openjdk-8 (8u372-ga~us1-0ubuntu1~18.04) bionic-security; urgency=medium

  * Upload to Ubuntu 18.04.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Sat, 06 May 2023 09:49:22 +0200

openjdk-8 (8u372-ga~us1-0ubuntu1) mantic; urgency=medium

  * OpenJDK 8u372 release, build 7.
    - CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939,
      CVE-2023-21954, CVE-2023-21967, CVE-2023-21968.
    - Release notes:
      https://mail.openjdk.org/pipermail/jdk8u-dev/2023-April/017039.html
  * d/rules: remove IcedTeaPlugin.so reference (LP: #2016396).

 -- Vladimir Petko <vladimir.petko@canonical.com>  Fri, 28 Apr 2023 15:44:40 +0200

openjdk-8 (8u362-ga-0ubuntu2) lunar; urgency=medium

  * debian/JB-jre-headless.postinst.in: trigger ca-certificates-java after jre
    is set up.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Wed, 01 Mar 2023 17:18:57 +1300

openjdk-8 (8u362-ga-0ubuntu1) lunar; urgency=medium

  * New upstream release
  * CVEs
    - CVE-2023-21830
    - CVE-2023-21843
  * Security fixes
    - JDK-8285021: Improve CORBA communication
    - JDK-8286496: Improve Thread labels
    - JDK-8288516: Enhance font creation
    - JDK-8289350: Better media supports
    - JDK-8293554: Enhanced DH Key Exchanges
    - JDK-8293598: Enhance InetAddress address handling
    - JDK-8293717: Objective view of ObjectView
    - JDK-8293734: Improve BMP image handling
    - JDK-8293742: Better Banking of Sounds
    - JDK-8295687: Better BMP bounds
  * Other changes see
    https://mail.openjdk.org/pipermail/jdk8u-dev/2023-January/016479.html

 -- Vladimir Petko <vladimir.petko@canonical.com>  Fri, 20 Jan 2023 09:19:08 +1300

openjdk-8 (8u352-ga-1) unstable; urgency=medium

  * Update GCC for bookworm/sid and kinetic-proposed from 11 to 12
    to match default system compiler (this needs testing as people
    report early issues in other distros)
  * New upstream release
  * Security fixes:
    - JDK-8282252: Improve BigInteger/Decimal validation
    - JDK-8285662: Better permission resolution
    - JDK-8286511: Improve macro allocation
    - JDK-8286519: Better memory handling
    - JDK-8286526, CVE-2022-21619: Improve NTLM support
    - JDK-8286533, CVE-2022-21626: Key X509 usages
    - JDK-8286910, CVE-2022-21624: Improve JNDI lookups
    - JDK-8286918, CVE-2022-21628: Better HttpServer service
    - JDK-8288508: Enhance ECDSA usage
  * Other changes see
    https://mail.openjdk.org/pipermail/jdk8u-dev/2022-October/015706.html
  * Drop applied patches
  * Upload sponsored by ⮡ tarent

 -- Thorsten Glaser <tg@mirbsd.de>  Thu, 20 Oct 2022 18:11:04 +0200

openjdk-8 (8u342-b07-1) unstable; urgency=medium

  * New upstream release
  * Security fixes:
    - JDK-8272243: Improve DER parsing
    - JDK-8272249: Better properties of loaded Properties
    - JDK-8277608: Address IP Addressing
    - JDK-8281859, CVE-2022-21540: Improve class compilation
    - JDK-8281866, CVE-2022-21541: Enhance MethodHandle invocations
    - JDK-8283190: Improve MIDI processing
    - JDK-8284370: Improve zlib usage
    - JDK-8285407, CVE-2022-34169: Improve Xalan supports
  * Other changes see
    https://mail.openjdk.org/pipermail/jdk8u-dev/2022-July/015254.html
  * Add patch to undo user.dir change prohibition; this breaks legacy
    software like Gradle
  * Upload sponsored by ⮡ tarent

 -- Thorsten Glaser <tg@mirbsd.de>  Sat, 23 Jul 2022 01:34:54 +0200

openjdk-8 (8u342~b06-1) unstable; urgency=low

  * Upload 8u342-b06 for pre-release testing (b05 for hotspot-aarch32
    but the only difference is elsewhere)

 -- Thorsten Glaser <tg@mirbsd.de>  Tue, 12 Jul 2022 23:13:34 +0200

openjdk-8 (8u332-ga-1) unstable; urgency=medium

  * Upload to unstable: final tested release
  * Otherwise, see below for diff from 8u312/8u322
  * Upload sponsored by ⮡ tarent

 -- Thorsten Glaser <tg@mirbsd.de>  Sun, 24 Apr 2022 20:43:30 +0200

openjdk-8 (8u332~b09-2) experimental; urgency=low

  * Upload to experimental, with arm64 but see below
  * Security fixes:
    - JDK-8269938: Enhance XML processing passes redux
    - JDK-8270504, CVE-2022-21426: Better XPath expression handling
    - JDK-8272255: Completely handle MIDI files
    - JDK-8272261: Improve JFR recording file processing
    - JDK-8272594: Better record of recordings
    - JDK-8274221: More definite BER encodings
    - JDK-8275151, CVE-2022-21443: Improved Object Identification
    - JDK-8277227: Better identification of OIDs
    - JDK-8277672, CVE-2022-21434: Better invocation handler handling
    - JDK-8278008, CVE-2022-21476: Improve Santuario processing
    - JDK-8278356: Improve file creation
    - JDK-8278449: Improve keychain support
    - JDK-8278805: Enhance BMP image loading
    - JDK-8278972, CVE-2022-21496: Improve URL supports
    - JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Other changes: see
    https://mail.openjdk.java.net/pipermail/jdk8u-dev/2022-April/014839.html
  * Use stock jdk8u on arm64 instead of aarch64-shenandoah hotspot+GC
  * Upload sponsored by ⮡ tarent

 -- Thorsten Glaser <tg@mirbsd.de>  Sun, 24 Apr 2022 01:47:18 +0200

openjdk-8 (8u332~b09-1) experimental; urgency=low

  * Upload to experimental
  * New upstream release but without arm64 as it’s not yet ported
  * Upload sponsored by ⮡ tarent

 -- Thorsten Glaser <tg@mirbsd.de>  Thu, 21 Apr 2022 23:01:54 +0000

# For older changelog entries, run 'apt-get changelog openjdk-8-doc'
