openjdk-8 (8u452-ga~us1-0ubuntu1~20.04) focal-security; urgency=medium

  * OpenJDK 8u452 release. Release notes:
    https://mail.openjdk.org/pipermail/jdk8u-dev/2025-April/019989.html
    - CVEs:
      + CVE-2025-21587
      + CVE-2025-30691
      + CVE-2025-30698

  [ Pushkar Kulkarni ]
  * d/rules: update gh tags for 8u452
  * d/control: regenerate for Ubuntu 20.04
  * Upload to Ubuntu 20.04

 -- Pushkar Kulkarni <pushkar.kulkarni@canonical.com>  Wed, 16 Apr 2025 16:03:22 +0530

openjdk-8 (8u442-ga-2) unstable; urgency=low

  * Add explicit R³: binary-targets to work around dpkg 1.22.13 changing
    default behaviour, violating Policy §5.6.31, leading to binary-*
    target not called in separate make run any more which some wildcard
    matches rely on, to get the correct files (Closes: #1095746)

 -- Thorsten Glaser <tg@mirbsd.de>  Wed, 12 Feb 2025 02:55:46 +0100

openjdk-8 (8u442-ga-1) unstable; urgency=low

  * New upstream release
  * Other changes see
    https://mail.openjdk.org/pipermail/jdk8u-dev/2025-January/019658.html
  * Drop mantic, add plucky
  * Add pochu to Uploaders
  * Bump testing/sid GCC to 14 (Closes: #1092660);
    for oracular/plucky as well, noble is kept at GCC 13
  * Since xfwm4 is available on every arch we build again, drop exclusion
  * Drop remnants of IA64 support (long gone from Linux)
  * Remove m68k support: broken, needs rebootstrapping after the ABI change
    anyway, at which point openjdk-8 might not be needed at all
  * Add patch for FTBFS with GCC 14’s strictened types
  * Bump Policy (nothing to do)

 -- Thorsten Glaser <tg@mirbsd.de>  Mon, 10 Feb 2025 01:11:43 +0100

openjdk-8 (8u432-b06-2) unstable; urgency=medium

  * Drop b04-to-b05-hotspot.diff, no longer needed. Fixes FTBFS on armhf.

 -- Emilio Pozuelo Monfort <pochu@debian.org>  Sun, 03 Nov 2024 12:33:56 +0100

openjdk-8 (8u432-b06-1) unstable; urgency=medium

  [ Vladimir Petko ]
  * Include /usr/share/dpkg/buildflags.mk to work around *buntu
    breaking package builds without it (Closes: #1076752)

  [ Thorsten Glaser ]
  * Include /usr/share/dpkg/buildflags.mk only if it exists
  * Set JT_JAVA if needed to not need default-jre-headless

  [ Emilio Pozuelo Monfort ]
  * New upstream release.
  * CVEs
    - CVE-2024-21208
    - CVE-2024-21210
    - CVE-2024-21217
    - CVE-2024-21235
  * Security fixes
    - JDK-8290367, JDK-8332643: Update default value and extend the scope
      of com.sun.jndi.ldap.object.trustSerialData system property
    - JDK-8313626, JDK-8307769: C2 crash due to unexpected
      exception control flow
    - JDK-8328286: Enhance HTTP client
    - JDK-8328544: Improve handling of vectorization
    - JDK-8328726: Better Kerberos support
    - JDK-8331446: Improve deserialization support
    - JDK-8332644: Improve graph optimizations
    - JDK-8335713: Enhance vectorization analysis
  * Other changes see
    https://mail.openjdk.org/pipermail/jdk8u-dev/2024-October/019414.html

 -- Emilio Pozuelo Monfort <pochu@debian.org>  Fri, 01 Nov 2024 22:24:27 +0100

openjdk-8 (8u422-b05-1) unstable; urgency=medium

  * New upstream release
  * CVEs
    - CVE-2024-21131
    - CVE-2024-21138
    - CVE-2024-21140
    - CVE-2024-21144
    - CVE-2024-21145
    - CVE-2024-21147
  * Security fixes
    - JDK-8314794: Improve UTF8 String supports
    - JDK-8319859: Better symbol storage
    - JDK-8320097: Improve Image transformations
    - JDK-8320548: Improved loop handling
    - JDK-8322106: Enhance Pack 200 loading
    - JDK-8323231: Improve array management
    - JDK-8323390: Enhance mask blit functionality
    - JDK-8324559: Improve 2D image handling
    - JDK-8325600: Better symbol storage
  * Other changes see
    https://mail.openjdk.org/pipermail/jdk8u-dev/2024-July/018904.html
  * Re-enable tests on noble/i386, the prerequisites were added back
    with no coordination; disable on sid/{m68k,sh4} for same reason
  * Overhaul way various control files are (re‑)generated
  * Avoid default-jre being pulled in by B-D-ing on jdk-!headless again
  * Upload sponsored by QVEST ⮡ dıgıtal

 -- Thorsten Glaser <tg@mirbsd.de>  Sat, 20 Jul 2024 01:34:18 +0200

openjdk-8 (8u412-ga-1) unstable; urgency=medium

  * New upstream release (Closes: #1069678)
  * CVEs
    - CVE-2024-21011
    - CVE-2024-21085
    - CVE-2024-21068
    - CVE-2024-21094
  * Security fixes
    - JDK-8317507, JDK-8325348: C2 compilation fails
      with "Exceeded _node_regs array"
    - JDK-8318340: Improve RSA key implementations
    - JDK-8319851: Improve exception logging
    - JDK-8322114: Improve Pack 200 handling
    - JDK-8322122: Enhance generation of addresses
  * Other changes see
    https://mail.openjdk.org/pipermail/jdk8u-dev/2024-April/018329.html
  * Upload sponsored by QVEST ⮡ dıgıtal
  * Re-enable running tests by default except on noble/i386 (lacks prereqs)
  * Switch from pkg-config to pkgconf for bookworm/mantic+ (lintian)

 -- Thorsten Glaser <tg@mirbsd.de>  Tue, 23 Apr 2024 01:10:58 +0200

openjdk-8 (8u402-ga-8) unstable; urgency=low

  * Boostrap with jdk-headless
  * Add patch to switch dlsym use to time_t-64 functions if needed

 -- Thorsten Glaser <tg@mirbsd.de>  Sat, 06 Apr 2024 17:27:18 +0200

openjdk-8 (8u402-ga-7) unstable; urgency=low

  * Remove jexec from jinfo to fix update-java-alternatives (LP#2059181)

 -- Thorsten Glaser <tg@mirbsd.de>  Tue, 02 Apr 2024 17:03:49 +0200

openjdk-8 (8u402-ga-6) unstable; urgency=low

  * Build without tests for t64 transition

 -- Thorsten Glaser <tg@mirbsd.de>  Sun, 24 Mar 2024 22:47:14 +0100

# For older changelog entries, run 'apt-get changelog openjdk-8-doc'
