Univention Bugzilla – Bug 49897
openjdk-8: Multiple issues (4.3)
Last modified: 2019-07-24 16:01:05 CEST
New Debian openjdk-8 8u222-b10-1~deb9u1 fixes: This update addresses the following issues: * Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698) (CVE-2019-2745) * Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762) * Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769) * Insufficient restriction of privileges in AccessController (Security, 8216381) (CVE-2019-2786) * Missing URL format validation (Networking, 8221518) (CVE-2019-2816) * Missing array bounds check in crypto providers (JCE, 8223511) (CVE-2019-2842)
--- mirror/ftp/4.3/unmaintained/component/4.3-4-errata/source/openjdk-8_8u212-b03-2~deb9u1.dsc +++ apt/ucs_4.3-0-errata4.3-4/source/openjdk-8_8u222-b10-1~deb9u1.dsc @@ -1,6 +1,74 @@ -8u212-b03-2~deb9u1 [Tue, 28 May 2019 19:55:21 +0000] Moritz Muehlenhoff <jmm@debian.org>: - - * Rebuild for stretch-security +8u222-b10-1~deb9u1 [Fri, 19 Jul 2019 16:57:48 +0000] Moritz Muehlenhoff <jmm@debian.org>: + + * Rebuild for stretch + +8u222-b10-1 [Thu, 18 Jul 2019 18:57:23 +0200] Matthias Klose <doko@ubuntu.com>: + + * Update to 8u222-b10 (except for AArch32, updated to b08). + - Security fixes: + - S8191073: JpegImageReader throws IndexOutOfBoundsException when + trying to read image data from tables-only image. + - S8208698, CVE-2019-2745: Improved ECC Implementation. + - S8212328, CVE-2019-2762: Exceptional throw cases. + - S8213431, CVE-2019-2766: Improve file protocol handling. + - S8213432, CVE-2019-2769: Better copies of CopiesList. + - S8216381, CVE-2019-2786: More limited privilege usage. + - S8217563: Improve realm maintenance. + - S8218863: Better endpoint checks. + - S8218873: Improve JSSE endpoint checking. + - S8218876, CVE-2019-7317: Improve PNG support options. + - S8219018: Adjust positions of glyphs. + - S8219020: Table alternate substitutions. + - S8219775: Certificate validation improvements. + - S8220192: Better outlook for SecureRandom. + - S8220517: Enhanced GIF support. + - S8221518, CVE-2019-2816: Normalize normalization. + - S8223511, CVE-2019-2842: Extended AES support. + + [ Matthias Klose ] + * Bump standards version. + + [ Tiago Stürmer Daitx ] + * Backport fix for S8223511 for AArch32. + +8u222-b07-3 [Sun, 07 Jul 2019 22:02:56 +0200] Matthias Klose <doko@debian.org>: + + * Upload to unstable. + +8u222-b07-2 [Sat, 29 Jun 2019 11:17:16 +0200] Matthias Klose <doko@ubuntu.com>: + + * Remove AArch32 patches, applied upstream. + * Fix build dependencies for Ubuntu precise builds. + +8u222-b07-1 [Sat, 29 Jun 2019 10:48:23 +0200] Matthias Klose <doko@ubuntu.com>: + + * Update to 8u222-b07. + +8u222-b05-1 [Mon, 10 Jun 2019 15:03:02 +0200] Matthias Klose <doko@ubuntu.com>: + + [ Matthias Klose ] + * Update to 8u222-b05 (except for AArch32). + * Apply suggested hotspot fixes for AArch32. + * Re-enable running the testsuite. + + [ Tiago Stürmer Daitx ] + * Find any hs_err_pid files generated during the build and send to stdout. + +8u222-b04-3 [Fri, 07 Jun 2019 09:14:38 +0200] Matthias Klose <doko@ubuntu.com>: + + * Update ARM32 to jdk8u222-b04-aarch32-190603. + * Regenerate the ppc64el patch. + * Remove unused patches ppc64le-8036767 and zero-opt. + +8u222-b04-1 [Mon, 03 Jun 2019 12:11:07 +0200] Matthias Klose <doko@ubuntu.com>: + + * Update to 8u222-b04. + * Update ARM32 to jdk8u212-b04-aarch32-190430. + * Fix 32bit zero builds. + +8u212-b03-3 [Tue, 28 May 2019 14:10:32 +0200] Matthias Klose <doko@ubuntu.com>: + + * Use -a instead of -s for debhelper tools. 8u212-b03-2 [Tue, 28 May 2019 10:14:27 +0200] Matthias Klose <doko@ubuntu.com>: <http://10.200.17.11/4.3-4/#2302735842919744357>
OK: yaml OK: announce_errata OK: patch OK: piuparts [4.3-4] 4194b97d08 Bug #49897: openjdk-8 8u222-b10-1~deb9u1 doc/errata/staging/openjdk-8.yaml | 18 ++++++++---------- 1 file changed, 8 insertions(+), 10 deletions(-) [4.3-4] dc38819336 Bug #49897: openjdk-8 8u222-b10-1~deb9u1 doc/errata/staging/openjdk-8.yaml | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+)
<http://errata.software-univention.de/ucs/4.3/548.html>