-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 22 Oct 2025 12:19:10 +0200
Source: openjdk-25
Architecture: source
Version: 25.0.1+8-1
Distribution: unstable
Urgency: medium
Maintainer: OpenJDK Team <openjdk-25@packages.debian.org>
Changed-By: Matthias Klose <doko@ubuntu.com>
Closes: 1105520
Changes:
openjdk-25 (25.0.1+8-1) unstable; urgency=medium
.
* OpenJDK 25.0.1 release, build 8.
- CVEs:
+ CVE-2025-53057, 8360937: Enhance certificate handling.
+ CVE-2025-53066, 8356294: Enhance Path Factories.
+ CVE-2025-61748, 8359454: Enhance String handling.
.
[ Vladimir Petko ]
* d/s/lintian-overrides: Override false positive nproc warning.
* d/{JB-doc.overrides.in, JB-jre-headless.overrides.in}: Add override for
old FSF copyright address.
* d/JB-jvmci-jdk.overrides.in: Update overrides for jvmci package.
* d/t/problems.csv: DocRootDirPermissionsTest.java - Fix typo in
the test name.
* d/t/problems.csv: Synchronize problem list.
* d/t/dependencies.sh: Relax test assertion for PC/SC library.
* d/rules: Prefer openjdk-25 for bootstrap.
* d/control: Regenerate.
* d/p/jdk-8369450.patch: Fix ftbfs due to rust-coreutils date. LP: #2127120.
* Security Manager was removed in -25, so the JDK image no longer has
default.policy and java.policy.
* jaxp-strict.properties.template was moved by d/rules to
jaxp-strict.properties, but we still created symlink to
jaxp-strict.properties.template. Replace mv with cp so that link
to jaxp-strict.properties.template is not broken.
* d/rules: Run jtreg autopkgtests only on jtreg architectures.
* d/t/{hotspot-autopkgtest.in, jdk-autopkgtest.in}: Skip tests
that require a large amount of memory.
* d/t/{control,hotspot-autopkgtest.sh, jdk-autopkgtest.sh}:
Regenerate.
* d/p/jdk-8370049-proposed.patch: s390x G1 barrier compare and exchange
operation should update output parameter instead of input. LP: #2127750.
.
[ Matthias Klose ]
* d/rules: Let the install target depend on the build target.
Closes: #1105520.
* Update the location of the upstream VCS.
Checksums-Sha1:
69a9cb9b6abf63057dcea489d57632a437b88696 5362 openjdk-25_25.0.1+8-1.dsc
963d08e242ea43318a36d8b950f71a9e3cf2bf84 616792 openjdk-25_25.0.1+8.orig-googletest.tar.xz
21da8c33b4ecdd1b00a8b0be0877490159699030 74074532 openjdk-25_25.0.1+8.orig.tar.xz
462cb100c8cb83c6de4df26aa00dd93891a8b683 209324 openjdk-25_25.0.1+8-1.debian.tar.xz
c0c234eb0e1379d4085c72b95f5f77b5e860ec5c 15601 openjdk-25_25.0.1+8-1_source.buildinfo
Checksums-Sha256:
91242d9b19421092a74ec01aa6812f3acbff91c670270d2b4dd46e8cf06afd1c 5362 openjdk-25_25.0.1+8-1.dsc
db220ce29459378d5fd0d725da4379cac15f0158962e018b862fdb10b460a1ee 616792 openjdk-25_25.0.1+8.orig-googletest.tar.xz
5621428d358067d8542bdabeb95e738529386c68b38d790ad456f95ac0a2297b 74074532 openjdk-25_25.0.1+8.orig.tar.xz
ce34357e226e828494437a9b74671ae1edbf91a4fdb76505ee935bb968e8a747 209324 openjdk-25_25.0.1+8-1.debian.tar.xz
f98d171e68aa9c9ce6841ae69a6f25f6bbb5011f9fa7f2227d9f75282d11a0f7 15601 openjdk-25_25.0.1+8-1_source.buildinfo
Files:
b62169ec6723f8f739cf7d3bfecc68d5 5362 java optional openjdk-25_25.0.1+8-1.dsc
de5c55b8e5bce1324d6baa80dc60ef28 616792 java optional openjdk-25_25.0.1+8.orig-googletest.tar.xz
b4dcf7d6204bb7a85571276e30693215 74074532 java optional openjdk-25_25.0.1+8.orig.tar.xz
199ebc330e441dbbf15e90316139baa9 209324 java optional openjdk-25_25.0.1+8-1.debian.tar.xz
1f983f63e6eed0342c8d3c738b5aeee0 15601 java optional openjdk-25_25.0.1+8-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=0V+5
-----END PGP SIGNATURE-----
Attachment:
pgpVo1CLXyQr9.pgp
Description: PGP signature