From 13cdea01aeb4ba74a9a8004d83d8c861b524133c Mon Sep 17 00:00:00 2001
From: Andrew Hughes <gnu.andrew@redhat.com>
Date: Wed, 12 Aug 2026 15:49:19 +0100
Subject: [PATCH] Add CVEs for August 2026 release

- Bump release for PQC build

** This tarball is embargoed until 2026-08-18 @ 1pm PT. **

Related: RHEL-235603
---
 NEWS                    | 3 +++
 java-1.8.0-openjdk.spec | 8 +++++++-
 2 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/NEWS b/NEWS
index f4d21f7..1f82abc 100644
--- a/NEWS
+++ b/NEWS
@@ -9,6 +9,9 @@ Live versions of these release notes can be found at:
   * https://bit.ly/openjdk8u504
 
 * CVEs
+  - CVE-2026-60589
+  - CVE-2026-61308
+  - CVE-2026-70907
 * Changes
   - JDK-8382471: Improve Resource Resolving
   - JDK-8384708: Enhance HTTP Connections
diff --git a/java-1.8.0-openjdk.spec b/java-1.8.0-openjdk.spec
index 6013b7c..86ee6bc 100644
--- a/java-1.8.0-openjdk.spec
+++ b/java-1.8.0-openjdk.spec
@@ -19,7 +19,7 @@
 # eg jdk8u60-b27 -> b27
 %global buildver        %(VERSION=%{version_tag}; echo ${VERSION##*-})
 %global portablerelease 1
-%global rpmrelease 1
+%global rpmrelease 2
 
 # Define IcedTea version used for SystemTap tapsets and desktop files
 %global icedteaver      3.15.0
@@ -2961,6 +2961,12 @@ cjc.mainProgram(args)
 %endif
 
 %changelog
+* Wed Aug 12 2026 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.504.b01-1.2
+- Add CVEs for August 2026 release
+- Bump release for PQC build
+- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
+- Related: RHEL-235603
+
 * Mon Aug 10 2026 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.504.b01-1.1
 - Update to 8u504-b01 (GA).
 - Update release notes for 8u504-b01.