* OpenJDK 8u492 release, build 9 (Oracle April 2026 CPU). Release notes: https://openjdk.org/groups/vulnerability/advisories/2026-04-21 - Security fixes (8u492): + CVE-2026-22016: JAXP unauthorized data access via network + CVE-2026-34282: Networking denial of service (hang or repeatable crash) (CVE-2026-25646 libpng is not applicable to this package: openjdk-8 is built with --with-libpng=system and system-libpng.diff strips the bundled AWT libpng; the fix lives in the libpng1.6 package.) * debian/rules: bump gh_tag to jdk8u492-ga, version_dash_buildnr to 492-b09, gh_tag_aarch32 to jdk8u492-b09-aarch32-20260428. * Refresh orig tarball from Ubuntu archive (openjdk-8_8u492-ga~us2.orig.tar.gz, sha1 6f80ef059e27dfc14c99f3c21990a1bc69b4d249, size 67951797 bytes; source: archive.ubuntu.com openjdk-8 8u492-ga~us2; content byte-identical to upstream jdk8u492-ga after DFSG scrub). * Refresh Ubuntu quilt patches for u492 context: - pass-extra-flags.diff (upstream removed hotspot vm.make; jsig.make hunk retained) - jdk-target-arch-define.diff (context drift only) - gcc14.diff (upstream removed splashscreen_stubs.c; remaining two hunks retained) All 48 quilt patches apply cleanly (0 rejects). * Ref: ELSCVE-134714, ELSCVE-134717