From 2c025da14a4e56163fb4f20575f0559d965ab269f566b7e965915d2185e6cf48 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Adrian=20Schr=C3=B6ter?= Date: Tue, 30 Jul 2024 16:53:26 +0200 Subject: [PATCH] Sync from SUSE:SLFO:Main java-17-openjdk revision a69d9e6c8c0e75cc7b5cb1a406dba858 --- fips.patch | 56 ++--- java-17-openjdk.changes | 467 +++++++++++++++++++++++++++++++++++++++ java-17-openjdk.spec | 7 +- jdk-17.0.11+9.tar.gz | 3 - jdk-17.0.12+7.tar.gz | 3 + reproducible-jlink.patch | 11 + 6 files changed, 504 insertions(+), 43 deletions(-) delete mode 100644 jdk-17.0.11+9.tar.gz create mode 100644 jdk-17.0.12+7.tar.gz create mode 100644 reproducible-jlink.patch diff --git a/fips.patch b/fips.patch index b498b42..802cb95 100644 --- a/fips.patch +++ b/fips.patch @@ -130,7 +130,7 @@ if test "x$TOOLCHAIN_TYPE" != xmicrosoft; then --- a/make/autoconf/spec.gmk.in +++ b/make/autoconf/spec.gmk.in -@@ -841,6 +841,11 @@ INSTALL_SYSCONFDIR=@sysconfdir@ +@@ -844,6 +844,11 @@ INSTALL_SYSCONFDIR=@sysconfdir@ # Libraries # @@ -1417,7 +1417,7 @@ +} --- a/src/java.base/share/conf/security/java.security +++ b/src/java.base/share/conf/security/java.security -@@ -83,6 +83,17 @@ security.provider.tbd=Apple +@@ -82,6 +82,17 @@ security.provider.tbd=Apple #endif security.provider.tbd=SunPKCS11 @@ -1435,7 +1435,7 @@ # # A list of preferred providers for specific algorithms. These providers will # be searched for matching algorithms before the list of registered providers. -@@ -293,6 +304,47 @@ policy.ignoreIdentityScope=false +@@ -292,6 +303,47 @@ policy.ignoreIdentityScope=false # keystore.type=pkcs12 @@ -1483,7 +1483,7 @@ # # Controls compatibility mode for JKS and PKCS12 keystore types. # -@@ -330,6 +382,13 @@ package.definition=sun.misc.,\ +@@ -329,6 +381,13 @@ package.definition=sun.misc.,\ # security.overridePropertiesFile=true @@ -1510,7 +1510,7 @@ + --- a/src/java.base/share/lib/security/default.policy +++ b/src/java.base/share/lib/security/default.policy -@@ -121,6 +121,7 @@ grant codeBase "jrt:/jdk.charsets" { +@@ -123,6 +123,7 @@ grant codeBase "jrt:/jdk.charsets" { grant codeBase "jrt:/jdk.crypto.ec" { permission java.lang.RuntimePermission "accessClassInPackage.sun.security.*"; @@ -1518,7 +1518,7 @@ permission java.lang.RuntimePermission "loadLibrary.sunec"; permission java.security.SecurityPermission "putProviderProperty.SunEC"; permission java.security.SecurityPermission "clearProviderProperties.SunEC"; -@@ -130,6 +131,7 @@ grant codeBase "jrt:/jdk.crypto.ec" { +@@ -132,6 +133,7 @@ grant codeBase "jrt:/jdk.crypto.ec" { grant codeBase "jrt:/jdk.crypto.cryptoki" { permission java.lang.RuntimePermission "accessClassInPackage.com.sun.crypto.provider"; @@ -1526,7 +1526,7 @@ permission java.lang.RuntimePermission "accessClassInPackage.jdk.internal.misc"; permission java.lang.RuntimePermission "accessClassInPackage.sun.security.*"; -@@ -140,6 +142,8 @@ grant codeBase "jrt:/jdk.crypto.cryptoki" { +@@ -142,6 +144,8 @@ grant codeBase "jrt:/jdk.crypto.cryptoki" { permission java.util.PropertyPermission "os.name", "read"; permission java.util.PropertyPermission "os.arch", "read"; permission java.util.PropertyPermission "jdk.crypto.KeyAgreement.legacyKDF", "read"; @@ -2408,31 +2408,21 @@ private static final long serialVersionUID = -2575874101938349339L; private static final String PUBLIC = "public"; -@@ -139,9 +144,7 @@ abstract class P11Key implements Key, Length { - this.tokenObject = tokenObject; - this.sensitive = sensitive; - this.extractable = extractable; -- char[] tokenLabel = this.token.tokenInfo.label; -- isNSS = (tokenLabel[0] == 'N' && tokenLabel[1] == 'S' -- && tokenLabel[2] == 'S'); -+ isNSS = P11Util.isNSS(this.token); - boolean extractKeyInfo = (!DISABLE_NATIVE_KEYS_EXTRACTION && isNSS && - extractable && !tokenObject); - this.keyIDHolder = new NativeKeyHolder(this, keyID, session, -@@ -395,8 +398,10 @@ abstract class P11Key implements Key, Length { +@@ -393,9 +398,10 @@ abstract class P11Key implements Key, Length { new CK_ATTRIBUTE(CKA_EXTRACTABLE), }); -- boolean keySensitive = (attrs[0].getBoolean() || -- attrs[1].getBoolean() || !attrs[2].getBoolean()); +- boolean keySensitive = +- (attrs[0].getBoolean() && P11Util.isNSS(session.token)) || +- attrs[1].getBoolean() || !attrs[2].getBoolean(); + boolean exportable = plainKeySupportEnabled && !algorithm.equals("DH"); + boolean keySensitive = (!exportable && -+ (attrs[0].getBoolean() || -+ attrs[1].getBoolean() || !attrs[2].getBoolean())); ++ ((attrs[0].getBoolean() && P11Util.isNSS(session.token)) || ++ attrs[1].getBoolean() || !attrs[2].getBoolean())); switch (algorithm) { case "RSA": -@@ -451,7 +456,8 @@ abstract class P11Key implements Key, Length { +@@ -450,7 +456,8 @@ abstract class P11Key implements Key, Length { public String getFormat() { token.ensureValid(); @@ -2863,7 +2853,7 @@ /** * Collection of static utility methods. -@@ -40,10 +44,106 @@ public final class P11Util { +@@ -40,6 +44,93 @@ public final class P11Util { private static volatile Provider sun, sunRsaSign, sunJce; @@ -2957,19 +2947,6 @@ private P11Util() { // empty } - -+ static boolean isNSS(Token token) { -+ char[] tokenLabel = token.tokenInfo.label; -+ if (tokenLabel != null && tokenLabel.length >= 3) { -+ return (tokenLabel[0] == 'N' && tokenLabel[1] == 'S' -+ && tokenLabel[2] == 'S'); -+ } -+ return false; -+ } -+ - static Provider getSunProvider() { - Provider p = sun; - if (p == null) { --- a/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/SunPKCS11.java +++ b/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/SunPKCS11.java @@ -26,6 +26,9 @@ @@ -5877,3 +5854,6 @@ + } + } +} +-- +2.45.2 + diff --git a/java-17-openjdk.changes b/java-17-openjdk.changes index 2fc9fce..e1f4ef4 100644 --- a/java-17-openjdk.changes +++ b/java-17-openjdk.changes @@ -1,3 +1,470 @@ +------------------------------------------------------------------- +Thu Jul 18 04:44:09 UTC 2024 - Fridrich Strba + +- Update to upstream tag jdk-17.0.12+7 (July 2024 CPU) + * Security fixes + + JDK-8314794, CVE-2024-21131, bsc#1228046: Improve UTF8 String + supports + + JDK-8319859, CVE-2024-21138, bsc#1228047: Better symbol + storage + + JDK-8320097: Improve Image transformations + + JDK-8320548, CVE-2024-21140, bsc#1228048: Improved loop + handling + + JDK-8323231, CVE-2024-21147, bsc#1228052: Improve array + management + + JDK-8323390: Enhance mask blit functionality + + JDK-8324559, CVE-2024-21145, bsc#1228051: Improve 2D image + handling + + JDK-8325600: Better symbol storage + + JDK-8327413: Enhance compilation efficiency + * Other fixes + + JDK-8015739: Background of JInternalFrame is located out of + JInternalFrame + + JDK-8042380: Test javax/swing/JFileChooser/4524490/ + /bug4524490.java fails with InvocationTargetException + + JDK-8159927: Add a test to verify JMOD files created in the + images do not have debug symbols + + JDK-8163229: several regression tests have a main method that + is never executed + + JDK-8163921: HttpURLConnection default Accept header is + malformed according to HTTP/1.1 RFC + + JDK-8177107: Reduce memory footprint of + java.lang.reflect.Constructor/Method + + JDK-8185862: AWT Assertion Failure in ::GetDIBits(hBMDC, hBM, + 0, 1, 0, gpBitmapInfo, 0) 'awt_Win32GraphicsDevice.cpp', at + line 185 + + JDK-8187759: Background not refreshed when painting over a + transparent JFrame + + JDK-8213714: AttachingConnector/attach/attach001 failed due + to "bind failed: Address already in use" + + JDK-8223696: java/net/httpclient/MaxStreams.java failed with + didn't finish within the time-out + + JDK-8256660: Disable DTLS 1.0 + + JDK-8260540: serviceability/jdwp/AllModulesCommandTest.java + failed with "Debuggee error: 'ERROR: transport error 202: bind + failed: Address already in use'" + + JDK-8263940: NPE when creating default file system when + default file system provider is packaged as JAR file on class + path + + JDK-8264322: Generate CDS archive when creating custom JDK + image + + JDK-8266242: java/awt/GraphicsDevice/CheckDisplayModes.java + failing on macOS 11 ARM + + JDK-8267796: vmTestbase/nsk/jvmti/scenarios/hotswap/HS201/ + /hs201t002/TestDescription.java fails with NoClassDefFoundError + + JDK-8268974: GetJREPath() JLI function fails to locate + libjava.so if not standard Java launcher is used + + JDK-8269914: Factor out heap printing for G1 young and full gc + + JDK-8270018: Add scoped object for g1 young gc JFR + notification + + JDK-8272315: Improve assert_different_registers + + JDK-8272651: G1 heap region info print order changed by + JDK-8269914 + + JDK-8272903: Missing license header in ArenaAllocator.java + + JDK-8272916: Copyright year was modified unintentionally in + jlink.properties and ImagePluginStack.java + + JDK-8273153: Consolidate file_exists into os:file_exists + + JDK-8273774: CDSPluginTest should only expect + classes_nocoops.jsa exists on supported 64-bit platforms + + JDK-8275334: Move class loading Events to a separate section + in hs_err files + + JDK-8275868: ciReplay: Inlining fails with "unloaded + signature classes" due to wrong protection domains + + JDK-8276227: ciReplay: SIGSEGV if classfile for replay + compilation is not present after JDK-8275868 + + JDK-8278893: Parallel: Remove GCWorkerDelayMillis + + JDK-8280030: [REDO] Parallel: More precise boundary in + ObjectStartArray::object_starts_in_range + + JDK-8280056: gtest/LargePageGtests.java#use-large-pages + failed "os.release_one_mapping_multi_commits_vm" + + JDK-8280113: (dc) DatagramSocket.receive does not always + throw when the channel is closed + + JDK-8280377: MethodHandleProxies does not correctly invoke + default methods with varags + + JDK-8280546: Remove hard-coded 127.0.0.1 loopback address + + JDK-8280835: jdk/javadoc/tool/CheckManPageOptions.java + depends on source hierarchy + + JDK-8281658: Add a security category to the java + -XshowSettings option + + JDK-8282094: [REDO] Parallel: Refactor + PSCardTable::scavenge_contents_parallel + + JDK-8283349: Robustness improvements to + java/util/prefs/AddNodeChangeListener.jar + + JDK-8285452: Add a new test library API to replace a file + content using FileUtils.java + + JDK-8286045: Use ForceGC for cleaner test cases + + JDK-8286311: remove boilerplate from use of runTests + + JDK-8286490: JvmtiEventControllerPrivate::set_event_callbacks + CLEARING_MASK computation is incorrect + + JDK-8286740: JFR: Active Setting event emitted incorrectly + + JDK-8286781: Replace the deprecated/obsolete gethostbyname + and inet_addr calls + + JDK-8289401: Add dump output to TestRawRSACipher.java + + JDK-8289643: File descriptor leak with + ProcessBuilder.startPipeline + + JDK-8290126: Add a check in JavadocTester for "javadoc should + not crash" + + JDK-8290885: java/lang/ProcessBuilder/PipelineLeaksFD.java + fail: More or fewer pipes than expected + + JDK-8290901: Reduce use of -source in langtools tests + + JDK-8291753: Add JFR event for GC CPU Time + + JDK-8294137: Review running times of java.math tests + + JDK-8294156: Allow PassFailJFrame.Builder to create test UI + + JDK-8294699: Launcher causes lingering busy cursor + + JDK-8295026: Remove unused fields in StyleSheet + + JDK-8295343: sun/security/pkcs11 tests fail on Linux RHEL 8.6 + and newer + + JDK-8295944: Move the Http2TestServer and related classes + into a package of its own + + JDK-8296137: diags-examples.xml is broken + + JDK-8296190: TestMD5Intrinsics and + TestMD5MultiBlockIntrinsics don't test the intrinsics + + JDK-8296610: java/net/HttpURLConnection/SetAuthenticator/ + /HTTPSetAuthenticatorTest.java failed with "BindException: + Address already in use: connect" + + JDK-8297082: Remove sun/tools/jhsdb/BasicLauncherTest.java + from problem list + + JDK-8297292: java/nio/channels/FileChannel/ + /FileExtensionAndMap.java is too slow + + JDK-8297445: PPC64: Represent Registers as values + + JDK-8297449: Update JInternalFrame Metal Border code + + JDK-8297645: Drop the test/jdk/java/net/httpclient/ + /reactivestreams-tck-tests/TckDriver.java test + + JDK-8297695: Fix typos in test/langtools files + + JDK-8298413: [s390] CPUInfoTest fails due to uppercase + feature string + + JDK-8298939: Refactor open/test/jdk/javax/rmi/ssl/ + /SSLSocketParametersTest.sh to jtreg java test + + JDK-8299023: TestPLABResize.java and TestPLABPromotion.java + are failing intermittently + + JDK-8299858: [Metrics] Swap memory limit reported incorrectly + when too large + + JDK-8301183: (zipfs) jdk/jdk/nio/zipfs/ + /TestLocOffsetFromZip64EF.java failing with ZipException:R0 on + OL9 + + JDK-8301381: Verify DTLS 1.0 cannot be negotiated + + JDK-8301753: AppendFile/WriteFile has differences between + make 3.81 and 4+ + + JDK-8302069: javax/management/remote/mandatory/notif/ + /NotifReconnectDeadlockTest.java update + + JDK-8302512: Update IANA Language Subtag Registry to Version + 2023-02-14 + + JDK-8302907: [PPC64] Use more constexpr in class Register + + JDK-8303457: Introduce convenience test library APIs for + creating test servers for tests in test/jdk/java/net/httpclient + + JDK-8303466: C2: failed: malformed control flow. Limit type + made precise with MaxL/MinL + + JDK-8303972: (zipfs) Make test/jdk/jdk/nio/zipfs/ + /TestLocOffsetFromZip64EF.java independent of the zip command + line + + JDK-8304761: Update IANA Language Subtag Registry to Version + 2023-03-22 + + JDK-8304927: Update java/net/httpclient/BasicAuthTest.java to + check basic auth over HTTP/2 + + JDK-8305169: java/security/cert/CertPathValidator/OCSP/ + /GetAndPostTests.java -- test server didn't start in timely + manner + + JDK-8305645: System Tray icons get corrupted when Windows + primary monitor changes + + JDK-8305819: LogConfigurationTest intermittently fails on + AArch64 + + JDK-8305874: Open source AWT Key, Text Event related tests + + JDK-8305931: jdk/jfr/jcmd/TestJcmdDumpPathToGCRoots.java + failed with "Expected chains but found none" + + JDK-8305942: Open source several AWT Focus related tests + + JDK-8305943: Open source few AWT Focus related tests + + JDK-8306031: Update IANA Language Subtag Registry to Version + 2023-04-13 + + JDK-8306040: HttpResponseInputStream.available() returns 1 on + empty stream + + JDK-8306067: Open source AWT Graphics,GridBagLayout related + tests + + JDK-8306634: Open source AWT Event related tests + + JDK-8306714: Open source few Swing event and AbstractAction + tests + + JDK-8306838: GetGraphicsTest needs to be headful + + JDK-8307411: Test java/foreign/channels/ + /TestAsyncSocketChannels.java failed: IllegalStateException: + Already closed + + JDK-8307423: [s390x] Represent Registers as values + + JDK-8308021: Update IANA Language Subtag Registry to Version + 2023-05-11 + + JDK-8309409: Update HttpInputStreamTest and + BodyProcessorInputStreamTest to use hg.openjdk.org + + JDK-8309527: Improve test proxy performance + + JDK-8309630: Clean up tests that reference deploy modules + + JDK-8309763: Move tests in test/jdk/sun/misc/URLClassPath + directory to test/jdk/jdk/internal/loader + + JDK-8309890: TestStringDeduplicationInterned.java waits for + the wrong condition + + JDK-8310031: Parallel: Implement better work distribution for + large object arrays in old gen + + JDK-8310818: Refactor more Locale tests to use JUnit + + JDK-8311893: Interactive component with ARIA role 'tabpanel' + does not have a programmatically associated name + + JDK-8311964: Some jtreg tests failing on x86 with error + 'unrecognized VM options' (C2 flags) + + JDK-8312194: test/hotspot/jtreg/applications/ctw/modules/ + /jdk_crypto_ec.java cannot handle empty modules + + JDK-8312320: Remove javax/rmi/ssl/SSLSocketParametersTest.sh + from ProblemList + + JDK-8312383: Log X509ExtendedKeyManager implementation class + name in TLS/SSL connection + + JDK-8312916: Remove remaining usages of -Xdebug from + test/hotspot/jtreg + + JDK-8313307: java/util/Formatter/Padding.java fails on some + Locales + + JDK-8313702: Update IANA Language Subtag Registry to Version + 2023-08-02 + + JDK-8314283: Support for NSS tests on aarch64 platforms + + JDK-8314832: Few runtime/os tests ignore vm flags + + JDK-8314835: gtest wrappers should be marked as flagless + + JDK-8315071: Modify TrayIconScalingTest.java, + PrintLatinCJKTest.java to use new PassFailJFrame's builder + pattern usage + + JDK-8315117: Update Zlib Data Compression Library to Version + 1.3 + + JDK-8315609: Open source few more swing text/html tests + + JDK-8315652: RISC-V: Features string uses wrong separator for + jtreg + + JDK-8315663: Open source misc awt tests + + JDK-8315677: Open source few swing JFileChooser and other + tests + + JDK-8315726: Open source several AWT applet tests + + JDK-8315741: Open source few swing JFormattedTextField and + JPopupMenu tests + + JDK-8315824: Open source several Swing Text/HTML related tests + + JDK-8315834: Open source several Swing JSpinner related tests + + JDK-8315889: Open source several Swing HTMLDocument related + tests + + JDK-8315898: Open source swing JMenu tests + + JDK-8316017: Refactor timeout handler in PassFailJFrame + + JDK-8316053: Open some swing tests 3 + + JDK-8316138: Add GlobalSign 2 TLS root certificates + + JDK-8316142: Enable parallelism in + vmTestbase/nsk/monitoring/stress/lowmem tests + + JDK-8316154: Opensource JTextArea manual tests + + JDK-8316164: Opensource JMenuBar manual test + + JDK-8316186: RISC-V: Remove PlatformCmpxchg<4> + + JDK-8316242: Opensource SwingGraphics manual test + + JDK-8316462: sun/jvmstat/monitor/MonitoredVm/ + /MonitorVmStartTerminate.java ignores VM flags + + JDK-8316563: test tools/jpackage/linux/LinuxResourceTest.java + fails on CentOS Linux release 8.5.2111 and Fedora 27 + + JDK-8316608: Enable parallelism in vmTestbase/gc/vector tests + + JDK-8317287: [macos14] InterJVMGetDropSuccessTest.java: Child + VM: abnormal termination + + JDK-8318322: Update IANA Language Subtag Registry to Version + 2023-10-16 + + JDK-8318580: "javax/swing/MultiMonitor/MultimonVImage.java + failing with Error. Can't find library: /open/test/jdk/java/ + /awt/regtesthelpers" after JDK-8316053 + + JDK-8318599: HttpURLConnection cache issues leading to + crashes in JGSS w/ native GSS introduced by 8303809 + + JDK-8318727: Enable parallelism in + vmTestbase/vm/gc/concurrent tests + + JDK-8318809: java/util/concurrent/ConcurrentLinkedQueue/ + /WhiteBox.java shows intermittent failures on linux ppc64le + and aarch64 + + JDK-8318854: [macos14] Running any AWT app prints Secure + coding warning + + JDK-8319048: Monitor deflation unlink phase prolongs time to + safepoint + + JDK-8319128: sun/security/pkcs11 tests fail on OL 7.9 aarch64 + + JDK-8319136: Skip pkcs11 tests on linux-aarch64 + + JDK-8319268: Build failure with GCC8.3.1 after 8313643 + + JDK-8319338: tools/jpackage/share/RuntimeImageTest.java fails + with -XX:+UseZGC + + JDK-8319372: C2 compilation fails with "Bad immediate + dominator info" + + JDK-8320005: Allow loading of shared objects with .a + extension on AIX + + JDK-8320113: [macos14] : ShapeNotSetSometimes.java fails + intermittently on macOS 14 + + JDK-8320129: "top" command during jtreg failure handler does + not display CPU usage on OSX + + JDK-8320303: Allow PassFailJFrame to accept single window + creator + + JDK-8320342: Use PassFailJFrame for + TruncatedPopupMenuTest.java + + JDK-8320570: NegativeArraySizeException decoding >1G UTF8 + bytes with non-ascii characters + + JDK-8320681: [macos] Test tools/jpackage/macosx/ + /MacAppStoreJlinkOptionsTest.java timed out on macOS + + JDK-8320712: Rewrite BadFactoryTest in pure Java + + JDK-8320943: Files/probeContentType/Basic.java fails on + latest Windows 11 - content type mismatch + + JDK-8321107: Add more test cases for JDK-8319372 + + JDK-8321489: Update LCMS to 2.16 + + JDK-8321925: sun/security/mscapi/KeytoolChangeAlias.java + fails with "Alias <246810> does not exist" + + JDK-8322239: [macos] a11y : java.lang.NullPointerException is + thrown when focus is moved on the JTabbedPane + + JDK-8322503: Shenandoah: Clarify gc state usage + + JDK-8322858: compiler/c2/aarch64/TestFarJump.java fails on + AArch64 due to unexpected PrintAssembly output + + JDK-8322920: Some ProcessTools.execute* functions are + declared to throw Throwable + + JDK-8323210: Update the usage of cmsFLAGS_COPY_ALPHA + + JDK-8323519: Add applications/ctw/modules to Hotspot tiered + testing + + JDK-8323717: Introduce test keyword for tests that need + external dependencies + + JDK-8323994: gtest runner repeats test name for every single + gtest assertion + + JDK-8324050: Issue store-store barrier after re-materializing + objects during deoptimization + + JDK-8324238: [macOS] java/awt/Frame/ShapeNotSetSometimes/ + /ShapeNotSetSometimes.java fails with the shape has not been + applied msg + + JDK-8324243: Compilation failures in java.desktop module with + gcc 14 + + JDK-8324598: use mem_unit when working with sysinfo memory + and swap related information + + JDK-8324632: Update Zlib Data Compression Library to Version + 1.3.1 + + JDK-8324723: GHA: Upgrade some actions to avoid deprecated + Node 16 + + JDK-8324733: [macos14] Problem list tests which fail due to + macOS bug described in JDK-8322653 + + JDK-8324824: AArch64: Detect Ampere-1B core and update + default options for Ampere CPUs + + JDK-8325137: com/sun/management/ThreadMXBean/ + /ThreadCpuTimeArray.java can fail in Xcomp with out of + expected range + + JDK-8325203: System.exit(0) kills the launched 3rd party + application + + JDK-8325213: Flags introduced by configure script are not + passed to ADLC build + + JDK-8325254: CKA_TOKEN private and secret keys are not + necessarily sensitive + + JDK-8325326: [PPC64] Don't relocate in case of allocation + failure + + JDK-8325372: Shenandoah: SIGSEGV crash in unnecessary_acquire + due to LoadStore split through phi + + JDK-8325432: enhance assert message "relocation addr must be + in this section" + + JDK-8325496: Make TrimNativeHeapInterval a product switch + + JDK-8325579: Inconsistent behavior in + com.sun.jndi.ldap.Connection::createSocket + + JDK-8325862: set -XX:+ErrorFileToStderr when executing java + in containers for some container related jtreg tests + + JDK-8325876: crashes in docker container tests on + Linuxppc64le Power8 machines + + JDK-8325972: Add -x to bash for building with LOG=debug + + JDK-8326006: Allow TEST_VM_FLAGLESS to set flagless mode + + JDK-8326101: [PPC64] Need to bailout cleanly if creation of + stubs fails when code cache is out of space + + JDK-8326140: src/jdk.accessibility/windows/native/ + /libjavaaccessbridge/AccessBridgeJavaEntryPoints.cpp + ReleaseStringChars might be missing in early returns + + JDK-8326201: [S390] Need to bailout cleanly if creation of + stubs fails when code cache is out of space + + JDK-8326351: Update the Zlib version in + open/src/java.base/share/legal/zlib.md to 1.3.1 + + JDK-8326521: JFR: CompilerPhase event test fails on windows + 32 bit + + JDK-8326529: JFR: Test for CompilerCompile events fails due + to time out + + JDK-8326591: New test JmodExcludedFiles.java fails on Windows + when --with-external-symbols-in-bundles=public is used + + JDK-8326638: Crash in + PhaseIdealLoop::remix_address_expressions due to unexpected + Region instead of Loop + + JDK-8326643: JDK server does not send a dummy + change_cipher_spec record after HelloRetryRequest message + + JDK-8326661: sun/java2d/cmm/ColorConvertOp/ColConvTest.java + assumes profiles were generated by LCMS + + JDK-8326794: Bump update version for OpenJDK: jdk-17.0.12 + + JDK-8326891: Prefer RPATH over RUNPATH for $ORIGIN rpaths in + internal JDK binaries + + JDK-8326936: RISC-V: Shenandoah GC crashes due to incorrect + atomic memory operations + + JDK-8326942: [17u] Backout "8325254: CKA_TOKEN private and + secret keys are not necessarily sensitive" + + JDK-8326960: GHA: RISC-V sysroot cannot be debootstrapped due + to ongoing Debian t64 transition + + JDK-8327036: [macosx-aarch64] SIGBUS in + MarkActivationClosure::do_code_blob reached from + Unsafe_CopySwapMemory0 + + JDK-8327059: os::Linux::print_proc_sys_info add swappiness + information + + JDK-8327136: javax/management/remote/mandatory/notif/ + /NotifReconnectDeadlockTest.java fails on libgraal + + JDK-8327631: Update IANA Language Subtag Registry to Version + 2024-03-07 + + JDK-8327989: java/net/httpclient/ManyRequest.java should not + use "localhost" in URIs + + JDK-8327998: Enable java/lang/ProcessBuilder/ + /JspawnhelperProtocol.java on Mac + + JDK-8328066: WhiteBoxResizeTest failure on linux-x86: Could + not reserve enough space for 2097152KB object heap + + JDK-8328165: improve assert(idx < _maxlrg) failed: oob + + JDK-8328166: Epsilon: 'EpsilonHeap::allocate_work' misuses + the parameter 'size' as size in bytes + + JDK-8328168: Epsilon: Premature OOM when allocating object + larger than uncommitted heap size + + JDK-8328194: Add a test to check default rendering engine + + JDK-8328524: [x86] StringRepeat.java failure on linux-x86: + Could not reserve enough space for 2097152KB object heap + + JDK-8328540: test javax/swing/JSplitPane/4885629/ + /bug4885629.java fails on windows hidpi + + JDK-8328638: Fallback option for POST-only OCSP requests + + JDK-8328705: GHA: Cross-compilation jobs do not require build + JDK + + JDK-8328812: Update and move siphash license + + JDK-8328825: Google CAInterop test failures + + JDK-8328948: GHA: Restoring sysroot from cache skips the + build after JDK-8326960 + + JDK-8328988: [macos14] Problem list LightweightEventTest.java + which fails due to macOS bug described in JDK-8322653 + + JDK-8328997: Remove unnecessary template parameter lists in + GrowableArray + + JDK-8329013: StackOverflowError when starting Apache Tomcat + with signed jar + + JDK-8329213: Better validation for com.sun.security.ocsp.useget option + + JDK-8329223: Parallel: Parallel GC resizes heap even if -Xms + = -Xmx + + JDK-8329570: G1: Excessive is_obj_dead_cond calls in + verification + + JDK-8329823: RISC-V: Need to sync CPU features with related + JVM flags + + JDK-8330094: RISC-V: Save and restore FRM in the call stub + + JDK-8330156: RISC-V: Range check auipc + signed 12 imm + instruction + + JDK-8330242: RISC-V: Simplify and remove + CORRECT_COMPILER_ATOMIC_SUPPORT in atomic_linux_riscv.hpp + + JDK-8330523: Reduce runtime and improve efficiency of + KeepAliveTest + + JDK-8330815: Use pattern matching for instanceof in + KeepAliveCache + + JDK-8331113: createJMHBundle.sh support configurable maven + repo mirror + + JDK-8331352: error: template-id not allowed for + constructor/destructor in C++20 + + JDK-8331641: [17u]: Bump GHA bootstrap JDK to 17.0.11 + + JDK-8331942: On Linux aarch64, CDS archives should be using + 64K alignment by default + + JDK-8334441: Mark tests in jdk_security_infra group as manual + + JDK-8335963: [17u] Remove designator + DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.12 +- Modified patch: + * fips.patch + + rediff to changed context + +------------------------------------------------------------------- +Thu Jul 4 09:18:00 UTC 2024 - Fridrich Strba + +- Require file for posttrans phase of the headless subpackage + (bsc#1227298) + +------------------------------------------------------------------- +Thu Jun 6 17:02:14 UTC 2024 - Fridrich Strba + +- Added patch: + * reproducible-jlink.patch + + make the timestamp in jmods reproducible + ------------------------------------------------------------------- Thu Apr 18 14:19:16 UTC 2024 - Fridrich Strba diff --git a/java-17-openjdk.spec b/java-17-openjdk.spec index 6ba7b3a..5fe774f 100644 --- a/java-17-openjdk.spec +++ b/java-17-openjdk.spec @@ -33,8 +33,8 @@ # Standard JPackage naming and versioning defines. %global featurever 17 %global interimver 0 -%global updatever 11 -%global buildver 9 +%global updatever 12 +%global buildver 7 %global openjdk_repo jdk17u %global openjdk_tag jdk-%{featurever}.%{interimver}.%{updatever}%{?patchver:.%{patchver}}+%{buildver} %global openjdk_dir %{openjdk_repo}-jdk-%{featurever}.%{interimver}.%{updatever}%{?patchver:.%{patchver}}-%{buildver} @@ -165,6 +165,7 @@ Patch13: implicit-pointer-decl.patch Patch14: reproducible-properties.patch Patch15: system-pcsclite.patch Patch16: fips.patch +Patch17: reproducible-jlink.patch # Patch20: loadAssistiveTechnologies.patch # @@ -283,6 +284,7 @@ Requires: jpackage-utils Requires: mozilla-nss # Post requires update-alternatives to install tool update-alternatives. Requires(post): update-alternatives +Requires(posttrans): file Requires(posttrans): java-ca-certificates # Postun requires update-alternatives to uninstall tool update-alternatives. Requires(postun): update-alternatives @@ -409,6 +411,7 @@ rm -rvf src/java.desktop/share/native/liblcms/lcms2* %endif %patch -P 16 -p1 +%patch -P 17 -p1 %patch -P 20 -p1 diff --git a/jdk-17.0.11+9.tar.gz b/jdk-17.0.11+9.tar.gz deleted file mode 100644 index 72fd1d5..0000000 --- a/jdk-17.0.11+9.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:84e2e143dcab2160dcde3fe6d6b12d7d030533a5bce1aec0ac20d09c023deae0 -size 106585019 diff --git a/jdk-17.0.12+7.tar.gz b/jdk-17.0.12+7.tar.gz new file mode 100644 index 0000000..2d21aad --- /dev/null +++ b/jdk-17.0.12+7.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:ccb7d37c24f9f5808f9d25419d93680570dc600f292e68944032338cb4b2c51e +size 106583944 diff --git a/reproducible-jlink.patch b/reproducible-jlink.patch new file mode 100644 index 0000000..34280e4 --- /dev/null +++ b/reproducible-jlink.patch @@ -0,0 +1,11 @@ +--- a/src/jdk.jlink/share/classes/jdk/tools/jlink/internal/JlinkTask.java ++++ b/src/jdk.jlink/share/classes/jdk/tools/jlink/internal/JlinkTask.java +@@ -776,7 +776,7 @@ public class JlinkTask { + + private String getSaveOpts() { + StringBuilder sb = new StringBuilder(); +- sb.append('#').append(new Date()).append("\n"); ++ sb.append('#').append(System.getenv("SOURCE_DATE_EPOCH") != null ? new Date(1000 * Long.parseLong(System.getenv("SOURCE_DATE_EPOCH"))) : new Date()).append("\n"); + for (String c : optionsHelper.getInputCommand()) { + sb.append(c).append(" "); + }