openjdk-17 (17.0.19+10-1~22.04.2) jammy-security; urgency=medium

  * Upload to Ubuntu 22.04.
  * d/rules: Do not validate control files for the old releases.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Sun, 26 Apr 2026 21:27:46 +1200

openjdk-17 (17.0.19+10-1) unstable; urgency=medium

  * OpenJDK 17.0.19 release, build 10.
    - CVEs:
      + CVE-2026-22016: 8370529: Enhance Path Factories Redux
      + CVE-2026-34282: 8374557: Enhance TLS connection handling
      + CVE-2026-22021: 8371830: Enhance certificate chain validation
      + CVE-2026-22013: 8370615: Improve Kerberos credentialing
      + CVE-2026-23865: 8379158: Update FreeType to 2.14.2
      + CVE-2026-22018: 8370986: Enhance Zip file reading
      + CVE-2026-22007: 8369575: Enhance crypto algorithm support
      + CVE-2026-34268: 8371935: Enhance key generation
  * d/rules: Check generated files only on amd64. This resolves riscv64
    ftbfs, as some architectures change with_check flag.
  * d/t/problems.csv: Fix typo in loong64 excluded tests lists.
  * Add common GPL and Apache license headers to copyright generator.
  * d/copyright: Regenerate.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Fri, 24 Apr 2026 14:03:13 +1200

openjdk-17 (17.0.19~9ea-2) unstable; urgency=medium

  * Ensure that all generated files are up to date:
    - The copyright generator now checks if the current directory contains
      an unpacked OpenJDK tree by verifying the presence of the
      ASSEMBLY_EXCEPTION file.
    - The copyright generator now drops common license text in-memory,
      without running a shell script that modifies the source tree.
    - d/rules: Add targets to generate all files and check that they match
      the ones provided in the source package.
    - d/rules: Add nogen DEB_BUILD_OPTION to disable file regeneration.
  * d/rules: Use '-' instead of '~' in opt version string, swap package
    version and distribution.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Fri, 17 Apr 2026 09:49:19 +1200

openjdk-17 (17.0.19~9ea-1) unstable; urgency=medium

  * OpenJDK 17.0.19 early access, build 9.
  * d/rules: Revert replace '~' with '-' in the optional version string.
    This should be resolved upstream.
  * d/t/problems.csv: Update problem list.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Mon, 16 Mar 2026 15:31:01 +1300

openjdk-17 (17.0.19~6ea-1) unstable; urgency=medium

  * OpenJDK 17.0.19 early access, build 6.
  * d/rules: Replace '~' with '-' in the optional version string.
  * d/dbg.py: Fix syntax errors in gdb unwinder, do not install unwinder
    for zero, install hotspot unwinder in the correct directory.
    Disable debug traces. Load unwinder in the disabled state.
    Return iterator rather than list from OpenJDKFrameFilter.flatten().
    Remove unused code from NativeMethodInfo.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Fri, 13 Mar 2026 14:44:35 +1300

openjdk-17 (17.0.18+8-1) unstable; urgency=medium

  * OpenJDK 17.0.18 release, build 8.
   - CVEs:
      + CVE-2026-21945: 8368032: Enhance Certificate Checking.
      + CVE-2026-21932: 8359501: Enhance Handling of URIs.
      + CVE-2026-21933: 8362632: Improve HttpServer Request handling.
      + CVE-2026-21925: 8341496: Improve JMX connections.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Thu, 22 Jan 2026 12:38:58 +1300

openjdk-17 (17.0.18~7ea-1) unstable; urgency=medium

  * OpenJDK 17.0.18 early access, build 7.

  [ Matthias Klose ]
  * d/rules: Run the testsuite for loong64, don't run on riscv64.

  [ Pushkar Kulkarni ]
  * d/t/jtreg-autopkgtest.*: use locale name "C.UTF-8" on bionic
    and focal.

  [ Vladimir Petko ]
  * d/p/jdk-8369450-proposed.patch: Drop patch applied upstream.
  * Update override comments for unstripped-binary-or-object. We need to
    keep symbols for Native Memory Tracking to work.
  * d/{JB-doc.overrides.in, JB-jre-headless.overrides.in}: Add override
    for old FSF copyright address.
  * d/s/lintian-overrides: Override false positive debian-rules-calls-
    nproc. The utility is used to log the number of processors.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Mon, 05 Jan 2026 15:55:38 +1300

openjdk-17 (17.0.17+10-1) unstable; urgency=medium

  * OpenJDK 17.0.17 release, build 10.
    - CVEs:
      + CVE-2025-53057, 8360937: Enhance certificate handling.
      + CVE-2025-53066, 8356294: Enhance Path Factories.

  [ Vladimir Petko ]
  * d/t/jtreg-autopkgtest.*: Force utf-8 encoding.

 -- Matthias Klose <doko@ubuntu.com>  Wed, 22 Oct 2025 08:14:04 +0200

openjdk-17 (17.0.17~8ea-1) unstable; urgency=medium

  * OpenJDK 17.0.17 early access, build 8.

  [ Vladimir Petko ]
  * d/t/problems.csv: Synchronize problem list.
  * d/p/jdk-8369450.patch: Fix ftbfs due to rust-coreutils date. LP: #2127120.

 -- Matthias Klose <doko@ubuntu.com>  Sat, 27 Sep 2025 16:17:54 +0200

openjdk-17 (17.0.17~5ea-1) unstable; urgency=medium

  * OpenJDK 17.0.17 early access, build 5.

  [ Matthias Klose ]
  * Build using GCC 15 on development releases.

  [ Vladimir Petko ]
  * d/rules: Disable jtreg test for riscv on focal.

 -- Matthias Klose <doko@ubuntu.com>  Fri, 29 Aug 2025 12:15:33 +0200

# For older changelog entries, run 'apt-get changelog openjdk-17-doc'
