Update to 8u472-b08 (GA).

- Update release notes for 8u472-b08.
- Drop local JDK-8339414 fix as this is now included upstream
- Reset rpmrelease to 1 now there are no other RPM builds on RHEL 8

** This tarball is embargoed until 2025-10-21 @ 1pm PT. **

Resolves: RHEL-118767
Resolves: RHEL-119455
This commit is contained in:
Andrew Hughes 2025-07-31 01:35:24 +01:00
parent ace9f0424f
commit 247601829f
5 changed files with 113 additions and 74 deletions

17
.gitignore vendored
View File

@ -438,3 +438,20 @@
/openjdk8u452-b09.tar.xz
/shenandoah8u452-b09.tar.xz
/shenandoah8u462-b08.tar.xz
/openjdk8u462-b01-ea.tar.xz
/openjdk8u462-b02-ea.tar.xz
/openjdk8u462-b03-ea.tar.xz
/openjdk8u462-b04-ea.tar.xz
/openjdk8u462-b05-ea.tar.xz
/openjdk8u462-b06-ea.tar.xz
/openjdk8u462-b07-ea.tar.xz
/openjdk8u462-b08.tar.xz
/openjdk8u472-b01-ea.tar.xz
/openjdk8u472-b02-ea.tar.xz
/openjdk8u472-b03-ea.tar.xz
/openjdk8u472-b04-ea.tar.xz
/openjdk8u472-b05-ea.tar.xz
/openjdk8u472-b06-ea.tar.xz
/openjdk8u472-b07-ea.tar.xz
/openjdk8u472-b08.tar.xz
/shenandoah8u472-b08.tar.xz

79
NEWS
View File

@ -3,6 +3,85 @@ Key:
JDK-X - https://bugs.openjdk.java.net/browse/JDK-X
CVE-XXXX-YYYY: https://cve.mitre.org/cgi-bin/cvename.cgi?name=XXXX-YYYY
New in release OpenJDK 8u472 (2025-10-21):
===========================================
Live versions of these release notes can be found at:
* https://bit.ly/openjdk8u472
* CVEs
- CVE-2025-53057
- CVE-2025-53066
* Changes
- JDK-7102969: currency.properties supercede not working correctly
- JDK-8041924: [TESTBUG] sun/net/www/http/ChunkedOutputStream/checkError.java fails on some systems
- JDK-8044051: Test jdk/lambda/vm/InterfaceAccessFlagsTest.java gets IOException during compilation
- JDK-8056283: @ignore tools/javac/defaultMethods/Assertions.java until JDK-8047675 is fixed
- JDK-8081734: ConcurrentHashMap/ConcurrentAssociateTest.java, times out 90% of time on sparc with 256 cpu.
- JDK-8157138: Error while fetching currency instance by Currency.getInstance(currencycode)
- JDK-8160767: [TEST_BUG] java/awt/Frame/MaximizedToIconified/MaximizedToIconified.java
- JDK-8185348: Major performance regression in GetMethodDeclaringClass and other JVMTI Method functions
- JDK-8185500: [TESTBUG] Add keywords headful/printer in java/awt and javax tests.
- JDK-8186259: IOExceptionIfEncodedURLTest.sh versus IOExceptionIfEncodedURLTest.java
- JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with handshake_failure
- JDK-8228658: test GetTotalSafepointTime.java fails on fast Linux machines with Total safepoint time 0 ms
- JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java fails with D3D basic render driver
- JDK-8312065: Socket.connect does not timeout when profiling
- JDK-8335978: [8u] incorrect include file name in semaphore.inline.hpp
- JDK-8339414: Fix JDK-8202369 incorrect backport for 8u
- JDK-8340387: Update OS detection code to recognize Windows Server 2025
- JDK-8345414: Google CAInterop test failures
- JDK-8348760: RadioButton is not shown if JRadioButtonMenuItem is rendered with ImageIcon in WindowsLookAndFeel
- JDK-8351624: [8u] Xerces-J version wrong in THIRD_PARTY_README after JDK-7150324
- JDK-8352302: Test sun/security/tools/jarsigner/TimestampCheck.java is failing
- JDK-8352637: Enhance bytecode verification
- JDK-8356294: Enhance Path Factories
- JDK-8358328: Bump update version of OpenJDK: 8u472
- JDK-8358538: Update GHA Windows runner to 2025
- JDK-8360937: Enhance certificate handling
- JDK-8361212: Remove AffirmTrust root CAs
- JDK-8363965: GHA: Switch cross-compiling sysroots to Debian bookworm
- JDK-8365375: Method SU3.setAcceleratorSelectionForeground assigns to acceleratorForeground
- JDK-8365389: Remove static color fields from SwingUtilities3 and WindowsMenuItemUI
- JDK-8365560: [8u] ppc64le MaxRAM default is too low at 4GiB
- JDK-8365811: test/jdk/java/net/CookieHandler/B6644726.java failure - "Should have 5 cookies. Got only 4, expires probably didn't parse correctly"
- JDK-8366112: [8u] GHA: Fix broken installation of Windows SDK
- JDK-8368308: ISO 4217 Amendment 180 Update
Notes on individual issues:
===========================
security-libs/java.security:
JDK-8361212: Remove AffirmTrust root CAs
========================================
The following root certificates from AffirmTrust, which were
deactivated in the 8u432 release of October 2024, have been removed
from the `cacerts` keystore:
Alias name: affirmtrustcommercialca [jdk]
CN=AffirmTrust Commercial
O=AffirmTrust
C=US
SHA256: 03:76:AB:1D:54:C5:F9:80:3C:E4:B2:E2:01:A0:EE:7E:EF:7B:57:B6:36:E8:A9:3C:9B:8D:48:60:C9:6F:5F:A7
Alias name: affirmtrustnetworkingca [jdk]
CN=AffirmTrust Networking
O=AffirmTrust
C=US
SHA256: 0A:81:EC:5A:92:97:77:F1:45:90:4A:F3:8D:5D:50:9F:66:B5:E2:C5:8F:CD:B5:31:05:8B:0E:17:F3:F0B4:1B
Alias name: affirmtrustpremiumca [jdk]
CN=AffirmTrust Premium
O=AffirmTrust
C=US
SHA256: 70:A7:3F:7F:37:6B:60:07:42:48:90:45:34:B1:14:82:D5:BF:0E:69:8E:CC:49:8D:F5:25:77:EB:F2:E9:3B:9A
Alias name: affirmtrustpremiumeccca [jdk]
CN=AffirmTrust Premium ECC
O=AffirmTrust
C=US
SHA256: BD:71:FD:F6:DA:97:E4:CF:62:D1:64:7A:DD:25:81:B0:7D:79:AD:F8:39:7E:B4:EC:BA:9C:5E:84:88:82:14:23
New in release OpenJDK 8u462 (2025-07-15):
===========================================
Live versions of these release notes can be found at:

View File

@ -312,7 +312,7 @@
# Define version of OpenJDK 8 used
%global project openjdk
%global repo shenandoah-jdk8u
%global openjdk_revision 8u462-b08
%global openjdk_revision 8u472-b08
%global shenandoah_revision shenandoah%{openjdk_revision}
# Define IcedTea version used for SystemTap tapsets and desktop files
%global icedteaver 3.15.0
@ -358,10 +358,9 @@
%global updatever %(VERSION=%{whole_update}; echo ${VERSION##*u})
# eg jdk8u60-b27 -> b27
%global buildver %(VERSION=%{version_tag}; echo ${VERSION##*-})
# rpmrelease numbering must start at 2 to be later than the 9.0 RPM
%global rpmrelease 5
%global rpmrelease 1
# Settings used by the portable build
%global portablerelease 2
%global portablerelease 1
# Portable suffix differs between RHEL and CentOS
%if 0%{?centos} == 0
%global portablerhel 8
@ -1606,7 +1605,6 @@ Patch15: jdk8141590-bundle_libffi-followup.patch
# able to be removed once that release is out
# and used by this RPM.
#############################################
Patch901: jdk8339414-fix_8202369_backport.patch
#############################################
@ -2039,6 +2037,10 @@ pushd %{top_level_dir_name}
%patch -P15 -p1
popd
# Early fixes
pushd %{top_level_dir_name}
popd
pushd %{top_level_dir_name}
# Add crypto policy and FIPS support
%patch -P1001 -p1
@ -2048,11 +2050,6 @@ pushd %{top_level_dir_name}
%patch -P539 -p1
popd
# Upstreamed fixes
pushd %{top_level_dir_name}
%patch -P901 -p1
popd
# RPM-only fixes
%patch -P600
%patch -P1003
@ -2962,6 +2959,15 @@ cjc.mainProgram(args)
%endif
%changelog
* Thu Oct 16 2025 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.472.b08-1
- Update to 8u472-b08 (GA).
- Update release notes for 8u472-b08.
- Drop local JDK-8339414 fix as this is now included upstream
- Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118767
- Resolves: RHEL-119455
* Sun Oct 05 2025 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-5
- Update get_bundle_versions.sh to match other scripts
- * get_bundle_versions.sh: Add license

View File

@ -1,63 +0,0 @@
commit 51b6307937d9584f8690e4916444e479eeafff28
Author: Thomas Fitzsimmons <fitzsim@redhat.com>
Date: Mon Jun 16 23:04:07 2025 +0000
8339414: Fix JDK-8202369 incorrect backport for 8u
Reviewed-by: andrew
diff --git a/jdk/src/solaris/native/java/net/Inet4AddressImpl.c b/jdk/src/solaris/native/java/net/Inet4AddressImpl.c
index e30851df576..8b2e3cdce93 100644
--- a/jdk/src/solaris/native/java/net/Inet4AddressImpl.c
+++ b/jdk/src/solaris/native/java/net/Inet4AddressImpl.c
@@ -332,37 +332,33 @@ Java_java_net_Inet4AddressImpl_getHostByAddr(JNIEnv *env, jobject this,
*/
JNIEXPORT jstring JNICALL
Java_java_net_Inet4AddressImpl_getLocalHostName(JNIEnv *env, jobject this) {
- char hostname[NI_MAXHOST+1];
+ char hostname[NI_MAXHOST + 1];
hostname[0] = '\0';
if (JVM_GetHostName(hostname, sizeof(hostname))) {
- /* Something went wrong, maybe networking is not setup? */
strcpy(hostname, "localhost");
} else {
+#if defined(__solaris__)
+ // try to resolve hostname via nameservice
+ // if it is known but getnameinfo fails, hostname will still be the
+ // value from gethostname
struct addrinfo hints, *res;
- int error;
+ // make sure string is null-terminated
hostname[NI_MAXHOST] = '\0';
memset(&hints, 0, sizeof(hints));
hints.ai_flags = AI_CANONNAME;
hints.ai_family = AF_INET;
- error = getaddrinfo(hostname, NULL, &hints, &res);
-
- if (error == 0) {/* host is known to name service */
- getnameinfo(res->ai_addr,
- res->ai_addrlen,
- hostname,
- NI_MAXHOST,
- NULL,
- 0,
- NI_NAMEREQD);
-
- /* if getnameinfo fails hostname is still the value
- from gethostname */
-
+ if (getaddrinfo(hostname, NULL, &hints, &res) == 0) {
+ getnameinfo(res->ai_addr, res->ai_addrlen, hostname, NI_MAXHOST,
+ NULL, 0, NI_NAMEREQD);
freeaddrinfo(res);
}
+#else
+ // make sure string is null-terminated
+ hostname[NI_MAXHOST] = '\0';
+#endif
}
return (*env)->NewStringUTF(env, hostname);
}

View File

@ -1,2 +1,2 @@
SHA512 (tapsets-icedtea-3.15.0.tar.xz) = c752a197cb3d812d50c35e11e4722772be40096c81d2a57933e0d9b8a3c708b9c157b8108a4e33a06ca7bb81648170994408c75d6f69d5ff12785d0c31009671
SHA512 (shenandoah8u462-b08.tar.xz) = d2572bf0923eacca803e7e5f5bf8fb858b63bdf61cf6221c1d279fbb4c60c0f60f981c5012c2e6ec4ab28135ebb5342e13a36e7976bbd0ffa72aa7eba322fbb9
SHA512 (shenandoah8u472-b08.tar.xz) = 1aaa201cfe712b125cb24c688b930cccc2ba04977bd2e759da723bd18f81b87b1d93573b876b943a3a2c8e47a7238aff57eb7716b090be19822c365d874fae14