Comment 0 for bug 1826001

Julian Alarcon (julian-alarcon) wrote :

Current OpenJDK 8 version in Ubuntu is 8u191.

Java is now on 8u212 version

Debian already updated this in stable:

Debian packages:

Changelog from OpenJDK:

Seems that source code is already in Launchpad:

* Security fixes
  - S8211936, CVE-2019-2602: Better String parsing
  - S8218453, CVE-2019-2684: More dynamic RMI interactions
  - S8219066, CVE-2019-2698: Fuzzing TrueType fonts: setCurrGlyphID()

* Update to 8u202-b26.
* Security fixes:
  - CVE-2019-2422, S8206290: Better FileChannel transfer performance.
  - CVE-2019-2426, S8209094: Improve web server connections.