diff --git a/.gitignore b/.gitignore index 6c80e96..6d33f3b 100644 --- a/.gitignore +++ b/.gitignore @@ -438,3 +438,20 @@ /openjdk8u452-b09.tar.xz /shenandoah8u452-b09.tar.xz /shenandoah8u462-b08.tar.xz +/openjdk8u462-b01-ea.tar.xz +/openjdk8u462-b02-ea.tar.xz +/openjdk8u462-b03-ea.tar.xz +/openjdk8u462-b04-ea.tar.xz +/openjdk8u462-b05-ea.tar.xz +/openjdk8u462-b06-ea.tar.xz +/openjdk8u462-b07-ea.tar.xz +/openjdk8u462-b08.tar.xz +/openjdk8u472-b01-ea.tar.xz +/openjdk8u472-b02-ea.tar.xz +/openjdk8u472-b03-ea.tar.xz +/openjdk8u472-b04-ea.tar.xz +/openjdk8u472-b05-ea.tar.xz +/openjdk8u472-b06-ea.tar.xz +/openjdk8u472-b07-ea.tar.xz +/openjdk8u472-b08.tar.xz +/shenandoah8u472-b08.tar.xz diff --git a/NEWS b/NEWS index 0a796bb..03a3b86 100644 --- a/NEWS +++ b/NEWS @@ -3,6 +3,85 @@ Key: JDK-X - https://bugs.openjdk.java.net/browse/JDK-X CVE-XXXX-YYYY: https://cve.mitre.org/cgi-bin/cvename.cgi?name=XXXX-YYYY +New in release OpenJDK 8u472 (2025-10-21): +=========================================== +Live versions of these release notes can be found at: + * https://bit.ly/openjdk8u472 + +* CVEs + - CVE-2025-53057 + - CVE-2025-53066 +* Changes + - JDK-7102969: currency.properties supercede not working correctly + - JDK-8041924: [TESTBUG] sun/net/www/http/ChunkedOutputStream/checkError.java fails on some systems + - JDK-8044051: Test jdk/lambda/vm/InterfaceAccessFlagsTest.java gets IOException during compilation + - JDK-8056283: @ignore tools/javac/defaultMethods/Assertions.java until JDK-8047675 is fixed + - JDK-8081734: ConcurrentHashMap/ConcurrentAssociateTest.java, times out 90% of time on sparc with 256 cpu. + - JDK-8157138: Error while fetching currency instance by Currency.getInstance(currencycode) + - JDK-8160767: [TEST_BUG] java/awt/Frame/MaximizedToIconified/MaximizedToIconified.java + - JDK-8185348: Major performance regression in GetMethodDeclaringClass and other JVMTI Method functions + - JDK-8185500: [TESTBUG] Add keywords headful/printer in java/awt and javax tests. + - JDK-8186259: IOExceptionIfEncodedURLTest.sh versus IOExceptionIfEncodedURLTest.java + - JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with handshake_failure + - JDK-8228658: test GetTotalSafepointTime.java fails on fast Linux machines with Total safepoint time 0 ms + - JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java fails with D3D basic render driver + - JDK-8312065: Socket.connect does not timeout when profiling + - JDK-8335978: [8u] incorrect include file name in semaphore.inline.hpp + - JDK-8339414: Fix JDK-8202369 incorrect backport for 8u + - JDK-8340387: Update OS detection code to recognize Windows Server 2025 + - JDK-8345414: Google CAInterop test failures + - JDK-8348760: RadioButton is not shown if JRadioButtonMenuItem is rendered with ImageIcon in WindowsLookAndFeel + - JDK-8351624: [8u] Xerces-J version wrong in THIRD_PARTY_README after JDK-7150324 + - JDK-8352302: Test sun/security/tools/jarsigner/TimestampCheck.java is failing + - JDK-8352637: Enhance bytecode verification + - JDK-8356294: Enhance Path Factories + - JDK-8358328: Bump update version of OpenJDK: 8u472 + - JDK-8358538: Update GHA Windows runner to 2025 + - JDK-8360937: Enhance certificate handling + - JDK-8361212: Remove AffirmTrust root CAs + - JDK-8363965: GHA: Switch cross-compiling sysroots to Debian bookworm + - JDK-8365375: Method SU3.setAcceleratorSelectionForeground assigns to acceleratorForeground + - JDK-8365389: Remove static color fields from SwingUtilities3 and WindowsMenuItemUI + - JDK-8365560: [8u] ppc64le MaxRAM default is too low at 4GiB + - JDK-8365811: test/jdk/java/net/CookieHandler/B6644726.java failure - "Should have 5 cookies. Got only 4, expires probably didn't parse correctly" + - JDK-8366112: [8u] GHA: Fix broken installation of Windows SDK + - JDK-8368308: ISO 4217 Amendment 180 Update + +Notes on individual issues: +=========================== + +security-libs/java.security: + +JDK-8361212: Remove AffirmTrust root CAs +======================================== +The following root certificates from AffirmTrust, which were +deactivated in the 8u432 release of October 2024, have been removed +from the `cacerts` keystore: + +Alias name: affirmtrustcommercialca [jdk] +CN=AffirmTrust Commercial +O=AffirmTrust +C=US +SHA256: 03:76:AB:1D:54:C5:F9:80:3C:E4:B2:E2:01:A0:EE:7E:EF:7B:57:B6:36:E8:A9:3C:9B:8D:48:60:C9:6F:5F:A7 + +Alias name: affirmtrustnetworkingca [jdk] +CN=AffirmTrust Networking +O=AffirmTrust +C=US +SHA256: 0A:81:EC:5A:92:97:77:F1:45:90:4A:F3:8D:5D:50:9F:66:B5:E2:C5:8F:CD:B5:31:05:8B:0E:17:F3:F0B4:1B + +Alias name: affirmtrustpremiumca [jdk] +CN=AffirmTrust Premium +O=AffirmTrust +C=US +SHA256: 70:A7:3F:7F:37:6B:60:07:42:48:90:45:34:B1:14:82:D5:BF:0E:69:8E:CC:49:8D:F5:25:77:EB:F2:E9:3B:9A + +Alias name: affirmtrustpremiumeccca [jdk] +CN=AffirmTrust Premium ECC +O=AffirmTrust +C=US +SHA256: BD:71:FD:F6:DA:97:E4:CF:62:D1:64:7A:DD:25:81:B0:7D:79:AD:F8:39:7E:B4:EC:BA:9C:5E:84:88:82:14:23 + New in release OpenJDK 8u462 (2025-07-15): =========================================== Live versions of these release notes can be found at: diff --git a/java-1.8.0-openjdk.spec b/java-1.8.0-openjdk.spec index 05484db..81cd1b3 100644 --- a/java-1.8.0-openjdk.spec +++ b/java-1.8.0-openjdk.spec @@ -312,7 +312,7 @@ # Define version of OpenJDK 8 used %global project openjdk %global repo shenandoah-jdk8u -%global openjdk_revision 8u462-b08 +%global openjdk_revision 8u472-b08 %global shenandoah_revision shenandoah%{openjdk_revision} # Define IcedTea version used for SystemTap tapsets and desktop files %global icedteaver 3.15.0 @@ -358,10 +358,9 @@ %global updatever %(VERSION=%{whole_update}; echo ${VERSION##*u}) # eg jdk8u60-b27 -> b27 %global buildver %(VERSION=%{version_tag}; echo ${VERSION##*-}) -# rpmrelease numbering must start at 2 to be later than the 9.0 RPM -%global rpmrelease 5 +%global rpmrelease 1 # Settings used by the portable build -%global portablerelease 2 +%global portablerelease 1 # Portable suffix differs between RHEL and CentOS %if 0%{?centos} == 0 %global portablerhel 8 @@ -1606,7 +1605,6 @@ Patch15: jdk8141590-bundle_libffi-followup.patch # able to be removed once that release is out # and used by this RPM. ############################################# -Patch901: jdk8339414-fix_8202369_backport.patch ############################################# @@ -2039,6 +2037,10 @@ pushd %{top_level_dir_name} %patch -P15 -p1 popd +# Early fixes +pushd %{top_level_dir_name} +popd + pushd %{top_level_dir_name} # Add crypto policy and FIPS support %patch -P1001 -p1 @@ -2048,11 +2050,6 @@ pushd %{top_level_dir_name} %patch -P539 -p1 popd -# Upstreamed fixes -pushd %{top_level_dir_name} -%patch -P901 -p1 -popd - # RPM-only fixes %patch -P600 %patch -P1003 @@ -2962,6 +2959,15 @@ cjc.mainProgram(args) %endif %changelog +* Thu Oct 16 2025 Andrew Hughes - 1:1.8.0.472.b08-1 +- Update to 8u472-b08 (GA). +- Update release notes for 8u472-b08. +- Drop local JDK-8339414 fix as this is now included upstream +- Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 +- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** +- Resolves: RHEL-118767 +- Resolves: RHEL-119455 + * Sun Oct 05 2025 Andrew Hughes - 1:1.8.0.462.b08-5 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license diff --git a/jdk8339414-fix_8202369_backport.patch b/jdk8339414-fix_8202369_backport.patch deleted file mode 100644 index 3250ef4..0000000 --- a/jdk8339414-fix_8202369_backport.patch +++ /dev/null @@ -1,63 +0,0 @@ -commit 51b6307937d9584f8690e4916444e479eeafff28 -Author: Thomas Fitzsimmons -Date: Mon Jun 16 23:04:07 2025 +0000 - - 8339414: Fix JDK-8202369 incorrect backport for 8u - - Reviewed-by: andrew - -diff --git a/jdk/src/solaris/native/java/net/Inet4AddressImpl.c b/jdk/src/solaris/native/java/net/Inet4AddressImpl.c -index e30851df576..8b2e3cdce93 100644 ---- a/jdk/src/solaris/native/java/net/Inet4AddressImpl.c -+++ b/jdk/src/solaris/native/java/net/Inet4AddressImpl.c -@@ -332,37 +332,33 @@ Java_java_net_Inet4AddressImpl_getHostByAddr(JNIEnv *env, jobject this, - */ - JNIEXPORT jstring JNICALL - Java_java_net_Inet4AddressImpl_getLocalHostName(JNIEnv *env, jobject this) { -- char hostname[NI_MAXHOST+1]; -+ char hostname[NI_MAXHOST + 1]; - - hostname[0] = '\0'; - if (JVM_GetHostName(hostname, sizeof(hostname))) { -- /* Something went wrong, maybe networking is not setup? */ - strcpy(hostname, "localhost"); - } else { -+#if defined(__solaris__) -+ // try to resolve hostname via nameservice -+ // if it is known but getnameinfo fails, hostname will still be the -+ // value from gethostname - struct addrinfo hints, *res; -- int error; - -+ // make sure string is null-terminated - hostname[NI_MAXHOST] = '\0'; - memset(&hints, 0, sizeof(hints)); - hints.ai_flags = AI_CANONNAME; - hints.ai_family = AF_INET; - -- error = getaddrinfo(hostname, NULL, &hints, &res); -- -- if (error == 0) {/* host is known to name service */ -- getnameinfo(res->ai_addr, -- res->ai_addrlen, -- hostname, -- NI_MAXHOST, -- NULL, -- 0, -- NI_NAMEREQD); -- -- /* if getnameinfo fails hostname is still the value -- from gethostname */ -- -+ if (getaddrinfo(hostname, NULL, &hints, &res) == 0) { -+ getnameinfo(res->ai_addr, res->ai_addrlen, hostname, NI_MAXHOST, -+ NULL, 0, NI_NAMEREQD); - freeaddrinfo(res); - } -+#else -+ // make sure string is null-terminated -+ hostname[NI_MAXHOST] = '\0'; -+#endif - } - return (*env)->NewStringUTF(env, hostname); - } diff --git a/sources b/sources index 2a8d5c7..cebe099 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ SHA512 (tapsets-icedtea-3.15.0.tar.xz) = c752a197cb3d812d50c35e11e4722772be40096c81d2a57933e0d9b8a3c708b9c157b8108a4e33a06ca7bb81648170994408c75d6f69d5ff12785d0c31009671 -SHA512 (shenandoah8u462-b08.tar.xz) = d2572bf0923eacca803e7e5f5bf8fb858b63bdf61cf6221c1d279fbb4c60c0f60f981c5012c2e6ec4ab28135ebb5342e13a36e7976bbd0ffa72aa7eba322fbb9 +SHA512 (shenandoah8u472-b08.tar.xz) = 1aaa201cfe712b125cb24c688b930cccc2ba04977bd2e759da723bd18f81b87b1d93573b876b943a3a2c8e47a7238aff57eb7716b090be19822c365d874fae14