From c66a899a2e8bca912c27fc6da6036339b59aaf73 Mon Sep 17 00:00:00 2001
From: Andrew Hughes <gnu.andrew@redhat.com>
Date: Mon, 27 Jul 2026 21:12:55 +0100
Subject: [PATCH] Add CVEs to NEWS file

Related: RHEL-188874
---
 NEWS                    | 11 +++++++++++
 java-1.8.0-openjdk.spec |  6 +++++-
 2 files changed, 16 insertions(+), 1 deletion(-)

diff --git a/NEWS b/NEWS
index aea4751..410c364 100644
--- a/NEWS
+++ b/NEWS
@@ -8,6 +8,17 @@ New in release OpenJDK 8u502 (2026-07-21):
 Live versions of these release notes can be found at:
   * https://bit.ly/openjdk8u502
 
+* CVEs
+  - CVE-2026-46968
+  - CVE-2026-47010
+  - CVE-2026-47021
+  - CVE-2026-47027
+  - CVE-2026-60147
+  - CVE-2026-47059
+  - CVE-2026-47063
+  - CVE-2026-47057
+  - CVE-2026-47058
+  - CVE-2026-41254
 * Changes
   - JDK-6815126: intermittent SimulResumerTest.java failure
   - JDK-8162545: Mac build failure
diff --git a/java-1.8.0-openjdk.spec b/java-1.8.0-openjdk.spec
index 2778d0b..a046f39 100644
--- a/java-1.8.0-openjdk.spec
+++ b/java-1.8.0-openjdk.spec
@@ -18,7 +18,7 @@
 %global updatever       %(VERSION=%{whole_update}; echo ${VERSION##*u})
 # eg jdk8u60-b27 -> b27
 %global buildver        %(VERSION=%{version_tag}; echo ${VERSION##*-})
-%global portablerelease 1
+%global portablerelease 2
 %global rpmrelease 1
 
 # Define IcedTea version used for SystemTap tapsets and desktop files
@@ -2715,6 +2715,10 @@ cjc.mainProgram(args)
 %endif
 
 %changelog
+* Mon Jul 27 2026 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.502.b07-2.1
+- Add CVEs to NEWS file
+- Related: RHEL-188874
+
 * Fri Jul 17 2026 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.502.b07-1.1
 - Update to 8u502-b07 (GA).
 - Update release notes for 8u502-b07.