1
0

Accepting request 1176636 from Java:Factory

April 2024 security fixes

OBS-URL: https://build.opensuse.org/request/show/1176636
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/java-1_8_0-openj9?expand=0&rev=26
This commit is contained in:
2024-05-24 17:52:46 +00:00
committed by Git OBS Bridge
9 changed files with 48 additions and 18 deletions

View File

@@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:b2a18132ee9afd041561a7e20ff3423e6f7a5df36d65a5a3ec91c763ceadba72
size 132920064

View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:4c01a2db59226a198abd2c6eae857ab1028c91b616fbf80ade639aaec2e21021
size 11151844

View File

@@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:362c7d81038da6a47944af999d90a752bb0537faa415e54c7fa8e500f4ef0476
size 29046616

View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:0111d7f31c26943620555f5495e00055569f04a24a7bc44ac96282bd7235269b
size 132769320

View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:a44313209419f44cc293f1d08b545d81fd84672a0813d6e7d632a79b19cb0efa
size 29189918

View File

@@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:c3a8bdda984f663ca9da0b966b2e3a810ea511617e4f451ea2afc8a3e53f93e4
size 11118810

View File

@@ -1,3 +1,18 @@
-------------------------------------------------------------------
Thu May 23 17:21:33 UTC 2024 - Fridrich Strba <fstrba@suse.com>
- Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual
machine
- Including Oracle April 2024 CPU changes
* CVE-2024-21094 (bsc#1222986), CVE-2024-21011 (bsc#1222979),
CVE-2024-21085 (bsc#1222984), CVE-2024-21068 (bsc#1222983)
* OpenJ9 changes, see
https://eclipse.dev/openj9/docs/version0.44
- Added patch:
* openj9-openssl.patch
+ fix build with older openssl that does not define
SSL_R_UNEXPECTED_EOF_WHILE_READING
-------------------------------------------------------------------
Mon May 6 17:41:21 UTC 2024 - Fridrich Strba <fstrba@suse.com>

View File

@@ -28,18 +28,18 @@
%global abs2rel perl -e %{script}
%global syslibdir %{_libdir}
# Standard JPackage naming and versioning defines.
%global updatever 402
%global buildver b06
%global updatever 412
%global buildver b08
%global root_repository https://github.com/ibmruntimes/openj9-openjdk-jdk8/archive
%global root_revision 0fa9d9c53243b300211f1e7dabee29164552fe0b
%global root_branch v0.43.0-release
%global root_revision 3f438d726eabae33b2687e565530272909ff37ad
%global root_branch v0.44.0-release
%global omr_repository https://github.com/eclipse/openj9-omr/archive
%global omr_revision ea8124dbc1b625da6f607b66d2b657dce90c96c4
%global omr_branch v0.43.0-release
%global omr_revision 254af5a0452934f62e3253c5565b183c682d3495
%global omr_branch v0.44.0-release
%global openj9_repository https://github.com/eclipse/openj9/archive
%global openj9_revision 2c3d78b48adf36dbbef5852b95889da5a5ce1279
%global openj9_branch v0.43.0-release
%global openj9_tag openj9-0.43.0
%global openj9_revision b0699311c7d9341f3d0ebf9a7a4b5546a7ca7004
%global openj9_branch v0.44.0-release
%global openj9_tag openj9-0.44.0
# priority must be 6 digits in total
%global priority 1801
%global javaver 1.8.0
@@ -123,6 +123,7 @@ Patch201: system-libjpeg.patch
Patch202: system-libpng.patch
Patch203: system-lcms.patch
Patch210: openj9-no-werror.patch
Patch211: openj9-openssl.patch
BuildRequires: alsa-lib-devel
BuildRequires: autoconf
BuildRequires: automake
@@ -353,6 +354,7 @@ rm -rvf jdk/src/share/native/sun/java2d/cmm/lcms/lcms2*
%patch -P 203 -p1
%patch -P 210
%patch -P 211 -p1
%patch -P 1 -p1
%patch -P 2 -p1

13
openj9-openssl.patch Normal file
View File

@@ -0,0 +1,13 @@
--- a/openj9/runtime/compiler/runtime/Listener.cpp
+++ b/openj9/runtime/compiler/runtime/Listener.cpp
@@ -44,6 +44,10 @@
#include "runtime/CompileService.hpp"
#include "runtime/Listener.hpp"
+#ifndef SSL_R_UNEXPECTED_EOF_WHILE_READING
+#define SSL_R_UNEXPECTED_EOF_WHILE_READING 294
+#endif
+
static bool
handleOpenSSLConnectionError(int connfd, SSL *&ssl, BIO *&bio, const char *errMsg, int ret, TR::CompilationInfo *compInfo)
{