openjdk-8 (8u492-ga~us2-0ubuntu1~22.04.1) jammy-security; urgency=medium

  * Upload to Ubuntu 22.04.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Wed, 29 Apr 2026 10:47:45 +1200

openjdk-8 (8u492-ga~us2-0ubuntu1) stonking; urgency=medium

  * New upstream release.
    - CVEs:
      + CVE-2026-22016: 8370529: Enhance Path Factories Redux
      + CVE-2026-22021: 8371830: Enhance certificate chain validation
      + CVE-2026-22013: 8370615: Improve Kerberos credentialing
      + CVE-2026-23865: 8379158: Update FreeType to 2.14.2
      + CVE-2026-22018: 8370986: Enhance Zip file reading
      + CVE-2026-22007: 8369575: Enhance crypto algorithm support
      + CVE-2026-34268: 8371935: Enhance key generation
  * Refresh patches.
  * d/p/uabs-*.diff: Drop patch applied upstream.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Thu, 23 Apr 2026 11:56:52 +1200

openjdk-8 (8u482-ga-1) unstable; urgency=medium

  * New upstream release.
    - CVE-2026-21925, CVE-2026-21932, CVE-2026-21933, CVE-2026-21945
  * Drop uabs patches, included upstream.
  * debian/patches/hotspot-libpath-*.diff:
    - updated.

 -- Emilio Pozuelo Monfort <pochu@debian.org>  Mon, 02 Mar 2026 00:18:52 +0100

openjdk-8 (8u472-ga-1) unstable; urgency=low

  * New upstream release (Closes: #1118944)
  * CVEs
    - CVE-2025-53057
    - CVE-2025-53066
  * Other changes see https://bit.ly/openjdk8u472
  * Update d/copyright
  * Sync list of compilers and known releases
  * Add patches to rename the (custom) uabs function, to avoid a
    conflict with glibc 2.42 in experimental, following what jdk11
    did but wasn’t yet merged to jdk8 (Closes: #1115228)
  * Build with -std=gnu11 as configure tests for, not C23 ready

 -- Thorsten Glaser <tg@mirbsd.de>  Sun, 02 Nov 2025 17:30:44 +0000

openjdk-8 (8u462-ga-1) unstable; urgency=low

  * New upstream release
  * CVEs
    - CVE-2025-30749
    - CVE-2025-30754
    - CVE-2025-30761
    - CVE-2025-50106
  * Other changes see
    https://mail.openjdk.org/pipermail/jdk8u-dev/2025-July/020263.html

 -- Thorsten Glaser <tg@mirbsd.de>  Wed, 30 Jul 2025 11:44:43 +0000

openjdk-8 (8u452-ga-1) unstable; urgency=low

  * Revert previous workaround
  * Use = ipv := for jre_hl_tools gmake variable (Closes: #1095932)
  * Explicitly use R³:no
  * New upstream release
  * CVEs
    - CVE-2025-21587
    - CVE-2025-30691
    - CVE-2025-30698
  * Other changes see
    https://mail.openjdk.org/pipermail/jdk8u-dev/2025-April/019989.html
  * Add Roberto as ELTS fallback for pochu
  * Bump Policy, (should be) no change needed

 -- Thorsten Glaser <tg@mirbsd.de>  Sun, 11 May 2025 22:09:45 +0000

openjdk-8 (8u442-ga-2) unstable; urgency=low

  * Add explicit R³: binary-targets to work around dpkg 1.22.13 changing
    default behaviour, violating Policy §5.6.31, leading to binary-*
    target not called in separate make run any more which some wildcard
    matches rely on, to get the correct files (Closes: #1095746)

 -- Thorsten Glaser <tg@mirbsd.de>  Wed, 12 Feb 2025 02:55:46 +0100

openjdk-8 (8u442-ga-1) unstable; urgency=low

  * New upstream release
  * Other changes see
    https://mail.openjdk.org/pipermail/jdk8u-dev/2025-January/019658.html
  * Drop mantic, add plucky
  * Add pochu to Uploaders
  * Bump testing/sid GCC to 14 (Closes: #1092660);
    for oracular/plucky as well, noble is kept at GCC 13
  * Since xfwm4 is available on every arch we build again, drop exclusion
  * Drop remnants of IA64 support (long gone from Linux)
  * Remove m68k support: broken, needs rebootstrapping after the ABI change
    anyway, at which point openjdk-8 might not be needed at all
  * Add patch for FTBFS with GCC 14’s strictened types
  * Bump Policy (nothing to do)

 -- Thorsten Glaser <tg@mirbsd.de>  Mon, 10 Feb 2025 01:11:43 +0100

openjdk-8 (8u432-b06-2) unstable; urgency=medium

  * Drop b04-to-b05-hotspot.diff, no longer needed. Fixes FTBFS on armhf.

 -- Emilio Pozuelo Monfort <pochu@debian.org>  Sun, 03 Nov 2024 12:33:56 +0100

openjdk-8 (8u432-b06-1) unstable; urgency=medium

  [ Vladimir Petko ]
  * Include /usr/share/dpkg/buildflags.mk to work around *buntu
    breaking package builds without it (Closes: #1076752)

  [ Thorsten Glaser ]
  * Include /usr/share/dpkg/buildflags.mk only if it exists
  * Set JT_JAVA if needed to not need default-jre-headless

  [ Emilio Pozuelo Monfort ]
  * New upstream release.
  * CVEs
    - CVE-2024-21208
    - CVE-2024-21210
    - CVE-2024-21217
    - CVE-2024-21235
  * Security fixes
    - JDK-8290367, JDK-8332643: Update default value and extend the scope
      of com.sun.jndi.ldap.object.trustSerialData system property
    - JDK-8313626, JDK-8307769: C2 crash due to unexpected
      exception control flow
    - JDK-8328286: Enhance HTTP client
    - JDK-8328544: Improve handling of vectorization
    - JDK-8328726: Better Kerberos support
    - JDK-8331446: Improve deserialization support
    - JDK-8332644: Improve graph optimizations
    - JDK-8335713: Enhance vectorization analysis
  * Other changes see
    https://mail.openjdk.org/pipermail/jdk8u-dev/2024-October/019414.html

 -- Emilio Pozuelo Monfort <pochu@debian.org>  Fri, 01 Nov 2024 22:24:27 +0100

# For older changelog entries, run 'apt-get changelog openjdk-8-doc'
