openjdk-21 (21.0.12+8-1~22.04) jammy-security; urgency=medium

  * Upload to Ubuntu 22.04.
  * d/control: regenerate for jammy

 -- Pushkar Kulkarni <pushkar.kulkarni@canonical.com>  Thu, 23 Jul 2026 19:11:59 +0530

openjdk-21 (21.0.12+8-1) unstable; urgency=medium

  * OpenJDK 21.0.12 release, build 8.
    - CVEs:
      + CVE-2026-46968
      + CVE-2026-46917
      + CVE-2026-47010
      + CVE-2026-47021
      + CVE-2026-47027
      + CVE-2026-60147
      + CVE-2026-47059
      + CVE-2026-47063
      + CVE-2026-41254
    - Release notes: https://bit.ly/openjdk2112

 -- Vladimir Petko <vladimir.petko@canonical.com>  Wed, 22 Jul 2026 12:30:18 +1200

openjdk-21 (21.0.12~7ea-1) unstable; urgency=medium

  * OpenJDK 21.0.12 early access, build 7.
  * d/copyright: Regenerate.
  * d/p/jdk-8387580.diff: Apply upstream patch to resolve S390x
    ftbfs (JDK-8387580).
  * d/t/problems.csv: Drop obsolete versions, add openjdk-28,
    add new exclusions.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Thu, 16 Jul 2026 15:29:45 +1200

openjdk-21 (21.0.12~5ea-1) unstable; urgency=medium

  * OpenJDK 21.0.12 early access, build 5.
  * d/rules: Do not perform copyright validation for old releases.
  * d/rules: Check DEB_BUILD_PROFILES in addition to DEB_BUILD_OPTIONS
    to set up with_check variable. Do not check control files if
    with_check is disabled (Closes: #1137499).
  * d/control.in: Add myself to uploaders.
  * Regenerate files.
  * d/JB-jre-{headless,zero}.overrides.in: Drop exit-in-shared-library
    override.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Mon, 08 Jun 2026 12:05:35 +1200

openjdk-21 (21.0.11+10-1) unstable; urgency=medium

  * OpenJDK 21.0.11 release, build 10.
    - CVEs:
      + CVE-2026-22016: 8370529: Enhance Path Factories Redux
      + CVE-2026-34282: 8374557: Enhance TLS connection handling
      + CVE-2026-22021: 8371830: Enhance certificate chain validation
      + CVE-2026-22013: 8370615: Improve Kerberos credentialing
      + CVE-2026-23865: 8379158: Update FreeType to 2.14.2
      + CVE-2026-22018: 8370986: Enhance Zip file reading
      + CVE-2026-22007: 8369575: Enhance crypto algorithm support
      + CVE-2026-34268: 8371935: Enhance key generation
  * d/rules: Check generated files only on amd64. This resolves riscv64
    ftbfs, as some architectures change with_check flag.
  * d/t/problems.csv: Fix typo in loong64 excluded tests lists.
  * Add common GPL and Apache license headers to copyright generator.
  * d/copyright: Regenerate.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Fri, 24 Apr 2026 13:36:40 +1200

openjdk-21 (21.0.11~9ea-2) unstable; urgency=medium

  * Ensure that all generated files are up to date:
    - The copyright generator now checks if the current directory contains
      an unpacked OpenJDK tree by verifying the presence of the
      ASSEMBLY_EXCEPTION file.
    - The copyright generator now drops common license text in-memory,
      without running a shell script that modifies the source tree.
    - d/rules: Add targets to generate all files and check that they match
      the ones provided in the source package.
    - d/rules: Add nogen DEB_BUILD_OPTION to disable file regeneration.
  * d/rules: Use '-' instead of '~' in opt version string, swap package
    version and distribution.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Fri, 17 Apr 2026 09:54:54 +1200

openjdk-21 (21.0.11~9ea-1) unstable; urgency=medium

  * OpenJDK 21.0.11 early access, build 9.
  * d/t/problems.csv: Update problem list.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Fri, 10 Apr 2026 22:59:14 +1200

openjdk-21 (21.0.11~8ea-1) unstable; urgency=medium

  * OpenJDK 21.0.11 early access, build 8.

  [ Vladimir Petko ]
  * d/rules: Revert replace '~' with '-' in the optional version string.
    This should be resolved upstream.
  * d/p/jdk-8381555.diff: Apply upstream patch to disable G1 Compressed
    Oops test on 32 bit architectures (JDK-8381555).

  [ Matthias Klose ]
  * d/t/jtreg-autopkgtest.in: Increase the timeout from 10 to 30 seconds
    on loong64 (zero VM).

 -- Matthias Klose <doko@ubuntu.com>  Fri, 27 Mar 2026 12:33:53 +0100

openjdk-21 (21.0.11~6ea-1) unstable; urgency=medium

  * OpenJDK 21.0.11 early access, build 6.
  * d/rules: Remove '[' separator in the version string, it makes
    version string invalid.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Fri, 13 Mar 2026 14:25:04 +1300

openjdk-21 (21.0.11~5ea-1) unstable; urgency=medium

  * OpenJDK 21.0.11 early access, build 5.

  [ Miao Wang ]
  * d/t/problems.csv: Add tests which take too long to finish on
    loong64.

  [ Vladimir Petko ]
  * d/rules: Separate package version in version string.
  * d/dbg.py: Fix syntax errors in gdb unwinder, do not install unwinder
    for zero, install hotspot unwinder in the correct directory.
  * d/t/jtreg-autopkgtest.{in,sh}: Do not force agentvm for s390x jtreg
    tests to resolve the build crash on Launchpad.
    Disable debug traces. Load unwinder in the disabled state.
    Return iterator rather than list from OpenJDKFrameFilter.flatten().
    Remove unused code from NativeMethodInfo.

  [ Matthias Klose ]
  * Refresh patches.

 -- Matthias Klose <doko@ubuntu.com>  Fri, 06 Mar 2026 14:15:29 +0100

# For older changelog entries, run 'apt-get changelog openjdk-21-doc'
