openjdk-25-crac (25.0.5.0.3+1-0ubuntu1) tenacious; urgency=medium

  * New release based on OpenJDK 25.0.5.0.3 release, build 1.
    - CVEs:
      + CVE-2026-114820
      + CVE-2026-83374
      + CVE-2026-83376
      + CVE-2026-83378
      + CVE-2026-83380
      + CVE-2026-83381
      + CVE-2026-83387
      + CVE-2026-83395
      + CVE-2026-83400
      + CVE-2026-87255
      + CVE-2026-87290
      + CVE-2026-87291
      + CVE-2026-87292
      + CVE-2026-87294
      + CVE-2026-87367
      + CVE-2026-91332
      + CVE-2026-91333
      + CVE-2026-91334
      + CVE-2026-91335
      + CVE-2026-91373
      + CVE-2026-91374
      + CVE-2026-91375
      + CVE-2026-91379
      + CVE-2026-91379
      + CVE-2026-91380
      + CVE-2026-91394
      + CVE-2026-91397
      + CVE-2026-91398
      + CVE-2026-91400
      + CVE-2026-91410
      + CVE-2026-91415
      + CVE-2026-91418
      + CVE-2026-91451
      + CVE-2026-91452
      + CVE-2026-91453
      + CVE-2026-91461
      + CVE-2026-91462
      + CVE-2026-91463
      + CVE-2026-91464
      + CVE-2026-91487
      + CVE-2026-101516
  [ Reuben Roessler ]
  * d/u/signing-key.asc: Merge new signing key.
  * d/README.source: Use generic OpenJDK README.source.
  * d/{control,control.in}: Fix missed dbus-x11 replacement for
    dbus-daemon.
  * d/p/jdk-8384505.diff: Account for all jtreg-based frames in stack
    walk test (JDK-8384505).

  [ Vladimir Petko ]
  * d/man: Update man pages.
  * Cherry-pick upstream patches to resolve FFM font rendering crash
    and memory leak (LP: #2155650):
    - d/p/jdk-8337853.diff: Temporary directory was filling up
      with the temporary font files.
    - d/p/jdk-8371066.diff: Remove unused classes so that other font patches
      apply cleanly.
    - d/p/jdk-8378603.diff: libfontmanager FFM was using mismatched free
      and malloc, when overridden with LD_LIBRARY_PRELOAD.
    - d/p/jdk-8378607.diff: GlyphLayout cache prevented Fonts from being
      garbage collected.
    - d/p/jdk-8378615.diff: FFM call stub was holding global JNI reference
      to the font.
  * d/rules: add --with-external-symbols-in-bundles=full configure
    option (JDK-8373246).
  * d/B-jre-*.overrides.in: Drop exit-in-shared-library lintian
    override.
  * d/p/jdk-8388170.diff: Refresh patch.
  * To simplify future merges we include the following patches:
    - d/JB-{jre-headless,testsuport}.overrides.in: suppress specific-
      address-in-shared-library for i386 (JDK-6454213).
    - d/rules: disable tree-slp-vectorize for Ubuntu S390x builds (LP:
      #2095441). Add workaround for Launchpad C2 crash.
    - d/rules: Fix compilation flags for Ubuntu backports: do not override
      C and C++ maintainer append flags on jammy and noble S390x with the
      workaround.
    - d/rules: Link with -latomic for jammy and focal on riscv64
      to resolve ftbfs.
    - d/t: Add loong64 specific problemlists.

  [ Matthias Klose ]
  * Build using GCC 16 on development releases.

 -- Reuben Roessler <reuben.roessler@canonical.com>  Thu, 05 Nov 2026 10:59:27 +1100

openjdk-25-crac (25.0.4+7-0ubuntu1) stonking; urgency=medium

  * New release based on OpenJDK 25.0.4 release, build 7.
    - CVEs:
      + CVE-2026-46968
      + CVE-2026-46917
      + CVE-2026-47010
      + CVE-2026-47021
      + CVE-2026-47027
      + CVE-2026-60147
      + CVE-2026-47059
      + CVE-2026-47063
      + CVE-2026-41254
    - Release notes: https://bit.ly/openjdk2504
  * d/man: Regenerate.
  * d/rules: Do not perform copyright validation for old releases.
  * d/rules: Check DEB_BUILD_PROFILES in addition to DEB_BUILD_OPTIONS
    to set up with_check variable. Do not check control files if
    with_check is disabled (Closes: #1137499).
  * d/p/jdk-8385738.diff: Cherry-pick upstream patch to generate
    reproducible javadoc snippet ids (JDK-8385738).
  * d/p/{jdk-8369817.diff,missing-method-code.diff,
    zero-crac-ftbfs-fix.patch} : Drop patch applied upstream.

 -- Pushkar Kulkarni <pushkar.kulkarni@canonical.com>  Tue, 28 Jul 2026 22:58:47 +0530

openjdk-25-crac (25.0.3+9-0ubuntu1) stonking; urgency=medium

  * New release based on OpenJDK 25.0.3 release, build 9.
    - CVEs:
      + CVE-2026-22016: 8370529: Enhance Path Factories Redux
      + CVE-2026-34282: 8374557: Enhance TLS connection handling
      + CVE-2026-22021: 8371830: Enhance certificate chain validation
      + CVE-2026-22013: 8370615: Improve Kerberos credentialing
      + CVE-2026-23865: 8379158: Update FreeType to 2.14.2
      + CVE-2026-22008: 8367463: Improved Arena allocations
      + CVE-2026-22018: 8370986: Enhance Zip file reading
      + CVE-2026-22007: 8369575: Enhance crypto algorithm support
      + CVE-2026-34268: 8371935: Enhance key generation
  * Synchronize packaging with openjdk-25:
    - d/t/jtreg-autopkgtest.in: Increase the timeout from 10 to 30 seconds
      on loong64 (zero VM).
    - Ensure that all generated files are up to date:
      + The copyright generator now checks if the current directory contains
        an unpacked OpenJDK tree by verifying the presence of the
        ASSEMBLY_EXCEPTION file.
      + The copyright generator now drops common license text in-memory,
        without running a shell script that modifies the source tree.
      + d/rules: Add targets to generate all files and check that they match
        the ones provided in the source package.
      + d/rules: Add nogen DEB_BUILD_OPTION to disable file regeneration.
    - d/{rules/control.in/test/control.in}: Replace dbus-x11 with dbus-
      daemon dependency. Closes: #1117100.
    - Use pre-generated man pages on architectures where pandoc is not
      available. Closes: #1128485.
    - d/rules: Use '-' instead of '~' in opt version string, swap package
      version and distribution.
    - d/dbg.py: Fix syntax errors in gdb unwinder, do not install unwinder
      for zero, install hotspot unwinder in the correct directory.
      Disable debug traces. Load unwinder in the disabled state.
      Return iterator rather than list from OpenJDKFrameFilter.flatten().
      Remove unused code from NativeMethodInfo.
    - d/rules: Synchornize with_check and any_arches variables with
      openjdk-25. Synchronize formatting.
    - d/p: Synchronize patches with openjdk-25.
  * d/p/missing-method-code.diff: Add missing include to resolve the
    link error.
  * Regenerate copyright and control files.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Mon, 04 May 2026 16:50:26 +1200

openjdk-25-crac (25.0.2+10-0ubuntu1) resolute; urgency=medium

  * New release based on OpenJDK 25.0.2 release, build 10.
    - CVEs:
      + CVE-2026-21945: 8368032: Enhance Certificate Checking.
      + CVE-2026-21932: 8359501: Enhance Handling of URIs.
      + CVE-2026-21933: 8362632: Improve HttpServer Request handling.
      + CVE-2026-21925: 8341496: Improve JMX connections.
  * d/rules: Use jtreg8 package for the tests.
  * d/p/power-opt.diff: Refresh patch.
  * Drop patches applied upstream:
     - d/p/jdk-8359735.patch.
     - d/p/jdk-8369450-proposed.patch.
     - d/p/jdk-8370049-proposed.patch.
  * d/s/lintian-overrides: Update override comment.
  * d/rules: Use generic code to replace bundled jquery.
  * d/JB-doc.overrides.in: Drop binary package bundled jquery
    override. The override is not needed for the binary package.
  * d/t/control.in: Remove flaky and skippable flag from dependencies.sh
    test and install only jre package.
  * d/{control, t/control}: Regenerate.
  * d/t/dependencies.in: Relax PC/SC library assertion,
    regenerate d/t/dependencies.sh.
  * d/t/write-problems.{in,sh}: Remove -crac suffix when filtering
    problem list.
  * d/t/problems.csv: Synchronize problemlist with openjdk-25.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Mon, 26 Jan 2026 20:43:23 +1300

openjdk-25-crac (25.0.1+8-0ubuntu1) resolute; urgency=medium

  * New release based on OpenJDK 25.0.1 release, build 8.
    - CVEs:
      + CVE-2025-53057, 8360937: Enhance certificate handling.
      + CVE-2025-53066, 8356294: Enhance Path Factories.
      + CVE-2025-61748, 8359454: Enhance String handling.
  * d/tests/*: sync latest changes from openjdk-25.
  * d/patches: update latest patches from openjdk-25.
  * Update source URL in copyright-generator and d/copyright.
  * d/control: enable building with gcc-15, misc changes.
  * d/{control.*, watch.in}: enable regeneration for older
    lts releases.

 -- Pushkar Kulkarni <pushkar.kulkarni@canonical.com>  Mon, 17 Nov 2025 18:47:17 +0530

openjdk-25-crac (25+36-0ubuntu1) questing; urgency=medium

  * OpenJDK with CRaC support v25 GA, based on jdk-25+36
    (LP: #2120601).
  * d/rules: merge delta from openjdk-25 packaging.
  * d/watch: Regenerate for upstream release.
  * d/patches: add patch to fix ftbfs in zero variant

 -- Pushkar Kulkarni <pushkar.kulkarni@canonical.com>  Thu, 18 Sep 2025 18:02:42 +0530

openjdk-25-crac (25~26ea-0ubuntu1) questing; urgency=medium

  * Initial release. (LP: #2115318)

 -- Pushkar Kulkarni <pushkar.kulkarni@canonical.com>  Fri, 01 Aug 2025 21:08:03 +0530
