Sync from SUSE:ALP:Source:Standard:1.0 java-17-openjdk revision a69d9e6c8c0e75cc7b5cb1a406dba858

alternative-tzdb_dat.patch

@@ -1,111 +0,0 @@
---- a/src/java.base/share/classes/java/time/zone/TzdbZoneRulesProvider.java	Thu Jun 28 17:49:13 2018 -0700
-+++ b/src/java.base/share/classes/java/time/zone/TzdbZoneRulesProvider.java	Fri Jun 29 08:23:40 2018 +0200
-@@ -74,6 +74,7 @@
- import java.util.List;
- import java.util.Map;
- import java.util.NavigableMap;
-+import java.util.Properties;
- import java.util.Set;
- import java.util.TreeMap;
- import java.util.concurrent.ConcurrentHashMap;
-@@ -106,7 +107,14 @@
-      */
-     public TzdbZoneRulesProvider() {
-         try {
--            String libDir = StaticProperty.javaHome() + File.separator + "lib";
-+            final String homeDir = StaticProperty.javaHome();
-+            if (homeDir == null) {
-+                throw new Error("java.home is not set");
-+            }
-+            String libDir = homeDir + File.separator + "lib";
-+            String otherDir = getZoneInfoDir(homeDir);
-+            if (otherDir != null)
-+                libDir = otherDir;
-             try (DataInputStream dis = new DataInputStream(
-                      new BufferedInputStream(new FileInputStream(
-                          new File(libDir, "tzdb.dat"))))) {
-@@ -117,6 +125,28 @@
-         }
-     }
- 
-+    private static String getZoneInfoDir(final String homeDir) {
-+        try {
-+            File f = new File(homeDir + File.separator + "conf" +
-+                              File.separator + "tz.properties");
-+            if (!f.exists())
-+                return null;
-+            BufferedInputStream bin = new BufferedInputStream(new FileInputStream(f));
-+            Properties props = new Properties();
-+            props.load(bin);
-+            bin.close();
-+            String dir = props.getProperty("sun.zoneinfo.dir");
-+            if (dir == null)
-+                return null;
-+            File tzdbdat = new File(dir, "tzdb.dat");
-+            if (tzdbdat.exists())
-+                return dir;
-+            return null;
-+        } catch (Exception x) {
-+            return null;
-+        }
-+    }
-+
-     @Override
-     protected Set<String> provideZoneIds() {
-         return new HashSet<>(regionIds);
---- a/src/java.base/share/classes/sun/util/calendar/ZoneInfoFile.java	Thu Jun 28 17:49:13 2018 -0700
-+++ b/src/java.base/share/classes/sun/util/calendar/ZoneInfoFile.java	Fri Jun 29 08:23:40 2018 +0200
-@@ -45,6 +45,7 @@
- import java.util.List;
- import java.util.Locale;
- import java.util.Map;
-+import java.util.Properties;
- import java.util.SimpleTimeZone;
- import java.util.concurrent.ConcurrentHashMap;
- import java.util.zip.CRC32;
-@@ -252,7 +253,15 @@
-         AccessController.doPrivileged(new PrivilegedAction<Void>() {
-             public Void run() {
-                 try {
--                    String libDir = StaticProperty.javaHome() + File.separator + "lib";
-+                    final String homeDir = StaticProperty.javaHome();
-+                    if (homeDir == null) {
-+                        throw new Error("java.home is not set");
-+                    }
-+                    String libDir = homeDir + File.separator + "lib";
-+                    String otherDir = getZoneInfoDir(homeDir);
-+                    if (otherDir != null)
-+                        libDir = otherDir;
-+
-                     try (DataInputStream dis = new DataInputStream(
-                              new BufferedInputStream(new FileInputStream(
-                                  new File(libDir, "tzdb.dat"))))) {
-@@ -266,6 +275,28 @@
-         });
-     }
- 
-+    private static String getZoneInfoDir(final String homeDir) {
-+        try {
-+            File f = new File(homeDir + File.separator + "conf" +
-+                              File.separator + "tz.properties");
-+            if (!f.exists())
-+                return null;
-+            BufferedInputStream bin = new BufferedInputStream(new FileInputStream(f));
-+            Properties props = new Properties();
-+            props.load(bin);
-+            bin.close();
-+            String dir = props.getProperty("sun.zoneinfo.dir");
-+            if (dir == null)
-+                return null;
-+            File tzdbdat = new File(dir, "tzdb.dat");
-+            if (tzdbdat.exists())
-+                return dir;
-+            return null;
-+        } catch (Exception x) {
-+            return null;
-+        }
-+    }
-+
-     private static void addOldMapping() {
-         for (String[] alias : oldMappings) {
-             aliases.put(alias[0], alias[1]);

fips.patch

@@ -130,7 +130,7 @@
    if test "x$TOOLCHAIN_TYPE" != xmicrosoft; then
 --- a/make/autoconf/spec.gmk.in
 +++ b/make/autoconf/spec.gmk.in
-@@ -841,6 +841,11 @@ INSTALL_SYSCONFDIR=@sysconfdir@
+@@ -844,6 +844,11 @@ INSTALL_SYSCONFDIR=@sysconfdir@
  # Libraries
  #
  
@@ -1417,7 +1417,7 @@
 +}
 --- a/src/java.base/share/conf/security/java.security
 +++ b/src/java.base/share/conf/security/java.security
-@@ -83,6 +83,17 @@ security.provider.tbd=Apple
+@@ -82,6 +82,17 @@ security.provider.tbd=Apple
  #endif
  security.provider.tbd=SunPKCS11
  
@@ -1435,7 +1435,7 @@
  #
  # A list of preferred providers for specific algorithms. These providers will
  # be searched for matching algorithms before the list of registered providers.
-@@ -293,6 +304,47 @@ policy.ignoreIdentityScope=false
+@@ -292,6 +303,47 @@ policy.ignoreIdentityScope=false
  #
  keystore.type=pkcs12
  
@@ -1483,7 +1483,7 @@
  #
  # Controls compatibility mode for JKS and PKCS12 keystore types.
  #
-@@ -330,6 +382,13 @@ package.definition=sun.misc.,\
+@@ -329,6 +381,13 @@ package.definition=sun.misc.,\
  #
  security.overridePropertiesFile=true
  
@@ -1510,7 +1510,7 @@
 +
 --- a/src/java.base/share/lib/security/default.policy
 +++ b/src/java.base/share/lib/security/default.policy
-@@ -121,6 +121,7 @@ grant codeBase "jrt:/jdk.charsets" {
+@@ -123,6 +123,7 @@ grant codeBase "jrt:/jdk.charsets" {
  grant codeBase "jrt:/jdk.crypto.ec" {
      permission java.lang.RuntimePermission
                     "accessClassInPackage.sun.security.*";
@@ -1518,7 +1518,7 @@
      permission java.lang.RuntimePermission "loadLibrary.sunec";
      permission java.security.SecurityPermission "putProviderProperty.SunEC";
      permission java.security.SecurityPermission "clearProviderProperties.SunEC";
-@@ -130,6 +131,7 @@ grant codeBase "jrt:/jdk.crypto.ec" {
+@@ -132,6 +133,7 @@ grant codeBase "jrt:/jdk.crypto.ec" {
  grant codeBase "jrt:/jdk.crypto.cryptoki" {
      permission java.lang.RuntimePermission
                     "accessClassInPackage.com.sun.crypto.provider";
@@ -1526,7 +1526,7 @@
      permission java.lang.RuntimePermission "accessClassInPackage.jdk.internal.misc";
      permission java.lang.RuntimePermission
                     "accessClassInPackage.sun.security.*";
-@@ -140,6 +142,8 @@ grant codeBase "jrt:/jdk.crypto.cryptoki" {
+@@ -142,6 +144,8 @@ grant codeBase "jrt:/jdk.crypto.cryptoki" {
      permission java.util.PropertyPermission "os.name", "read";
      permission java.util.PropertyPermission "os.arch", "read";
      permission java.util.PropertyPermission "jdk.crypto.KeyAgreement.legacyKDF", "read";
@@ -2408,31 +2408,21 @@
      private static final long serialVersionUID = -2575874101938349339L;
  
      private static final String PUBLIC = "public";
-@@ -139,9 +144,7 @@ abstract class P11Key implements Key, Length {
-         this.tokenObject = tokenObject;
-         this.sensitive = sensitive;
-         this.extractable = extractable;
--        char[] tokenLabel = this.token.tokenInfo.label;
--        isNSS = (tokenLabel[0] == 'N' && tokenLabel[1] == 'S'
--                && tokenLabel[2] == 'S');
-+        isNSS = P11Util.isNSS(this.token);
-         boolean extractKeyInfo = (!DISABLE_NATIVE_KEYS_EXTRACTION && isNSS &&
-                 extractable && !tokenObject);
-         this.keyIDHolder = new NativeKeyHolder(this, keyID, session,
-@@ -395,8 +398,10 @@ abstract class P11Key implements Key, Length {
+@@ -393,9 +398,10 @@ abstract class P11Key implements Key, Length {
                      new CK_ATTRIBUTE(CKA_EXTRACTABLE),
          });
  
--        boolean keySensitive = (attrs[0].getBoolean() ||
--                attrs[1].getBoolean() || !attrs[2].getBoolean());
+-        boolean keySensitive =
+-                (attrs[0].getBoolean() && P11Util.isNSS(session.token)) ||
+-                attrs[1].getBoolean() || !attrs[2].getBoolean();
 +        boolean exportable = plainKeySupportEnabled && !algorithm.equals("DH");
 +        boolean keySensitive = (!exportable &&
-+            (attrs[0].getBoolean() ||
-+             attrs[1].getBoolean() || !attrs[2].getBoolean()));
++                ((attrs[0].getBoolean() && P11Util.isNSS(session.token)) ||
++                attrs[1].getBoolean() || !attrs[2].getBoolean()));
  
          switch (algorithm) {
          case "RSA":
-@@ -451,7 +456,8 @@ abstract class P11Key implements Key, Length {
+@@ -450,7 +456,8 @@ abstract class P11Key implements Key, Length {
  
          public String getFormat() {
              token.ensureValid();
@@ -2863,7 +2853,7 @@
  
  /**
   * Collection of static utility methods.
-@@ -40,10 +44,106 @@ public final class P11Util {
+@@ -40,6 +44,93 @@ public final class P11Util {
  
      private static volatile Provider sun, sunRsaSign, sunJce;
  
@@ -2957,19 +2947,6 @@
      private P11Util() {
          // empty
      }
- 
-+    static boolean isNSS(Token token) {
-+        char[] tokenLabel = token.tokenInfo.label;
-+        if (tokenLabel != null && tokenLabel.length >= 3) {
-+            return (tokenLabel[0] == 'N' && tokenLabel[1] == 'S'
-+                    && tokenLabel[2] == 'S');
-+        }
-+        return false;
-+    }
-+
-     static Provider getSunProvider() {
-         Provider p = sun;
-         if (p == null) {
 --- a/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/SunPKCS11.java
 +++ b/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/SunPKCS11.java
 @@ -26,6 +26,9 @@
@@ -5877,3 +5854,6 @@
 +        }
 +    }
 +}
+-- 
+2.45.2
+

java-17-openjdk.changes

@@ -1,3 +1,875 @@
+-------------------------------------------------------------------
+Thu Jul 18 04:44:09 UTC 2024 - Fridrich Strba <fstrba@suse.com>
+
+- Update to upstream tag jdk-17.0.12+7 (July 2024 CPU)
+  * Security fixes
+    + JDK-8314794, CVE-2024-21131, bsc#1228046: Improve UTF8 String
+      supports
+    + JDK-8319859, CVE-2024-21138, bsc#1228047: Better symbol
+      storage
+    + JDK-8320097: Improve Image transformations
+    + JDK-8320548, CVE-2024-21140, bsc#1228048: Improved loop
+      handling
+    + JDK-8323231, CVE-2024-21147, bsc#1228052: Improve array
+      management
+    + JDK-8323390: Enhance mask blit functionality
+    + JDK-8324559, CVE-2024-21145, bsc#1228051: Improve 2D image
+      handling
+    + JDK-8325600: Better symbol storage
+    + JDK-8327413: Enhance compilation efficiency
+  * Other fixes
+    + JDK-8015739: Background of JInternalFrame is located out of
+      JInternalFrame
+    + JDK-8042380: Test javax/swing/JFileChooser/4524490/
+      /bug4524490.java fails with InvocationTargetException
+    + JDK-8159927: Add a test to verify JMOD files created in the
+      images do not have debug symbols
+    + JDK-8163229: several regression tests have a main method that
+      is never executed
+    + JDK-8163921: HttpURLConnection default Accept header is
+      malformed according to HTTP/1.1 RFC
+    + JDK-8177107: Reduce memory footprint of
+      java.lang.reflect.Constructor/Method
+    + JDK-8185862: AWT Assertion Failure in ::GetDIBits(hBMDC, hBM,
+      0, 1, 0, gpBitmapInfo, 0) 'awt_Win32GraphicsDevice.cpp', at
+      line 185
+    + JDK-8187759: Background not refreshed when painting over a
+      transparent JFrame
+    + JDK-8213714: AttachingConnector/attach/attach001 failed due
+      to "bind failed: Address already in use"
+    + JDK-8223696: java/net/httpclient/MaxStreams.java failed with
+      didn't finish within the time-out
+    + JDK-8256660: Disable DTLS 1.0
+    + JDK-8260540: serviceability/jdwp/AllModulesCommandTest.java
+      failed with "Debuggee error: 'ERROR: transport error 202: bind
+      failed: Address already in use'"
+    + JDK-8263940: NPE when creating default file system when
+      default file system provider is packaged as JAR file on class
+      path
+    + JDK-8264322: Generate CDS archive when creating custom JDK
+      image
+    + JDK-8266242: java/awt/GraphicsDevice/CheckDisplayModes.java
+      failing on macOS 11 ARM
+    + JDK-8267796: vmTestbase/nsk/jvmti/scenarios/hotswap/HS201/
+      /hs201t002/TestDescription.java fails with NoClassDefFoundError
+    + JDK-8268974: GetJREPath() JLI function fails to locate
+      libjava.so if not standard Java launcher is used
+    + JDK-8269914: Factor out heap printing for G1 young and full gc
+    + JDK-8270018: Add scoped object for g1 young gc JFR
+      notification
+    + JDK-8272315: Improve assert_different_registers
+    + JDK-8272651: G1 heap region info print order changed by
+      JDK-8269914
+    + JDK-8272903: Missing license header in ArenaAllocator.java
+    + JDK-8272916: Copyright year was modified unintentionally in
+      jlink.properties and ImagePluginStack.java
+    + JDK-8273153: Consolidate file_exists into os:file_exists
+    + JDK-8273774: CDSPluginTest should only expect
+      classes_nocoops.jsa exists on supported 64-bit platforms
+    + JDK-8275334: Move class loading Events to a separate section
+      in hs_err files
+    + JDK-8275868: ciReplay: Inlining fails with "unloaded
+      signature classes" due to wrong protection domains
+    + JDK-8276227: ciReplay: SIGSEGV if classfile for replay
+      compilation is not present after JDK-8275868
+    + JDK-8278893: Parallel: Remove GCWorkerDelayMillis
+    + JDK-8280030: [REDO] Parallel: More precise boundary in
+      ObjectStartArray::object_starts_in_range
+    + JDK-8280056: gtest/LargePageGtests.java#use-large-pages
+      failed "os.release_one_mapping_multi_commits_vm"
+    + JDK-8280113: (dc) DatagramSocket.receive does not always
+      throw when the channel is closed
+    + JDK-8280377: MethodHandleProxies does not correctly invoke
+      default methods with varags
+    + JDK-8280546: Remove hard-coded 127.0.0.1 loopback address
+    + JDK-8280835: jdk/javadoc/tool/CheckManPageOptions.java
+      depends on source hierarchy
+    + JDK-8281658: Add a security category to the java
+      -XshowSettings option
+    + JDK-8282094: [REDO] Parallel: Refactor
+      PSCardTable::scavenge_contents_parallel
+    + JDK-8283349: Robustness improvements to
+      java/util/prefs/AddNodeChangeListener.jar
+    + JDK-8285452: Add a new test library API to replace a file
+      content using FileUtils.java
+    + JDK-8286045: Use ForceGC for cleaner test cases
+    + JDK-8286311: remove boilerplate from use of runTests
+    + JDK-8286490: JvmtiEventControllerPrivate::set_event_callbacks
+      CLEARING_MASK computation is incorrect
+    + JDK-8286740: JFR: Active Setting event emitted incorrectly
+    + JDK-8286781: Replace the deprecated/obsolete gethostbyname
+      and inet_addr calls
+    + JDK-8289401: Add dump output to TestRawRSACipher.java
+    + JDK-8289643: File descriptor leak with
+      ProcessBuilder.startPipeline
+    + JDK-8290126: Add a check in JavadocTester for "javadoc should
+      not crash"
+    + JDK-8290885: java/lang/ProcessBuilder/PipelineLeaksFD.java
+      fail: More or fewer pipes than expected
+    + JDK-8290901: Reduce use of -source in langtools tests
+    + JDK-8291753: Add JFR event for GC CPU Time
+    + JDK-8294137: Review running times of java.math tests
+    + JDK-8294156: Allow PassFailJFrame.Builder to create test UI
+    + JDK-8294699: Launcher causes lingering busy cursor
+    + JDK-8295026: Remove unused fields in StyleSheet
+    + JDK-8295343: sun/security/pkcs11 tests fail on Linux RHEL 8.6
+      and newer
+    + JDK-8295944: Move the Http2TestServer and related classes
+      into a package of its own
+    + JDK-8296137: diags-examples.xml is broken
+    + JDK-8296190: TestMD5Intrinsics and
+      TestMD5MultiBlockIntrinsics don't test the intrinsics
+    + JDK-8296610: java/net/HttpURLConnection/SetAuthenticator/
+      /HTTPSetAuthenticatorTest.java failed with "BindException:
+      Address already in use: connect"
+    + JDK-8297082: Remove sun/tools/jhsdb/BasicLauncherTest.java
+      from problem list
+    + JDK-8297292: java/nio/channels/FileChannel/
+      /FileExtensionAndMap.java is too slow
+    + JDK-8297445: PPC64: Represent Registers as values
+    + JDK-8297449: Update JInternalFrame Metal Border code
+    + JDK-8297645: Drop the test/jdk/java/net/httpclient/
+      /reactivestreams-tck-tests/TckDriver.java test
+    + JDK-8297695: Fix typos in test/langtools files
+    + JDK-8298413: [s390] CPUInfoTest fails due to uppercase
+      feature string
+    + JDK-8298939: Refactor open/test/jdk/javax/rmi/ssl/
+      /SSLSocketParametersTest.sh to jtreg java test
+    + JDK-8299023: TestPLABResize.java and TestPLABPromotion.java
+      are failing intermittently
+    + JDK-8299858: [Metrics] Swap memory limit reported incorrectly
+      when too large
+    + JDK-8301183: (zipfs) jdk/jdk/nio/zipfs/
+      /TestLocOffsetFromZip64EF.java failing with ZipException:R0 on
+      OL9
+    + JDK-8301381: Verify DTLS 1.0 cannot be negotiated
+    + JDK-8301753: AppendFile/WriteFile has differences between
+      make 3.81 and 4+
+    + JDK-8302069: javax/management/remote/mandatory/notif/
+      /NotifReconnectDeadlockTest.java update
+    + JDK-8302512: Update IANA Language Subtag Registry to Version
+      2023-02-14
+    + JDK-8302907: [PPC64] Use more constexpr in class Register
+    + JDK-8303457: Introduce convenience test library APIs for
+      creating test servers for tests in test/jdk/java/net/httpclient
+    + JDK-8303466: C2: failed: malformed control flow. Limit type
+      made precise with MaxL/MinL
+    + JDK-8303972: (zipfs) Make test/jdk/jdk/nio/zipfs/
+      /TestLocOffsetFromZip64EF.java independent of the zip command
+      line
+    + JDK-8304761: Update IANA Language Subtag Registry to Version
+      2023-03-22
+    + JDK-8304927: Update java/net/httpclient/BasicAuthTest.java to
+      check basic auth over HTTP/2
+    + JDK-8305169: java/security/cert/CertPathValidator/OCSP/
+      /GetAndPostTests.java -- test server didn't start in timely
+      manner
+    + JDK-8305645: System Tray icons get corrupted when Windows
+      primary monitor changes
+    + JDK-8305819: LogConfigurationTest intermittently fails on
+      AArch64
+    + JDK-8305874: Open source AWT Key, Text Event related tests
+    + JDK-8305931: jdk/jfr/jcmd/TestJcmdDumpPathToGCRoots.java
+      failed with "Expected chains but found none"
+    + JDK-8305942: Open source several AWT Focus related tests
+    + JDK-8305943: Open source few AWT Focus related tests
+    + JDK-8306031: Update IANA Language Subtag Registry to Version
+      2023-04-13
+    + JDK-8306040: HttpResponseInputStream.available() returns 1 on
+      empty stream
+    + JDK-8306067: Open source AWT Graphics,GridBagLayout related
+      tests
+    + JDK-8306634: Open source AWT Event related tests
+    + JDK-8306714: Open source few Swing event and AbstractAction
+      tests
+    + JDK-8306838: GetGraphicsTest needs to be headful
+    + JDK-8307411: Test java/foreign/channels/
+      /TestAsyncSocketChannels.java failed: IllegalStateException:
+      Already closed
+    + JDK-8307423: [s390x] Represent Registers as values
+    + JDK-8308021: Update IANA Language Subtag Registry to Version
+      2023-05-11
+    + JDK-8309409: Update HttpInputStreamTest and
+      BodyProcessorInputStreamTest to use hg.openjdk.org
+    + JDK-8309527: Improve test proxy performance
+    + JDK-8309630: Clean up tests that reference deploy modules
+    + JDK-8309763: Move tests in test/jdk/sun/misc/URLClassPath
+      directory to test/jdk/jdk/internal/loader
+    + JDK-8309890: TestStringDeduplicationInterned.java waits for
+      the wrong condition
+    + JDK-8310031: Parallel: Implement better work distribution for
+      large object arrays in old gen
+    + JDK-8310818: Refactor more Locale tests to use JUnit
+    + JDK-8311893: Interactive component with ARIA role 'tabpanel'
+      does not have a programmatically associated name
+    + JDK-8311964: Some jtreg tests failing on x86 with error
+      'unrecognized VM options' (C2 flags)
+    + JDK-8312194: test/hotspot/jtreg/applications/ctw/modules/
+      /jdk_crypto_ec.java cannot handle empty modules
+    + JDK-8312320: Remove javax/rmi/ssl/SSLSocketParametersTest.sh
+      from ProblemList
+    + JDK-8312383: Log X509ExtendedKeyManager implementation class
+      name in TLS/SSL connection
+    + JDK-8312916: Remove remaining usages of -Xdebug from
+      test/hotspot/jtreg
+    + JDK-8313307: java/util/Formatter/Padding.java fails on some
+      Locales
+    + JDK-8313702: Update IANA Language Subtag Registry to Version
+      2023-08-02
+    + JDK-8314283: Support for NSS tests on aarch64 platforms
+    + JDK-8314832: Few runtime/os tests ignore vm flags
+    + JDK-8314835: gtest wrappers should be marked as flagless
+    + JDK-8315071: Modify TrayIconScalingTest.java,
+      PrintLatinCJKTest.java to use new PassFailJFrame's builder
+      pattern usage
+    + JDK-8315117: Update Zlib Data Compression Library to Version
+      1.3
+    + JDK-8315609: Open source few more swing text/html tests
+    + JDK-8315652: RISC-V: Features string uses wrong separator for
+      jtreg
+    + JDK-8315663: Open source misc awt tests
+    + JDK-8315677: Open source few swing JFileChooser and other
+      tests
+    + JDK-8315726: Open source several AWT applet tests
+    + JDK-8315741: Open source few swing JFormattedTextField and
+      JPopupMenu tests
+    + JDK-8315824: Open source several Swing Text/HTML related tests
+    + JDK-8315834: Open source several Swing JSpinner related tests
+    + JDK-8315889: Open source several Swing HTMLDocument related
+      tests
+    + JDK-8315898: Open source swing JMenu tests
+    + JDK-8316017: Refactor timeout handler in PassFailJFrame
+    + JDK-8316053: Open some swing tests 3
+    + JDK-8316138: Add GlobalSign 2 TLS root certificates
+    + JDK-8316142: Enable parallelism in
+      vmTestbase/nsk/monitoring/stress/lowmem tests
+    + JDK-8316154: Opensource JTextArea manual tests
+    + JDK-8316164: Opensource JMenuBar manual test
+    + JDK-8316186: RISC-V: Remove PlatformCmpxchg<4>
+    + JDK-8316242: Opensource SwingGraphics manual test
+    + JDK-8316462: sun/jvmstat/monitor/MonitoredVm/
+      /MonitorVmStartTerminate.java ignores VM flags
+    + JDK-8316563: test tools/jpackage/linux/LinuxResourceTest.java
+      fails on CentOS Linux release 8.5.2111 and Fedora 27
+    + JDK-8316608: Enable parallelism in vmTestbase/gc/vector tests
+    + JDK-8317287: [macos14] InterJVMGetDropSuccessTest.java: Child
+      VM: abnormal termination
+    + JDK-8318322: Update IANA Language Subtag Registry to Version
+      2023-10-16
+    + JDK-8318580: "javax/swing/MultiMonitor/MultimonVImage.java
+      failing with Error. Can't find library: /open/test/jdk/java/
+      /awt/regtesthelpers" after JDK-8316053
+    + JDK-8318599: HttpURLConnection cache issues leading to
+      crashes in JGSS w/ native GSS introduced by 8303809
+    + JDK-8318727: Enable parallelism in
+      vmTestbase/vm/gc/concurrent tests
+    + JDK-8318809: java/util/concurrent/ConcurrentLinkedQueue/
+      /WhiteBox.java shows intermittent failures on linux ppc64le
+      and aarch64
+    + JDK-8318854: [macos14] Running any AWT app prints Secure
+      coding warning
+    + JDK-8319048: Monitor deflation unlink phase prolongs time to
+      safepoint
+    + JDK-8319128: sun/security/pkcs11 tests fail on OL 7.9 aarch64
+    + JDK-8319136: Skip pkcs11 tests on linux-aarch64
+    + JDK-8319268: Build failure with GCC8.3.1 after 8313643
+    + JDK-8319338: tools/jpackage/share/RuntimeImageTest.java fails
+      with -XX:+UseZGC
+    + JDK-8319372: C2 compilation fails with "Bad immediate
+      dominator info"
+    + JDK-8320005: Allow loading of shared objects with .a
+      extension on AIX
+    + JDK-8320113: [macos14] : ShapeNotSetSometimes.java fails
+      intermittently on macOS 14
+    + JDK-8320129: "top" command during jtreg failure handler does
+      not display CPU usage on OSX
+    + JDK-8320303: Allow PassFailJFrame to accept single window
+      creator
+    + JDK-8320342: Use PassFailJFrame for
+      TruncatedPopupMenuTest.java
+    + JDK-8320570: NegativeArraySizeException decoding >1G UTF8
+      bytes with non-ascii characters
+    + JDK-8320681: [macos] Test tools/jpackage/macosx/
+      /MacAppStoreJlinkOptionsTest.java timed out on macOS
+    + JDK-8320712: Rewrite BadFactoryTest in pure Java
+    + JDK-8320943: Files/probeContentType/Basic.java fails on
+      latest Windows 11 - content type mismatch
+    + JDK-8321107: Add more test cases for JDK-8319372
+    + JDK-8321489: Update LCMS to 2.16
+    + JDK-8321925: sun/security/mscapi/KeytoolChangeAlias.java
+      fails with "Alias <246810> does not exist"
+    + JDK-8322239: [macos] a11y : java.lang.NullPointerException is
+      thrown when focus is moved on the JTabbedPane
+    + JDK-8322503: Shenandoah: Clarify gc state usage
+    + JDK-8322858: compiler/c2/aarch64/TestFarJump.java fails on
+      AArch64 due to unexpected PrintAssembly output
+    + JDK-8322920: Some ProcessTools.execute* functions are
+      declared to throw Throwable
+    + JDK-8323210: Update the usage of cmsFLAGS_COPY_ALPHA
+    + JDK-8323519: Add applications/ctw/modules to Hotspot tiered
+      testing
+    + JDK-8323717: Introduce test keyword for tests that need
+      external dependencies
+    + JDK-8323994: gtest runner repeats test name for every single
+      gtest assertion
+    + JDK-8324050: Issue store-store barrier after re-materializing
+      objects during deoptimization
+    + JDK-8324238: [macOS] java/awt/Frame/ShapeNotSetSometimes/
+      /ShapeNotSetSometimes.java fails with the shape has not been
+      applied msg
+    + JDK-8324243: Compilation failures in java.desktop module with
+      gcc 14
+    + JDK-8324598: use mem_unit when working with sysinfo memory
+      and swap related information
+    + JDK-8324632: Update Zlib Data Compression Library to Version
+      1.3.1
+    + JDK-8324723: GHA: Upgrade some actions to avoid deprecated
+      Node 16
+    + JDK-8324733: [macos14] Problem list tests which fail due to
+      macOS bug described in JDK-8322653
+    + JDK-8324824: AArch64: Detect Ampere-1B core and update
+      default options for Ampere CPUs
+    + JDK-8325137: com/sun/management/ThreadMXBean/
+      /ThreadCpuTimeArray.java can fail in Xcomp with out of
+      expected range
+    + JDK-8325203: System.exit(0) kills the launched 3rd party
+      application
+    + JDK-8325213: Flags introduced by configure script are not
+      passed to ADLC build
+    + JDK-8325254: CKA_TOKEN private and secret keys are not
+      necessarily sensitive
+    + JDK-8325326: [PPC64] Don't relocate in case of allocation
+      failure
+    + JDK-8325372: Shenandoah: SIGSEGV crash in unnecessary_acquire
+      due to LoadStore split through phi
+    + JDK-8325432: enhance assert message "relocation addr must be
+      in this section"
+    + JDK-8325496: Make TrimNativeHeapInterval a product switch
+    + JDK-8325579: Inconsistent behavior in
+      com.sun.jndi.ldap.Connection::createSocket
+    + JDK-8325862: set -XX:+ErrorFileToStderr when executing java
+      in containers for some container related jtreg tests
+    + JDK-8325876: crashes in docker container tests on
+      Linuxppc64le Power8 machines
+    + JDK-8325972: Add -x to bash for building with LOG=debug
+    + JDK-8326006: Allow TEST_VM_FLAGLESS to set flagless mode
+    + JDK-8326101: [PPC64] Need to bailout cleanly if creation of
+      stubs fails when code cache is out of space
+    + JDK-8326140: src/jdk.accessibility/windows/native/
+      /libjavaaccessbridge/AccessBridgeJavaEntryPoints.cpp
+      ReleaseStringChars might be missing in early returns
+    + JDK-8326201: [S390] Need to bailout cleanly if creation of
+      stubs fails when code cache is out of space
+    + JDK-8326351: Update the Zlib version in
+      open/src/java.base/share/legal/zlib.md to 1.3.1
+    + JDK-8326521: JFR: CompilerPhase event test fails on windows
+      32 bit
+    + JDK-8326529: JFR: Test for CompilerCompile events fails due
+      to time out
+    + JDK-8326591: New test JmodExcludedFiles.java fails on Windows
+      when --with-external-symbols-in-bundles=public is used
+    + JDK-8326638: Crash in
+      PhaseIdealLoop::remix_address_expressions due to unexpected
+      Region instead of Loop
+    + JDK-8326643: JDK server does not send a dummy
+      change_cipher_spec record after HelloRetryRequest message
+    + JDK-8326661: sun/java2d/cmm/ColorConvertOp/ColConvTest.java
+      assumes profiles were generated by LCMS
+    + JDK-8326794: Bump update version for OpenJDK: jdk-17.0.12
+    + JDK-8326891: Prefer RPATH over RUNPATH for $ORIGIN rpaths in
+      internal JDK binaries
+    + JDK-8326936: RISC-V: Shenandoah GC crashes due to incorrect
+      atomic memory operations
+    + JDK-8326942: [17u] Backout "8325254: CKA_TOKEN private and
+      secret keys are not necessarily sensitive"
+    + JDK-8326960: GHA: RISC-V sysroot cannot be debootstrapped due
+      to ongoing Debian t64 transition
+    + JDK-8327036: [macosx-aarch64] SIGBUS in
+      MarkActivationClosure::do_code_blob reached from
+      Unsafe_CopySwapMemory0
+    + JDK-8327059: os::Linux::print_proc_sys_info add swappiness
+      information
+    + JDK-8327136: javax/management/remote/mandatory/notif/
+      /NotifReconnectDeadlockTest.java fails on libgraal
+    + JDK-8327631: Update IANA Language Subtag Registry to Version
+      2024-03-07
+    + JDK-8327989: java/net/httpclient/ManyRequest.java should not
+      use "localhost" in URIs
+    + JDK-8327998: Enable java/lang/ProcessBuilder/
+      /JspawnhelperProtocol.java on Mac
+    + JDK-8328066: WhiteBoxResizeTest failure on linux-x86: Could
+      not reserve enough space for 2097152KB object heap
+    + JDK-8328165: improve assert(idx < _maxlrg) failed: oob
+    + JDK-8328166: Epsilon: 'EpsilonHeap::allocate_work' misuses
+      the parameter 'size' as size in bytes
+    + JDK-8328168: Epsilon: Premature OOM when allocating object
+      larger than uncommitted heap size
+    + JDK-8328194: Add a test to check default rendering engine
+    + JDK-8328524: [x86] StringRepeat.java failure on linux-x86:
+      Could not reserve enough space for 2097152KB object heap
+    + JDK-8328540: test javax/swing/JSplitPane/4885629/
+      /bug4885629.java fails on windows hidpi
+    + JDK-8328638: Fallback option for POST-only OCSP requests
+    + JDK-8328705: GHA: Cross-compilation jobs do not require build
+      JDK
+    + JDK-8328812: Update and move siphash license
+    + JDK-8328825: Google CAInterop test failures
+    + JDK-8328948: GHA: Restoring sysroot from cache skips the
+      build after JDK-8326960
+    + JDK-8328988: [macos14] Problem list LightweightEventTest.java
+      which fails due to macOS bug described in JDK-8322653
+    + JDK-8328997: Remove unnecessary template parameter lists in
+      GrowableArray
+    + JDK-8329013: StackOverflowError when starting Apache Tomcat
+      with signed jar
+    + JDK-8329213: Better validation for com.sun.security.ocsp.useget option
+    + JDK-8329223: Parallel: Parallel GC resizes heap even if -Xms
+      = -Xmx
+    + JDK-8329570: G1: Excessive is_obj_dead_cond calls in
+      verification
+    + JDK-8329823: RISC-V: Need to sync CPU features with related
+      JVM flags
+    + JDK-8330094: RISC-V: Save and restore FRM in the call stub
+    + JDK-8330156: RISC-V: Range check auipc + signed 12 imm
+      instruction
+    + JDK-8330242: RISC-V: Simplify and remove
+      CORRECT_COMPILER_ATOMIC_SUPPORT in atomic_linux_riscv.hpp
+    + JDK-8330523: Reduce runtime and improve efficiency of
+      KeepAliveTest
+    + JDK-8330815: Use pattern matching for instanceof in
+      KeepAliveCache
+    + JDK-8331113: createJMHBundle.sh support configurable maven
+      repo mirror
+    + JDK-8331352: error: template-id not allowed for
+      constructor/destructor in C++20
+    + JDK-8331641: [17u]: Bump GHA bootstrap JDK to 17.0.11
+    + JDK-8331942: On Linux aarch64, CDS archives should be using
+      64K alignment by default
+    + JDK-8334441: Mark tests in jdk_security_infra group as manual
+    + JDK-8335963: [17u] Remove designator
+      DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.12
+- Modified patch:
+  * fips.patch
+    + rediff to changed context
+
+-------------------------------------------------------------------
+Thu Jul  4 09:18:00 UTC 2024 - Fridrich Strba <fstrba@suse.com>
+
+- Require file for posttrans phase of the headless subpackage
+  (bsc#1227298)
+
+-------------------------------------------------------------------
+Thu Jun  6 17:02:14 UTC 2024 - Fridrich Strba <fstrba@suse.com>
+
+- Added patch:
+  * reproducible-jlink.patch
+    + make the timestamp in jmods reproducible
+
+-------------------------------------------------------------------
+Thu Apr 18 14:19:16 UTC 2024 - Fridrich Strba <fstrba@suse.com>
+
+- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)
+  * Security fixes
+    + JDK-8315708, CVE-2024-21012, bsc#1222987: Enhance HTTP/2
+      client usage
+    + JDK-8317507, JDK-8325348, CVE-2024-21094, bsc#1222986: C2
+      compilation fails with "Exceeded _node_regs array"
+    + JDK-8318340: Improve RSA key implementations
+    + JDK-8319851, CVE-2024-21011, bsc#1222979: Improve exception
+      logging
+    + JDK-8322122, CVE-2024-21068, bsc#1222983: Enhance generation
+      of addresses
+  * Other changes
+    + JDK-6928542: Chinese characters in RTF are not decoded
+    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/
+      /bug4517214.java fails on MacOS
+    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the
+      combobox popup does not appear.
+    + JDK-7167356: (javac) investigate failing tests in
+      JavacParserTest
+    + JDK-8054022: HttpURLConnection timeouts with Expect:
+      100-Continue and no chunking
+    + JDK-8054572: [macosx] JComboBox paints the border incorrectly
+    + JDK-8169475: WheelModifier.java fails by timeout
+    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`
+      accesses `int InetAddress.preferIPv6Address` as a boolean
+    + JDK-8209595: MonitorVmStartTerminate.java timed out
+    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to
+      plain java tests
+    + JDK-8261404: Class.getReflectionFactory() is not thread-safe
+    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from
+    + JDK-8263256: Test java/net/Inet6Address/serialize/
+      /Inet6AddressSerializationTest.java fails due to dynamic
+      reconfigurations of network interface during test
+    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java
+      failed with connection timeout
+    + JDK-8271118: C2: StressGCM should have higher priority than
+      frequency-based policy
+    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse
+      contains info on final result
+    + JDK-8272811: Document the effects of building with
+      _GNU_SOURCE in os_posix.hpp
+    + JDK-8272853: improve `JavadocTester.runTests`
+    + JDK-8273454: C2: Transform (-a)*(-b) into a*b
+    + JDK-8274060: C2: Incorrect computation after JDK-8273454
+    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java
+      fails in Windows 11
+    + JDK-8274621: NullPointerException because listenAddress[0] is
+      null
+    + JDK-8274632: Possible pointer overflow in PretouchTask chunk
+      claiming
+    + JDK-8274634: Use String.equals instead of String.compareTo in
+      java.desktop
+    + JDK-8276125: RunThese24H.java SIGSEGV in
+      JfrThreadGroup::thread_group_id
+    + JDK-8278028: [test-library] Warnings cleanup of the test
+      library
+    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for
+      localhost IP addresses
+    + JDK-8278363: Create extented container test groups
+    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in
+      IPv6 only Windows env
+    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/
+      /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from
+      problemlist.
+    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp
+    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc
+    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect
+      JRadioButton value change
+    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4
+    + JDK-8283994: Make Xerces DatatypeException stackless
+    + JDK-8286312: Stop mixing signed and unsigned types in bit
+      operations
+    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/
+      /CustomComboBoxFocusTest.java fails on mac aarch64
+    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java
+      failed with "Expected two batches of Active Setting events"
+    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only
+      a partially disabled state
+    + JDK-8288846: misc tests fail "assert(ms < 1000) failed:
+      Un-interruptable sleep, short time use only"
+    + JDK-8289764: gc/lock tests failed with "OutOfMemoryError:
+      Java heap space: failed reallocation of scalar replaced
+      objects"
+    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent
+    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/
+      /capability/CM03/cm03t001/TestDescription.java on linux-all
+    + JDK-8290399: [macos] Aqua LAF does not fire an action event
+      if combo box menu is displayed
+    + JDK-8292458: Atomic operations on scoped enums don't build
+      with clang
+    + JDK-8292946: GC lock/jni/jnilock001 test failed
+      "assert(gch->gc_cause() == GCCause::_scavenge_alot ||
+      !gch->incremental_collection_failed()) failed: Twice in a row"
+    + JDK-8293117: Add atomic bitset functions
+    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64
+      atomics
+    + JDK-8294158: HTML formatting for PassFailJFrame instructions
+    + JDK-8294254: [macOS] javax/swing/plaf/aqua/
+      /CustomComboBoxFocusTest.java failure
+    + JDK-8294535: Add screen capture functionality to
+      PassFailJFrame
+    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests
+    + JDK-8295124: Atomic::add to pointer type may return wrong
+      value
+    + JDK-8295274: HelidonAppTest.java fails
+      "assert(event->should_commit()) failed: invariant" from
+      compiled frame"
+    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
+    + JDK-8297968: Crash in PrintOptoAssembly
+    + JDK-8298087: XML Schema Validation reports an required
+      attribute twice via ErrorHandler
+    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java
+      failed: ExceptionInInitializerError: target class not found
+    + JDK-8300269: The selected item in an editable JComboBox with
+      titled border is not visible in Aqua LAF
+    + JDK-8301306: java/net/httpclient/* fail with -Xcomp
+    + JDK-8301310: The SendRawSysexMessage test may cause a JVM
+      crash
+    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing
+      after JDK-8301306
+    + JDK-8301846: Invalid TargetDataLine after screen lock when
+      using JFileChooser or COM library
+    + JDK-8302017: Allocate BadPaddingException only if it will be
+      thrown
+    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/
+      /TestAMEnotNPE.java
+    + JDK-8303605: Memory leaks in Metaspace gtests
+    + JDK-8304074: [JMX] Add an approximation of total bytes
+      allocated on the Java heap by the JVM
+    + JDK-8304696: Duplicate class names in dynamicArchive tests
+      can lead to test failure
+    + JDK-8305356: Fix ignored bad CompileCommands in tests
+    + JDK-8305900: Use loopback IP addresses in security policy
+      files of httpclient tests
+    + JDK-8305906: HttpClient may use incorrect key when finding
+      pooled HTTP/2 connection for IPv6 address
+    + JDK-8305962: update jcstress to 0.16
+    + JDK-8305972: Update XML Security for Java to 3.0.2
+    + JDK-8306014: Update javax.net.ssl TLS tests to use
+      SSLContextTemplate or SSLEngineTemplate
+    + JDK-8306408: Fix the format of several tables in building.md
+    + JDK-8307185: pkcs11 native libraries make JNI calls into java
+      code while holding GC lock
+    + JDK-8307926: Support byte-sized atomic bitset operations
+    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of
+      PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'
+    + JDK-8307990: jspawnhelper must close its writing side of a
+      pipe before reading from it
+    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC
+      while allocating
+    + JDK-8308245: Add -proc:full to describe current default
+      annotation processing policy
+    + JDK-8308336: Test java/net/HttpURLConnection/
+      /HttpURLConnectionExpectContinueTest.java failed:
+      java.net.BindException: Address already in use
+    + JDK-8309302: java/net/Socket/Timeouts.java fails with
+      AssertionError on test temporal post condition
+    + JDK-8309305: sun/security/ssl/SSLSocketImpl/
+      /BlockedAsyncClose.java fails with jtreg test timeout
+    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/
+      /agentthr001/TestDescription.java crashing due to empty while
+      loop
+    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect
+      announcements of JRadioButton
+    + JDK-8309870: Using -proc:full should be considered requesting
+      explicit annotation processing
+    + JDK-8310106: sun.security.ssl.SSLHandshake
+      .getHandshakeProducer() incorrectly checks handshakeConsumers
+    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/
+      /bug6889007.java fails
+    + JDK-8310380: Handle problems in core-related tests on macOS
+      when codesign tool does not work
+    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is
+      spuriously passing
+    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java
+      timed out
+    + JDK-8310838: Correct range notations in MethodTypeDesc
+      specification
+    + JDK-8310844: [AArch64] C1 compilation fails because monitor
+      offset in OSR buffer is too large for immediate
+    + JDK-8310923: Refactor Currency tests to use JUnit
+    + JDK-8311081: KeytoolReaderP12Test.java fail on localized
+      Windows platform
+    + JDK-8311160: [macOS, Accessibility] VoiceOver: No
+      announcements on JRadioButtonMenuItem and JCheckBoxMenuItem
+    + JDK-8311581: Remove obsolete code and comments in TestLVT.java
+    + JDK-8311645: Memory leak in jspawnhelper spawnChild after
+      JDK-8307990
+    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for
+      ShenandoahGC
+    + JDK-8312428: PKCS11 tests fail with NSS 3.91
+    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with
+      "can't seal package nu.xom"
+    + JDK-8313081: MonitoringSupport_lock should be unconditionally
+      initialized after 8304074
+    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in
+      makefiles
+    + JDK-8313206: PKCS11 tests silently skip execution
+    + JDK-8313575: Refactor PKCS11Test tests
+    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/
+      /TestFloatingDecimal should use RandomFactory
+    + JDK-8313643: Update HarfBuzz to 8.2.2
+    + JDK-8313816: Accessing jmethodID might lead to spurious
+      crashes
+    + JDK-8314164: java/net/HttpURLConnection/
+      /HttpURLConnectionExpectContinueTest.java fails intermittently
+      in timeout
+    + JDK-8314220: Configurable InlineCacheBuffer size
+    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM
+      flags
+    + JDK-8315034: File.mkdirs() occasionally fails to create
+      folders on Windows shared folder
+    + JDK-8315042: NPE in PKCS7.parseOldSignedData
+    + JDK-8315594: Open source few headless Swing misc tests
+    + JDK-8315600: Open source few more headless Swing misc tests
+    + JDK-8315602: Open source swing security manager test
+    + JDK-8315611: Open source swing text/html and tree test
+    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should
+      run with -Xbatch
+    + JDK-8315731: Open source several Swing Text related tests
+    + JDK-8315761: Open source few swing JList and JMenuBar tests
+    + JDK-8315920: C2: "control input must dominate current
+      control" assert failure
+    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/
+      /bug4654927.java: component must be showing on the screen to
+      determine its location
+    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use
+      createTestJvm
+    + JDK-8316028: Update FreeType to 2.13.2
+    + JDK-8316030: Update Libpng to 1.6.40
+    + JDK-8316106: Open source few swing JInternalFrame and
+      JMenuBar tests
+    + JDK-8316304: (fs) Add support for BasicFileAttributes
+      .creationTime() for Linux
+    + JDK-8316392: compiler/interpreter/
+      /TestVerifyStackAfterDeopt.java failed with SIGBUS in
+      PcDescContainer::find_pc_desc_internal
+    + JDK-8316414: C2: large byte array clone triggers "failed:
+      malformed control flow" assertion failure on linux-x86
+    + JDK-8316415: Parallelize
+      sun/security/rsa/SignedObjectChain.java subtests
+    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java
+      get OOM killed with Parallel GC
+    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/
+      /CheckOrigin.java as vm.flagless
+    + JDK-8316679: C2 SuperWord: wrong result, load should not be
+      moved before store if not comparable
+    + JDK-8316693: Simplify at-requires checkDockerSupport()
+    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full
+      GC need to cleanup old OopMapCache entries
+    + JDK-8316947: Write a test to check textArea triggers
+      MouseEntered/MouseExited events properly
+    + JDK-8317039: Enable specifying the JDK used to run jtreg
+    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/
+      /ClientJSSEServerJSSE.java on Linux ppc64le
+    + JDK-8317307: test/jdk/com/sun/jndi/ldap/
+      /LdapPoolTimeoutTest.java fails with ConnectException:
+      Connection timed out: no further information
+    + JDK-8317603: Improve exception messages thrown by
+      sun.nio.ch.Net native methods (win)
+    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard
+      freezes the application in macOS 14 Sonoma
+    + JDK-8317807: JAVA_FLAGS removed from jtreg running in
+      JDK-8317039
+    + JDK-8317960: [17u] Excessive CPU usage on
+      AbstractQueuedSynchronized.isEnqueued
+    + JDK-8318154: Improve stability of WheelModifier.java test
+    + JDK-8318183: C2: VM may crash after hitting node limit
+    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/
+      /BootClassPathTest.sh fails on Japanese Windows
+    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails
+      with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1
+    + JDK-8318490: Increase timeout for JDK tests that are close to
+      the limit when run with libgraal
+    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java
+    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni
+      tests
+    + JDK-8318608: Enable parallelism in
+      vmTestbase/nsk/stress/threads tests
+    + JDK-8318689: jtreg is confused when folder name is the same
+      as the test name
+    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with
+      "transport error 202: bind failed: Address already in use"
+    + JDK-8318951: Additional negative value check in JPEG decoding
+    + JDK-8318955: Add ReleaseIntArrayElements in
+      Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to
+      early return
+    + JDK-8318957: Enhance agentlib:jdwp help output by info about
+      allow option
+    + JDK-8318961: increase javacserver connection timeout values
+      and max retry attempts
+    + JDK-8318971: Better Error Handling for Jar Tool When
+      Processing Non-existent Files
+    + JDK-8318983: Fix comment typo in PKCS12Passwd.java
+    + JDK-8319124: Update XML Security for Java to 3.0.3
+    + JDK-8319213: Compatibility.java reads both stdout and stderr
+      of JdkUtils
+    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is
+      null and interface not visible from class loader
+    + JDK-8319456: jdk/jfr/event/gc/collection/
+      /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker
+      Initiated GC' not in the valid causes
+    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh
+    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21
+    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks
+    + JDK-8320001: javac crashes while adding type annotations to
+      the return type of a constructor
+    + JDK-8320168: handle setsocktopt return values
+    + JDK-8320208: Update Public Suffix List to b5bf572
+    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases
+    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks
+      wrong, missed optimization opportunity
+    + JDK-8320597: RSA signature verification fails on signed data
+      that does not encode params correctly
+    + JDK-8320798: Console read line with zero out should zero out
+      underlying buffer
+    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11
+    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs
+    + JDK-8320937: support latest VS2022 MSC_VER in
+      abstract_vm_version.cpp
+    + JDK-8321151: JDK-8294427 breaks Windows L&F on all older
+      Windows versions
+    + JDK-8321215: Incorrect x86 instruction encoding for VSIB
+      addressing mode
+    + JDK-8321408: Add Certainly roots R1 and E1
+    + JDK-8321480: ISO 4217 Amendment 176 Update
+    + JDK-8321599: Data loss in AVX3 Base64 decoding
+    + JDK-8321815: Shenandoah: gc state should be synchronized to
+      java threads only once per safepoint
+    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java
+      timeout on linux-riscv64 platform
+    + JDK-8322098: os::Linux::print_system_memory_info enhance the
+      THP output with
+      /sys/kernel/mm/transparent_hugepage/hpage_pmd_size
+    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces
+    + JDK-8322417: Console read line with zero out should zero out
+      when throwing exception
+    + JDK-8322583: RISC-V: Enable fast class initialization checks
+    + JDK-8322725: (tz) Update Timezone Data to 2023d
+    + JDK-8322750: Test "api/java_awt/interactive/
+      /SystemTrayTests.html" failed because A blue ball icon is
+      added outside of the system tray
+    + JDK-8322772: Clean up code after JDK-8322417
+    + JDK-8322783: prioritize /etc/os-release over
+      /etc/SuSE-release in hs_err/info output
+    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests
+    + JDK-8323008: filter out harmful -std* flags added by autoconf
+      from CXX
+    + JDK-8323021: Shenandoah: Encountered reference count always
+      attributed to first worker thread
+    + JDK-8323086: Shenandoah: Heap could be corrupted by oom
+      during evacuation
+    + JDK-8323243: JNI invocation of an abstract instance method
+      corrupts the stack
+    + JDK-8323331: fix typo hpage_pdm_size
+    + JDK-8323428: Shenandoah: Unused memory in regions compacted
+      during a full GC should be mangled
+    + JDK-8323515: Create test alias "all" for all test roots
+    + JDK-8323637: Capture hotspot replay files in GHA
+    + JDK-8323640: [TESTBUG]testMemoryFailCount in
+      jdk/internal/platform/docker/TestDockerMemoryMetrics.java
+      always fail because OOM killed
+    + JDK-8323806: [17u] VS2017 build fails with warning after
+      8293117.
+    + JDK-8324184: Windows VS2010 build failed with "error C2275:
+      'int64_t'"
+    + JDK-8324280: RISC-V: Incorrect implementation in
+      VM_Version::parse_satp_mode
+    + JDK-8324347: Enable "maybe-uninitialized" warning for
+      FreeType 2.13.1
+    + JDK-8324514: ClassLoaderData::print_on should print address
+      of class loader
+    + JDK-8324647: Invalid test group of lib-test after JDK-8323515
+    + JDK-8324659: GHA: Generic jtreg errors are not reported
+    + JDK-8324937: GHA: Avoid multiple test suites per job
+    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
+      /AKISerialNumber.java is failing
+    + JDK-8325150: (tz) Update Timezone Data to 2024a
+    + JDK-8325585: Remove no longer necessary calls to
+      set/unset-in-asgct flag in JDK 17
+    + JDK-8326000: Remove obsolete comments for class
+      sun.security.ssl.SunJSSE
+    + JDK-8327036: [macosx-aarch64] SIGBUS in
+      MarkActivationClosure::do_code_blob reached from
+      Unsafe_CopySwapMemory0
+    + JDK-8327391: Add SipHash attribution file
+    + JDK-8329836: [17u] Remove designator
+      DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11
+
+-------------------------------------------------------------------
+Thu Mar  7 12:44:28 UTC 2024 - Fridrich Strba <fstrba@suse.com>
+
+- Removed patch:
+  * alternative-tzdb_dat.patch
+    + Remove the possibility to use the system timezone-java. It
+      creates more problems then it solves (bsc#1213470)
+
+-------------------------------------------------------------------
+Tue Feb 20 15:41:01 UTC 2024 - Fridrich Strba <fstrba@suse.com>
+
+- Use %patch -P N instead of deprecated %patchN.
+
 -------------------------------------------------------------------
 Wed Feb  7 14:14:46 UTC 2024 - Fridrich Strba <fstrba@suse.com>
 

java-17-openjdk.spec

@@ -33,7 +33,7 @@
 # Standard JPackage naming and versioning defines.
 %global featurever      17
 %global interimver      0
-%global updatever       10
+%global updatever       12
 %global buildver        7
 %global openjdk_repo    jdk17u
 %global openjdk_tag     jdk-%{featurever}.%{interimver}.%{updatever}%{?patchver:.%{patchver}}+%{buildver}
@@ -165,6 +165,7 @@ Patch13:        implicit-pointer-decl.patch
 Patch14:        reproducible-properties.patch
 Patch15:        system-pcsclite.patch
 Patch16:        fips.patch
+Patch17:        reproducible-jlink.patch
 #
 Patch20:        loadAssistiveTechnologies.patch
 #
@@ -177,8 +178,7 @@ Patch200:       ppc_stack_overflow_fix.patch
 Patch300:       JDK-8282944.patch
 Patch301:       JDK-8303509.patch
 Patch302:       disable-doclint-by-default.patch
-Patch303:       alternative-tzdb_dat.patch
-Patch304:       unsigned-sni-server-name.patch
+Patch303:       unsigned-sni-server-name.patch
 #
 BuildRequires:  alsa-lib-devel
 BuildRequires:  autoconf
@@ -284,11 +284,11 @@ Requires:       jpackage-utils
 Requires:       mozilla-nss
 # Post requires update-alternatives to install tool update-alternatives.
 Requires(post): update-alternatives
+Requires(posttrans): file
 Requires(posttrans): java-ca-certificates
 # Postun requires update-alternatives to uninstall tool update-alternatives.
 Requires(postun): update-alternatives
 Recommends:     mozilla-nss-sysinit
-Recommends:     tzdata-java8
 Obsoletes:      %{name}-accessibility
 %if 0%{?suse_version} > 1315 || 0%{?java_bootstrap}
 # Standard JPackage base provides.
@@ -397,32 +397,32 @@ rm -rvf src/java.desktop/share/native/liblcms/cms*
 rm -rvf src/java.desktop/share/native/liblcms/lcms2*
 %endif
 
-%patch3 -p1
-%patch4 -p1
-%patch5 -p1
-%patch8 -p1
-%patch10 -p1
-%patch12 -p1
-%patch13 -p1
-%patch14 -p1
+%patch -P 3 -p1
+%patch -P 4 -p1
+%patch -P 5 -p1
+%patch -P 8 -p1
+%patch -P 10 -p1
+%patch -P 12 -p1
+%patch -P 13 -p1
+%patch -P 14 -p1
 
 %if %{with_system_pcsc}
-%patch15 -p1
+%patch -P 15 -p1
 %endif
 
-%patch16 -p1
+%patch -P 16 -p1
+%patch -P 17 -p1
 
-%patch20 -p1
+%patch -P 20 -p1
 
-%patch21 -p1
+%patch -P 21 -p1
 
-%patch200 -p1
+%patch -P 200 -p1
 
-%patch300 -p1
-%patch301 -p1
-%patch302 -p1
-%patch303 -p1
-%patch304 -p1
+%patch -P 300 -p1
+%patch -P 301 -p1
+%patch -P 302 -p1
+%patch -P 303 -p1
 
 # Extract systemtap tapsets
 
@@ -522,9 +522,6 @@ popd >& /dev/null
 
 export JAVA_HOME=$(pwd)/%{buildoutputdir}/%{imagesdir}/jdk
 
-# Copy tz.properties
-echo "sun.zoneinfo.dir=%{_datadir}/javazi" >> $JAVA_HOME/conf/tz.properties
-
 # cacerts are generated in runtime in openSUSE
 if [ -f %{buildoutputdir}/%{imagesdir}/jdk/lib/security/cacerts ]; then
         rm %{buildoutputdir}/%{imagesdir}/jdk/lib/security/cacerts
@@ -900,7 +897,6 @@ fi
 %{_jvmdir}/%{sdkdir}/conf/security/policy/unlimited/default_local.policy
 %{_jvmdir}/%{sdkdir}/conf/security/policy/unlimited/default_US_export.policy
 %{_jvmdir}/%{sdkdir}/conf/sound.properties
-%{_jvmdir}/%{sdkdir}/conf/tz.properties
 %{_jvmdir}/%{sdkdir}/lib/desktop/jconsole.desktop
 %{_jvmdir}/%{sdkdir}/lib/jexec
 %{_jvmdir}/%{sdkdir}/lib/jfr/default.jfc

reproducible-jlink.patch

@@ -0,0 +1,11 @@
+--- a/src/jdk.jlink/share/classes/jdk/tools/jlink/internal/JlinkTask.java
++++ b/src/jdk.jlink/share/classes/jdk/tools/jlink/internal/JlinkTask.java
+@@ -776,7 +776,7 @@ public class JlinkTask {
+ 
+     private String getSaveOpts() {
+         StringBuilder sb = new StringBuilder();
+-        sb.append('#').append(new Date()).append("\n");
++        sb.append('#').append(System.getenv("SOURCE_DATE_EPOCH") != null ? new Date(1000 * Long.parseLong(System.getenv("SOURCE_DATE_EPOCH"))) : new Date()).append("\n");
+         for (String c : optionsHelper.getInputCommand()) {
+             sb.append(c).append(" ");
+         }