: Update lintian overrides.
  * d/s/lintian-override: Add source-contains-prebuilt-javascript-object
    due to LP: 2032992.
  * d/p/jdk-8334895-proposed.patch: Fix typo in the patch description.
  * d/t/problemlist.csv: Update problemlist.csv for July release
  * d/t/jtreg-autopkgtest.{in,sh}: Increase jtreg test timeouts.
  * Enable dtrace support.

 -- Matthias Klose <doko@ubuntu.com>  Mon, 09 Sep 2024 15:48:20 +0200

openjdk-17 (17.0.12+7-2) unstable; urgency=medium

  [ Vladimir Petko ]
  * d/p/jdk-8312488.patch: Add upstream patch to resolve jpackage crash.
  * d/copyright: Regenerate copyright.
  * d/rules, d/t/*: Collate all excluded tests into d/t/problemlist.csv.
  * d/rules: Enable fallback linker for Foreign Function and Memory API
    on i386 and armhf.
  * d/watch: Use fixed googletest version.
  * d/p/jdk-8336529-proposed.patch: Fix time_t migration issue on armhf.
    openjdk is unable to set file last modified timestamp.
  * d/p/jdk-8334895-proposed.patch: Refresh patch.
  * d/rules: Relax jtreg7 version condition for backports.
  * d/rules, d/control.in: Depend on pkgconf rather than pkg-config in
    bookworm and later releases. This resolves lintian warning
    build-depends-on-obsolete-package Build-Depends: pkg-config => pkgconf.
  * d/rules: Drop autotools-dev dependency for the modern debhelper.
    This resolves obsolete autotools-dev dependency lintian warning.
    See #844191.

 -- Matthias Klose <doko@ubuntu.com>  Tue, 30 Jul 2024 08:42:49 +0200

openjdk-17 (17.0.12+7-1) unstable; urgency=medium

  * OpenJDK 17.0.12 release, build 7.
    - CVEs:
      + CVE-2024-21147
      + CVE-2024-21145
      + CVE-2024-21140
      + CVE-2024-21131
      + CVE-2024-21138
    - Security Fixes:
      + JDK-8316138: Added GlobalSign R46 and E46 root CA certificates.
      + JDK-8256660: Disabled DTLS 1.0.
      + JDK-8326891: Native executables and libraries on Linux use
        RPATH instead of RUNPATH.

 -- Matthias Klose <doko@ubuntu.com>  Wed, 17 Jul 2024 13:02:09 +0200

# For older changelog entries, run 'apt-get changelog openjdk-17-doc'
