Univention Bugzilla – Bug 49889
openjdk-8: Multiple issues (4.4)
Last modified: 2019-07-24 15:03:18 CEST
New Debian openjdk-8 8u222-b10-1~deb9u1 fixes: This update addresses the following issues: * openjdk-8 (CVE-2019-2745) * Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762) * Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769) * openjdk-8 (CVE-2019-2786) * Missing URL format validation (Networking, 8221518) (CVE-2019-2816) * Missing array bounds check in crypto providers (JCE, 8223511) (CVE-2019-2842)
--- mirror/ftp/4.4/unmaintained/component/4.4-0-errata/source/openjdk-8_8u212-b03-2~deb9u1.dsc +++ apt/ucs_4.4-0-errata4.4-0/source/openjdk-8_8u222-b10-1~deb9u1.dsc @@ -1,6 +1,74 @@ -8u212-b03-2~deb9u1 [Tue, 28 May 2019 19:55:21 +0000] Moritz Muehlenhoff <jmm@debian.org>: - - * Rebuild for stretch-security +8u222-b10-1~deb9u1 [Fri, 19 Jul 2019 16:57:48 +0000] Moritz Muehlenhoff <jmm@debian.org>: + + * Rebuild for stretch + +8u222-b10-1 [Thu, 18 Jul 2019 18:57:23 +0200] Matthias Klose <doko@ubuntu.com>: + + * Update to 8u222-b10 (except for AArch32, updated to b08). + - Security fixes: + - S8191073: JpegImageReader throws IndexOutOfBoundsException when + trying to read image data from tables-only image. + - S8208698, CVE-2019-2745: Improved ECC Implementation. + - S8212328, CVE-2019-2762: Exceptional throw cases. + - S8213431, CVE-2019-2766: Improve file protocol handling. + - S8213432, CVE-2019-2769: Better copies of CopiesList. + - S8216381, CVE-2019-2786: More limited privilege usage. + - S8217563: Improve realm maintenance. + - S8218863: Better endpoint checks. + - S8218873: Improve JSSE endpoint checking. + - S8218876, CVE-2019-7317: Improve PNG support options. + - S8219018: Adjust positions of glyphs. + - S8219020: Table alternate substitutions. + - S8219775: Certificate validation improvements. + - S8220192: Better outlook for SecureRandom. + - S8220517: Enhanced GIF support. + - S8221518, CVE-2019-2816: Normalize normalization. + - S8223511, CVE-2019-2842: Extended AES support. + + [ Matthias Klose ] + * Bump standards version. + + [ Tiago Stürmer Daitx ] + * Backport fix for S8223511 for AArch32. + +8u222-b07-3 [Sun, 07 Jul 2019 22:02:56 +0200] Matthias Klose <doko@debian.org>: + + * Upload to unstable. + +8u222-b07-2 [Sat, 29 Jun 2019 11:17:16 +0200] Matthias Klose <doko@ubuntu.com>: + + * Remove AArch32 patches, applied upstream. + * Fix build dependencies for Ubuntu precise builds. + +8u222-b07-1 [Sat, 29 Jun 2019 10:48:23 +0200] Matthias Klose <doko@ubuntu.com>: + + * Update to 8u222-b07. + +8u222-b05-1 [Mon, 10 Jun 2019 15:03:02 +0200] Matthias Klose <doko@ubuntu.com>: + + [ Matthias Klose ] + * Update to 8u222-b05 (except for AArch32). + * Apply suggested hotspot fixes for AArch32. + * Re-enable running the testsuite. + + [ Tiago Stürmer Daitx ] + * Find any hs_err_pid files generated during the build and send to stdout. + +8u222-b04-3 [Fri, 07 Jun 2019 09:14:38 +0200] Matthias Klose <doko@ubuntu.com>: + + * Update ARM32 to jdk8u222-b04-aarch32-190603. + * Regenerate the ppc64el patch. + * Remove unused patches ppc64le-8036767 and zero-opt. + +8u222-b04-1 [Mon, 03 Jun 2019 12:11:07 +0200] Matthias Klose <doko@ubuntu.com>: + + * Update to 8u222-b04. + * Update ARM32 to jdk8u212-b04-aarch32-190430. + * Fix 32bit zero builds. + +8u212-b03-3 [Tue, 28 May 2019 14:10:32 +0200] Matthias Klose <doko@ubuntu.com>: + + * Use -a instead of -s for debhelper tools. 8u212-b03-2 [Tue, 28 May 2019 10:14:27 +0200] Matthias Klose <doko@ubuntu.com>: <http://10.200.17.11/4.4-0/#2302735842919744357>
OK: yaml OK: announce_errata OK: patch OK: piuparts [4.4-1] 24d5a525bf Bug #49886, Bug #49890, Bug #49888, Bug #49889, Bug #49887, Bug #49885: 4.4-1 Errata doc/errata/staging/openjdk-8.yaml | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+)
<http://errata.software-univention.de/ucs/4.4/189.html>