From 3aa044c6cd72e27dd9a22bfbe5bc657116f33eaf Mon Sep 17 00:00:00 2001
From: Andrew Hughes <gnu.andrew@redhat.com>
Date: Wed, 12 Aug 2026 15:49:19 +0100
Subject: [PATCH] Add CVEs for August 2026 release

** This tarball is embargoed until 2026-08-18 @ 1pm PT. **

Related: RHEL-235605
---
 NEWS                    | 3 +++
 java-1.8.0-openjdk.spec | 7 ++++++-
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/NEWS b/NEWS
index f4d21f7..1f82abc 100644
--- a/NEWS
+++ b/NEWS
@@ -9,6 +9,9 @@ Live versions of these release notes can be found at:
   * https://bit.ly/openjdk8u504
 
 * CVEs
+  - CVE-2026-60589
+  - CVE-2026-61308
+  - CVE-2026-70907
 * Changes
   - JDK-8382471: Improve Resource Resolving
   - JDK-8384708: Enhance HTTP Connections
diff --git a/java-1.8.0-openjdk.spec b/java-1.8.0-openjdk.spec
index 98bfec2..18067f7 100644
--- a/java-1.8.0-openjdk.spec
+++ b/java-1.8.0-openjdk.spec
@@ -18,7 +18,7 @@
 %global updatever       %(VERSION=%{whole_update}; echo ${VERSION##*u})
 # eg jdk8u60-b27 -> b27
 %global buildver        %(VERSION=%{version_tag}; echo ${VERSION##*-})
-%global portablerelease 1
+%global portablerelease 2
 %global rpmrelease 1
 
 # Define IcedTea version used for SystemTap tapsets and desktop files
@@ -2715,6 +2715,11 @@ cjc.mainProgram(args)
 %endif
 
 %changelog
+* Wed Aug 12 2026 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.504.b01-2.1
+- Add CVEs for August 2026 release
+- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
+- Related: RHEL-235605
+
 * Mon Aug 10 2026 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.504.b01-1.1
 - Update to 8u504-b01 (GA).
 - Update release notes for 8u504-b01.