• openjdk-8_8u292-b10-1_source.changes ACCEPTED into unstable

    From Debian FTP Masters@21:1/5 to All on Fri Jun 11 18:30:03 2021
    Accepted:

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA384

    Format: 1.8
    Date: Mon, 26 Apr 2021 17:00:54 +0200
    Source: openjdk-8
    Architecture: source
    Version: 8u292-b10-1
    Distribution: unstable
    Urgency: medium
    Maintainer: Java Maintenance <debian-java@lists.debian.org>
    Changed-By: Thorsten Glaser <tg@mirbsd.de>
    Changes:
    openjdk-8 (8u292-b10-1) unstable; urgency=medium
    .
    * Source-only upload after the previous bootstrap binary one
    * Change -Xmx1024m to -Xmx1000m in icedtea-sound compilation
    to work with mipsel’s memory layout (and sh4)
    * Don’t set old-style ALT_ environment variables, they are ignored
    * Create the origtgz in a hopefully reproducible way
    * Merge openjdk-8 (8u292-b10-0+deb9u1)
    - Revert bogus reversion of changes from previous uploads
    - Add missing changelog entry for 8u275
    - Revert *buntu ESM-related changes
    - Undo an inconsistency in fetch-orig
    * Fix whitespace
    * Upgrade aarch32 to 8u292 GA
    * Build with reproducible LC_ALL=C setting
    * Obtain origtgz from https or, when not possible (icedtea-sound),
    check SHA256 against one I manually downloaded and checked, using
    the (expired…) key from pyconfigure’s signing keyring, which,
    unlike the keyserver network, contains the key used
    * Abort fetching origtgz if it fails, don’t soldier on to fail later
    * Document reasons some tests fail (more building on older releases)
    * Update lintian overrides (for sid)
    .
    openjdk-8 (8u292-b10-0+deb9u1) stretch-security; urgency=medium
    .
    * Merge with Ubuntu.
    * Update to 8u292-b10 (GA).
    .
    openjdk-8 (8u292-b10-0ubuntu1) hirsute; urgency=medium
    .
    * Update to 8u292-b10 (GA).
    * Security fixes
    - JDK-8227467: Better class method invocations
    - JDK-8244473: Contextualize registration for JNDI
    - JDK-8244543: Enhanced handling of abstract classes
    - JDK-8249906, CVE-2021-2163: Enhance opening JARs
    - JDK-8250568, CVE-2021-2161: Less ambiguous processing
    - JDK-8253799: Make lists of normal filenames
    * Other changes:
    See https://mail.openjdk.java.net/pipermail/jdk8u-dev/2021-April/013680.html
    Checksums-Sha1:
    fc78384de66cc1b9095df602fc441f757a40bae6 4778 openjdk-8_8u292-b10-1.dsc
    f8d1d63b7736a44e5d054b7ba7104792272d7d96 73542230 openjdk-8_8u292-b10.orig.tar.gz
    9fc9d22912cf696c416a32238732df0d08d335a4 216484 openjdk-8_8u292-b10-1.debian.tar.xz
    Checksums-Sha256:
    8c7ca2fe4d59d304467af90a63c9a00b0667257a6934e02aeaef04e02b1f11da 4778 openjdk-8_8u292-b10-1.dsc
    87c85cd5b6622241b33ef35d9f8f52ea64b1673d4d0b656e96d7eef8fc4ddadf 73542230 openjdk-8_8u292-b10.orig.tar.gz
    4601958ccc6c7f40898be7d3100249e33431b22eae5930a38761060bac59053b 216484 openjdk-8_8u292-b10-1.debian.tar.xz
    Files:
    2a8fdb54c74ec0e46d0ab30f09113d2e 4778 java optional openjdk-8_8u292-b10-1.dsc
    fb5c398d242151b60e3a91431dbb33a6 73542230 java optional openjdk-8_8u292-b10.orig.tar.gz
    97cc62a26c51580b5f7f8b6d31dc12a8 216484 java optional openjdk-8_8u292-b10-1.debian.tar.xz

    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.4.14 (MirBSD)
    Comment: ☃ ЦΤℱ—8 ☕☂☄

    iQIcBAEBCQAGBQJgw4KrAAoJEHa1NLLpkAfgEtMQAKMkjWHdh8jA1QKmuPR+kMgZ VijLRQcar4x/yA7yABP8vA66Yp1Mz1XnAw6nvvK/Dz2+SStE/1YtTF8wVM4av5wB 6xkYNRuHkDYS3gsZwLyPdJLtoHZJUs/oHtnGT0XQIZ9IJ8qOTgoWGXwtYTGTP4NG 9YDWvibUXk9t/NEHfg+78+sm0fKJhSVyXgekTRamTwJYEkFAOWoWWEzy04mm+1Oq 7HUbRCSr8B5BGln9Yr8TckAIYVzaECkweYs1L/hooF7zgIBO0qwYVHdWY+/06REN dHN28z2PqezDxq7RIYNCDUc3h3aPmFxnGau0mQGFy4JwKq8N/cRA+ytecJxLAl40 hwcxDPw9O3DGbKsxJ9bzA/RLC2vrXu3+bzRKiw+LJlYg05OMUslWIubUQNWXT7Ms VNcAmRiaW3RZZAlL/0stb1Oatiw7TOyXWWpTl5DyfP6+cVyPDaAGFs0cOcARD/9J +Hg/kzpi9LcffEx0fHlHPuQhq6Jvh+/2OEOMChC1CqBb4MTOKnZm349GuBlX0d4A vEQ8+iHAttcn3Gqv/refNU2+AQgb7MfGN4e5R1sdA0psVXbz23/BC77SCMOu5Psx v0pUlKQZLAVo6qUButPDq6hADMcYZw3WH3wb8Y33Qta2XOQhw0ATt9HfMwlVE1Sr 4IDz5ZK8uZs8TlP3W2jD
    =etbr
    -----END PGP SIGNATURE-----


    Thank you for your contribution to Debian.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)