openjdk-25 (25.0.2+10-1~22.04) jammy-security; urgency=medium

  * Upload to Ubuntu 22.04.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Fri, 23 Jan 2026 12:58:20 +1300

openjdk-25 (25.0.2+10-1) unstable; urgency=medium

  * OpenJDK 25.0.2 release, build 10.
    - CVEs:
      + CVE-2026-21945: 8368032: Enhance Certificate Checking.
      + CVE-2026-21932: 8359501: Enhance Handling of URIs.
      + CVE-2026-21933: 8362632: Improve HttpServer Request handling.
      + CVE-2026-21925: 8341496: Improve JMX connections.
  * d/rules: Use jtreg8 package for the tests.
  * d/p/power-opt.diff: Refresh patch.
  * Drop patches applied upstream:
     - d/p/jdk-8359735.patch.
     - d/p/jdk-8369450-proposed.patch.
     - d/p/jdk-8370049-proposed.patch.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Thu, 22 Jan 2026 10:10:25 +1300

openjdk-25 (25.0.1+8-3) unstable; urgency=medium

  * d/t/control.in: Remove flaky and skippable flag from dependencies.sh
    test and install only jre package.
  * d/t/control: Regenerate.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Mon, 12 Jan 2026 14:40:31 +1300

openjdk-25 (25.0.1+8-2) unstable; urgency=medium

  [ Matthias Klose ]
  * d/rules: Adjust any_archs, hppa is unlikely to get fixed for the
    opposite stack frame growth.
  * d/rules: Run the testsuite for loong64.
  * Regenerate the watch file.

  [ Vladimir Petko ]
  * d/{rules/control.in/test/control.in}: Replace dbus-x11 with dbus-
    daemon dependency. Closes: #1117100.
  * d/control: d/test/control: Regenerate.
  * d/README.{Debian,source}: Update package readme files.
  * d/rules: Use generic code to replace bundled jquery.
  * d/JB-doc.overrides.in: Drop binary package bundled jquery
    override. The override is not needed for the binary package.
  * d/s/lintian-overrides: Update jquery override override comment.
  * Update unstripped-binary-or-object override comments.
    OpenJDK needs symbols for Native Memory Tracking.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Sat, 20 Dec 2025 09:57:54 +1300

openjdk-25 (25.0.1+8-1) unstable; urgency=medium

  * OpenJDK 25.0.1 release, build 8.
    - CVEs:
      + CVE-2025-53057, 8360937: Enhance certificate handling.
      + CVE-2025-53066, 8356294: Enhance Path Factories.
      + CVE-2025-61748, 8359454: Enhance String handling.

  [ Vladimir Petko ]
  * d/s/lintian-overrides: Override false positive nproc warning.
  * d/{JB-doc.overrides.in, JB-jre-headless.overrides.in}: Add override for
    old FSF copyright address.
  * d/JB-jvmci-jdk.overrides.in: Update overrides for jvmci package.
  * d/t/problems.csv: DocRootDirPermissionsTest.java - Fix typo in
    the test name.
  * d/t/problems.csv: Synchronize problem list.
  * d/t/dependencies.sh: Relax test assertion for PC/SC library.
  * d/rules: Prefer openjdk-25 for bootstrap.
  * d/control: Regenerate.
  * d/p/jdk-8369450.patch: Fix ftbfs due to rust-coreutils date. LP: #2127120.
  * Security Manager was removed in -25, so the JDK image no longer has
    default.policy and java.policy.
  * jaxp-strict.properties.template was moved by d/rules to
    jaxp-strict.properties, but we still created symlink to
    jaxp-strict.properties.template.  Replace mv with cp so that link
    to jaxp-strict.properties.template is not broken.
  * d/rules: Run jtreg autopkgtests only on jtreg architectures.
  * d/t/{hotspot-autopkgtest.in, jdk-autopkgtest.in}: Skip tests
    that require a large amount of memory.
  * d/t/{control,hotspot-autopkgtest.sh, jdk-autopkgtest.sh}:
    Regenerate.
  * d/p/jdk-8370049-proposed.patch: s390x G1 barrier compare and exchange
    operation should update output parameter instead of input.  LP: #2127750.

  [ Matthias Klose ]
  * d/rules: Let the install target depend on the build target.
    Closes: #1105520.
  * Update the location of the upstream VCS.

 -- Matthias Klose <doko@ubuntu.com>  Wed, 22 Oct 2025 12:19:10 +0200

openjdk-25 (25+36-1) unstable; urgency=medium

  * OpenJDK 25 GA, build 36. Release notes:
    https://mail.openjdk.org/pipermail/jdk-dev/2025-September/010483.html

  [ Vladimir Petko ]
  * d/rules: Mark as release.
  * d/watch: Regenerate.

 -- Matthias Klose <doko@ubuntu.com>  Wed, 17 Sep 2025 02:43:31 +0200

openjdk-25 (25~36ea-1) unstable; urgency=medium

  * OpenJDK 25 snapshot, Build 36.
  * Build using GCC 15 on development releases.

 -- Matthias Klose <doko@ubuntu.com>  Fri, 29 Aug 2025 11:59:40 +0200

openjdk-25 (25~34ea-1) unstable; urgency=medium

  * OpenJDK 25 snapshot, Build 34.

  [ Matthias Klose ]
  * Update VCS attributes.

  [ Vladimir Petko ]
  * d/copyright-generator/copyright-gen.py: bump copyright year.
  * d/copyright: regenerate.

 -- Matthias Klose <doko@ubuntu.com>  Tue, 05 Aug 2025 08:35:23 +0200

openjdk-25 (25~32ea-1) unstable; urgency=medium

  * OpenJDK 25 snapshot, Build 32.

  [ Vladimir Petko ]
  * d/p/jdk-8359735-proposed.patch: Fix process tests failing in Ubuntu 25.10.
  * d/rules: Add -XX:TieredStopAtLevel=1 to boot jdk args for s390x to work
    around an Ubuntu LP builder issue.

 -- Matthias Klose <doko@ubuntu.com>  Fri, 18 Jul 2025 13:45:05 +0200

openjdk-25 (25~25ea-1) unstable; urgency=medium

  * OpenJDK 25 snapshot, Build 25.
  * Prefer OpenJDK 25 as a build dependency. Closes: #1106303.

 -- Matthias Klose <doko@debian.org>  Sat, 31 May 2025 11:40:07 +0200

# For older changelog entries, run 'apt-get changelog openjdk-25-doc'
