------------------------------------------------------------
revno: 622
committer: Matthias Klose <d...@ubuntu.com>
branch nick: openjdk7
timestamp: Mon 2018-04-02 11:29:14 +0200
message:
openjdk-7 (7u171-2.6.13-1) experimental; urgency=high
[ Tiago Stürmer Daitx ]
* IcedTea release 2.6.13 (based on 7u171). Closes: #891330.
* Security fixes:
- S8160104: CORBA communication improvements
- S8172525, CVE-2018-2579: Improve key keying case
- S8174756: Extra validation for public keys
- S8175932: Improve host instance supports
- S8176458: Revise default document styling
- S8178449, CVE-2018-2588: Improve LDAP logins
- S8178458: Better use of certificates in LDAP
- S8178466: Better RSA parameters
- S8179536: Cleaner print job handling
- S8179990: Cleaner palette entry handling
- S8180011: Cleaner native graphics device handling
- S8180015: Cleaner AWT robot handling
- S8180020: Improve SymbolHashMap entry handling
- S8180433: Cleaner CLR invocation handling
- S8180877: More deeply colored ICC spaces
- S8181664: Improve JVM UTF String handling
- S8181670: Improve implementation of keystores
- S8182125, CVE-2018-2599: Improve reliability of DNS lookups
- S8182387, CVE-2018-2603: Improve PKCS usage
- S8182601, CVE-2018-2602: Improve usage messages
- S8185292, CVE-2018-2618: Stricter key generation
- S8185325, CVE-2018-2641: Improve GTK initialization
- S8186080: Transform XML interfaces
- S8186212, CVE-2018-2629: Improve GSS handling
- S8186600, CVE-2018-2634: Improve property negotiations
- S8186606, CVE-2018-2633: Improve LDAP lookup robustness
- S8186867: Improve native glyph layouts
- S8186998, CVE-2018-2637: Improve JMX supportive features
- S8189284, CVE-2018-2663: More refactoring for deserialization cases
- S8190289, CVE-2018-2677: More refactoring for client deserialization
cases
- S8191142, CVE-2018-2678: More refactoring for naming deserialization
cases
* Remove multiarch-support pre-dependency. Closes: #887858.
[ Matthias Klose ]
* Bump standards version.
* Disable bootstrap on sid/buster, gcj is removed.
* Remove Damien Raude-Morvan as uploader. Closes: #889378.
-- Matthias Klose <d...@ubuntu.com> Mon, 02 Apr 2018 10:36:32 +0200
modified:
changelog
control
control.in
patches/fix_extra_flags-default.diff
patches/zero-fpu-control-is-noop.diff
rules
--
lp:~openjdk/openjdk/openjdk7
https://code.launchpad.net/~openjdk/openjdk/openjdk7
Your team Debian Java Maintainers is subscribed to branch
lp:~openjdk/openjdk/openjdk7.
To unsubscribe from this branch go to
https://code.launchpad.net/~openjdk/openjdk/openjdk7/+edit-subscription
=== modified file 'changelog'
--- changelog 2018-04-02 08:31:46 +0000
+++ changelog 2018-04-02 09:29:14 +0000
@@ -1,3 +1,48 @@
+openjdk-7 (7u171-2.6.13-1) experimental; urgency=high
+
+ [ Tiago Stürmer Daitx ]
+ * IcedTea release 2.6.13 (based on 7u171). Closes: #891330.
+ * Security fixes:
+ - S8160104: CORBA communication improvements
+ - S8172525, CVE-2018-2579: Improve key keying case
+ - S8174756: Extra validation for public keys
+ - S8175932: Improve host instance supports
+ - S8176458: Revise default document styling
+ - S8178449, CVE-2018-2588: Improve LDAP logins
+ - S8178458: Better use of certificates in LDAP
+ - S8178466: Better RSA parameters
+ - S8179536: Cleaner print job handling
+ - S8179990: Cleaner palette entry handling
+ - S8180011: Cleaner native graphics device handling
+ - S8180015: Cleaner AWT robot handling
+ - S8180020: Improve SymbolHashMap entry handling
+ - S8180433: Cleaner CLR invocation handling
+ - S8180877: More deeply colored ICC spaces
+ - S8181664: Improve JVM UTF String handling
+ - S8181670: Improve implementation of keystores
+ - S8182125, CVE-2018-2599: Improve reliability of DNS lookups
+ - S8182387, CVE-2018-2603: Improve PKCS usage
+ - S8182601, CVE-2018-2602: Improve usage messages
+ - S8185292, CVE-2018-2618: Stricter key generation
+ - S8185325, CVE-2018-2641: Improve GTK initialization
+ - S8186080: Transform XML interfaces
+ - S8186212, CVE-2018-2629: Improve GSS handling
+ - S8186600, CVE-2018-2634: Improve property negotiations
+ - S8186606, CVE-2018-2633: Improve LDAP lookup robustness
+ - S8186867: Improve native glyph layouts
+ - S8186998, CVE-2018-2637: Improve JMX supportive features
+ - S8189284, CVE-2018-2663: More refactoring for deserialization cases
+ - S8190289, CVE-2018-2677: More refactoring for client deserialization cases
+ - S8191142, CVE-2018-2678: More refactoring for naming deserialization cases
+ * Remove multiarch-support pre-dependency. Closes: #887858.
+
+ [ Matthias Klose ]
+ * Bump standards version.
+ * Disable bootstrap on sid/buster, gcj is removed.
+ * Remove Damien Raude-Morvan as uploader. Closes: #889378.
+
+ -- Matthias Klose <d...@ubuntu.com> Mon, 02 Apr 2018 10:36:32 +0200
+
openjdk-7 (7u161-2.6.12-1) experimental; urgency=medium
* IcedTea release 2.6.12 (based on 7u161).
=== modified file 'control'
--- control 2018-04-02 08:31:46 +0000
+++ control 2018-04-02 09:29:14 +0000
@@ -2,7 +2,7 @@
Section: java
Priority: optional
Maintainer: OpenJDK Team <open...@lists.launchpad.net>
-Uploaders: Matthias Klose <d...@ubuntu.com>, Damien Raude-Morvan <draz...@debian.org>
+Uploaders: Matthias Klose <d...@ubuntu.com>
Build-Depends: debhelper (>= 9),
m4, lsb-release, wget, zip, unzip, sharutils,
gawk, cpio, pkg-config, procps, time, wdiff,
@@ -11,12 +11,12 @@
fastjar (>= 2:0.96-0ubuntu2), ant, ant-optional,
libpulse-dev (>= 0.9.12), mauve, dh-autoreconf, quilt,
libtool, g++-6,
- ecj-gcj [amd64 armel arm64 armhf hppa i386 ia64 powerpc powerpcspe ppc64 ppc64el m68k mipsel sh4 sparc sparc64 s390x x32 kfreebsd-i386 kfreebsd-amd64], gcj-jdk [amd64 armel arm64 armhf hppa i386 ia64 powerpc powerpcspe ppc64 ppc64el m68k mipsel sh4 sparc sparc64 s390x x32 kfreebsd-i386 kfreebsd-amd64], openjdk-7-jdk (>= 6b18) [alpha mips mips64 mips64el],
+ openjdk-7-jdk (>= 6b18) [alpha mips mips64 mips64el amd64 armel arm64 armhf hppa i386 ia64 powerpc powerpcspe ppc64 ppc64el m68k mipsel sh4 sparc sparc64 s390x x32 kfreebsd-i386 kfreebsd-amd64],
libxtst-dev, libxi-dev, libxt-dev, libxaw7-dev, libxrender-dev, libasound2-dev, libfreetype6-dev (>= 2.2.1), libgtk2.0-dev, liblcms2-dev, libxinerama-dev, libkrb5-dev, xsltproc, libcups2-dev, libpcsclite-dev, librhino-java (>= 1.7R3~), fonts-ipafont-mincho,
libffi-dev,
zlib1g-dev, libattr1-dev, libpng-dev, libjpeg-dev, libgif-dev, libsctp-dev [linux-any],
libnss3-dev (>= 2:3.17.1), systemtap-sdt-dev,
-Standards-Version: 4.1.2
+Standards-Version: 4.1.3
Homepage: http://openjdk.java.net/
Vcs-Bzr: http://bazaar.launchpad.net/~openjdk/openjdk/openjdk7
Vcs-Browser: https://code.launchpad.net/~openjdk/openjdk/openjdk7
@@ -39,7 +39,7 @@
Package: openjdk-7-jre-headless
Architecture: alpha amd64 armel armhf arm64 i386 ia64 mips mipsel mips64 mips64el powerpc powerpcspe ppc64 ppc64el m68k sh4 sparc sparc64 s390x x32 kfreebsd-i386 kfreebsd-amd64
Multi-Arch: same
-Pre-Depends: ${dpkg:Depends}, ${multiarch:Depends}
+Pre-Depends: ${dpkg:Depends}
Depends: ${jredefault:Depends}, ${cacert:Depends}, ${tzdata:Depends}, ${jcommon:Depends}, ${dlopenhl:Depends}, ${mountpoint:Depends}, ${shlibs:Depends}, ${misc:Depends}
Recommends: ${dlopenhl:Recommends}, ${jamvm:Recommends}
Suggests: ${jamvm:Suggests}, libnss-mdns, sun-java6-fonts, fonts-dejavu-extra, fonts-ipafont-gothic, fonts-ipafont-mincho, fonts-wqy-microhei, fonts-wqy-zenhei, fonts-indic,
=== modified file 'control.in'
--- control.in 2018-04-02 08:31:46 +0000
+++ control.in 2018-04-02 09:29:14 +0000
@@ -2,7 +2,7 @@
Section: java
Priority: optional
Maintainer: OpenJDK Team <open...@lists.launchpad.net>
-Uploaders: Matthias Klose <d...@ubuntu.com>, Damien Raude-Morvan <draz...@debian.org>
+Uploaders: Matthias Klose <d...@ubuntu.com>
Build-Depends: debhelper (>= 9),
m4, lsb-release, wget, zip, unzip, sharutils,
gawk, cpio, pkg-config, procps, time, wdiff,
@@ -16,7 +16,7 @@
@bd_zero@ @bd_shark@
@bd_syslibs@
@bd_nss@ @bd_systemtap@
-Standards-Version: 4.1.2
+Standards-Version: 4.1.3
Homepage: http://openjdk.java.net/
Vcs-Bzr: http://bazaar.launchpad.net/~openjdk/openjdk/openjdk7
Vcs-Browser: https://code.launchpad.net/~openjdk/openjdk/openjdk7
@@ -39,7 +39,7 @@
Package: @basename@-jre-headless
Architecture: @any_archs@
Multi-Arch: same
-Pre-Depends: ${dpkg:Depends}, ${multiarch:Depends}
+Pre-Depends: ${dpkg:Depends}
Depends: ${jredefault:Depends}, ${cacert:Depends}, ${tzdata:Depends}, ${jcommon:Depends}, ${dlopenhl:Depends}, ${mountpoint:Depends}, ${shlibs:Depends}, ${misc:Depends}
Recommends: ${dlopenhl:Recommends}, ${jamvm:Recommends}
Suggests: ${jamvm:Suggests}, libnss-mdns, sun-java6-fonts, @core_fonts@, @cjk_fonts@
=== modified file 'patches/fix_extra_flags-default.diff'
--- patches/fix_extra_flags-default.diff 2018-04-02 08:31:46 +0000
+++ patches/fix_extra_flags-default.diff 2018-04-02 09:29:14 +0000
@@ -63,7 +63,7 @@
--- openjdk/jdk/make/common/Defs.gmk
+++ openjdk/jdk/make/common/Defs.gmk
@@ -556,11 +556,11 @@ CXXFLAGS_$(VARIANT)/BYFILE = $(CXXFLAGS
- # EXTRA_CFLAGS are used to define cross-compilation options
+ # EXTRA_CFLAGS and EXTRA_LDFLAGS are used for command-line additions
#
ASFLAGS = $(ASFLAGS_$(VARIANT)) $(ASFLAGS_COMMON) $(OTHER_ASFLAGS)
-CFLAGS = $(CFLAGS_$(VARIANT)/BYFILE) $(CFLAGS_COMMON) $(OTHER_CFLAGS) $(EXTRA_CFLAGS)
@@ -72,7 +72,7 @@
+CXXFLAGS = $(CXXFLAGS_$(VARIANT)/BYFILE) $(CXXFLAGS_COMMON) $(OTHER_CXXFLAGS) $(EXTRA_CXXFLAGS_JDK)
CPPFLAGS = $(CPPFLAGS_$(VARIANT)) $(CPPFLAGS_COMMON) $(OTHER_CPPFLAGS) \
- $(DEFINES) $(OPTIONS:%=-D%)
--LDFLAGS = $(LDFLAGS_$(VARIANT)) $(LDFLAGS_COMMON) $(OTHER_LDFLAGS)
+-LDFLAGS = $(LDFLAGS_$(VARIANT)) $(LDFLAGS_COMMON) $(OTHER_LDFLAGS) $(EXTRA_LDFLAGS)
+ $(DEFINES) $(OPTIONS:%=-D%) $(EXTRA_CPPFLAGS_JDK)
+LDFLAGS = $(LDFLAGS_$(VARIANT)) $(LDFLAGS_COMMON) $(OTHER_LDFLAGS) $(EXTRA_LDFLAGS_JDK)
LDLIBS = $(OTHER_LDLIBS) $(LDLIBS_$(VARIANT)) $(LDLIBS_COMMON)
=== modified file 'patches/zero-fpu-control-is-noop.diff'
--- patches/zero-fpu-control-is-noop.diff 2015-07-06 13:57:08 +0000
+++ patches/zero-fpu-control-is-noop.diff 2018-04-02 09:29:14 +0000
@@ -12,11 +12,12 @@
===================================================================
--- openjdk/hotspot/src/os_cpu/linux_zero/vm/os_linux_zero.cpp
+++ openjdk/hotspot/src/os_cpu/linux_zero/vm/os_linux_zero.cpp
-@@ -290,11 +290,12 @@ void os::Linux::init_thread_fpu_state(vo
+@@ -290,12 +290,12 @@ void os::Linux::init_thread_fpu_state(vo
}
int os::Linux::get_fpu_control_word() {
- ShouldNotCallThis();
+- return -1; // silence compile warnings
+ // Nothing to do
+ return 0;
}
=== modified file 'rules'
--- rules 2018-04-02 08:31:46 +0000
+++ rules 2018-04-02 09:29:14 +0000
@@ -133,6 +133,12 @@
stage1_gcj_archs :=
endif
+# Disable bootstrap on sid/buster, gcj is removed
+ifneq (,$(filter $(distrel),sid buster))
+ stage1_openjdk_archs := $(stage1_openjdk_archs) $(stage1_gcj_archs)
+ stage1_gcj_archs :=
+endif
+
# Disable bootstrap on wheezy, it currently fails due to the last round
# of 8u151 security patches
ifneq (,$(filter $(distrel),wheezy))
@@ -727,7 +733,6 @@
ifneq (,$(DEB_HOST_MULTIARCH))
control_vars += \
- '-Vmultiarch:Depends=multiarch-support' \
'-Vmultiarch:Conflicts=icedtea-netx (<< 1.1.1-2~)'
endif
__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>.
Please use
debian-j...@lists.debian.org for discussions and questions.
