File project.diff of Package java-1_8_0-openjdk

Overview Repositories Revisions Requests Users Attributes Meta

File project.diff of Package java-1_8_0-openjdk (Revision 614600b781eefb4f427804a626cbba9b)

Currently displaying revision 614600b781eefb4f427804a626cbba9b , Show latest

--- java-1_8_0-openjdk.changes.orig
+++ java-1_8_0-openjdk.changes
@@ -1,4 +1,229 @@
 -------------------------------------------------------------------
+Fri Nov  3 11:36:40 UTC 2017 - fstrba@suse.com
+
+- Added patch:
+  * tzdb_dat.patch
+    + Patch also the other place in jdk that loads the tzdb.dat
+      file
+
+-------------------------------------------------------------------
+Thu Nov  2 06:30:45 UTC 2017 - fstrba@suse.com
+
+- Update to version jdk8u151 (icedtea 3.6.0)
+  * Security fixes
+    + S8165543: Better window framing
+    + S8169026, CVE-2017-10274: Handle smartcard clean up better
+      (bsc#1064071)
+    + S8169966: Larger AWT menus
+    + S8170218: Improved Font Metrics
+    + S8171252: Improve exception checking
+    + S8171261: Stability fixes for lcms
+    + S8174109, CVE-2017-10281: Better queuing priorities
+      (bsc#1064072)
+    + S8174966, CVE-2017-10285: Unreferenced references
+      (bsc#1064073)
+    + S8175940: More certificate subject checking
+    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
+    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
+      (bsc#1064086)
+    + S8180024: Improve construction of objects during 
+      deserialization
+    + S8180711, CVE-2017-10346: Better invokespecial checks
+      (bsc#1064078)
+    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
+    + S8181323, CVE-2017-10347: Better timezone processing
+      (bsc#1064079)
+    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
+    + S8181370, CVE-2017-10345: Better keystore handling
+      (bsc#1064077)
+    + S8181432, CVE-2017-10348: Better processing of unresolved 
+      permissions (bsc#1064080)
+    + S8181597, CVE-2017-10357: Process Proxy presentation
+      (bsc#1064085)
+    + S8181612, CVE-2017-10355: More stable connection processing
+      (bsc#1064083)
+    + S8181692, CVE-2017-10356: Update storage implementations
+      (bsc#1064084)
+    + S8183028, CVE-2016-10165: Improve CMS header processing
+      (bsc#1064069)
+    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, 
+      CVE-2016-9843: Upgrade compression library (bsc#1064070)
+  * New features
+    + PR3469: Alternative path to tzdb.dat
+    + PR3483: Separate addition of nss.cfg and tz.properties into 
+      separate targets
+    + PR3484: Move SystemTap support to its own target
+    + PR3485: Support additional targets for the bootstrap build
+  * Import of OpenJDK 8 u151 build 12
+    + S8029659: Keytool, print key algorithm of certificate or key 
+      entry
+    + S8057810: New defaults for DSA keys in jarsigner and keytool
+    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0 
+      can hang even with soTimeout set
+    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail 
+      with BindException
+    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with 
+      Retry count is -1 less
+    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with 
+      timeout
+    + S8157561: Ship the unlimited policy files in JDK Updates
+    + S8158517: Minor optimizations to ISO10126PADDING
+    + S8171319: keytool should print out warnings when reading or 
+      generating cert/cert req using weak algorithms
+    + S8177569: keytool should not warn if signature algorithm 
+      used in cacerts is weak
+    + S8177837: need to upgrade install tools
+    + S8178714: PKIX validator nameConstraints check failing after 
+      change 8175940
+    + S8179423: 2 security tests started failing for
+      JDK 1.6.0 u161 b05
+    + S8179564: Missing @bug for tests added with JDK-8165367
+    + S8181048: Refactor existing providers to refer to the same 
+      constants for default values for key length
+    + S8182879: Add warnings to keytool when using JKS and JCEKS
+    + S8184937: LCMS error 13: Couldn't link the profiles
+    + S8185039: Incorrect GPL header causes RE script to miss swap 
+      to commercial header for licensee source bundle
+    + S8185040: Incorrect GPL header causes RE script to miss swap 
+      to commercial header for licensee source bundle
+    + S8185778: 8u151 L10n resource file update
+    + S8185845: Add SecurityTools.java test library
+    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java 
+      failed after backport to JDK 6/7/8
+    + S8186533: 8u151 L10n resource file update md20
+    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
+  * Backports
+    + S8035496, PR3487: G1 ARM: missing remset entry noticed by 
+      VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
+    + S8146086, PR3439, RH1478402: Publishing two webservices on 
+      same port fails with "java.net.BindException: Address already
+	  in use"
+    + S8184673, PR3475, RH1487266: Fix compatibility issue in 
+	  AlgorithmChecker for 3rd party JCE providers
+    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect 
+	  owned monitor
+    + S8187822, PR3478, RH1494230: C2 conditonal move optimization 
+	  might create broken graph
+  * Bug fixes
+    + PR3479, RH1486025: ECC and NSS JVM crash
+    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
+    + S8165852, PR3468: (fs) Mount point not found for a file 
+	  which is present in overlayfs
+    + S8188030, PR3459, RH1484079: AWT java apps fail to start 
+	  when some minimal fonts are present
+  * PPC port
+    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply 
+	  intrinsic
+    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of 
+	  li/cmpld
+    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of 
+	  lis/and
+    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for 
+	  bitfield extract
+  * AArch64 port
+    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp 
+	  instruction
+    + S8187224, PR3488: aarch64: some inconsistency between 
+	  aarch64_ad.m4 and aarch64.ad
+  * SystemTap
+    + PR3467, RH1492139: Hotspot object_alloc tapset uses 
+	  HeapWordSize incorrectly
+  * Shenandoah
+    + Add missing UseShenandoahGC checks to C2
+    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
+    + [backport] After Evac verification should run consistently
+    + [backport] All definitions should start with Shenandoah*
+    + [backport] Allocation latency tracing
+    + [backport] Allow allocations in pinned regions
+    + [backport] Assorted monitoring support fixes
+    + [backport] Avoid Full STW GC on System.gc() + related fixes
+    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
+    + [backport] Cannot do more than 1000 Full GCs
+    + [backport] Cap heap size for TestRegionSizeArgs test
+    + [backport] Cleanup "dirty" mentions
+    + [backport] Cleanup unused methods and statements + Trivial 
+	  cleanup: removed unused field, etc.
+    + [backport] Common pause marker to capture everything 
+	  before/after pause
+    + [backport] Consistent print_on and tty handling
+    + [backport] "continuous" heuristics
+    + [backport] Disable biased locking by default
+    + [backport] Fix build error: avoid loops with empty bodies
+    + [backport] Fix build error: switches over enums should take 
+	  all enums
+    + [backport] Fix build error: verifier liveness should not be 
+	  implicitly casted to size_t
+    + [backport] Fixed assertion failures when printing heap 
+	  region to trace output
+    + [backport] Fixed C calling convention of shenandoah_wb() on 
+	  Windows
+    + [backport] LotsOfCycles test always degrades to Full GC
+    + [backport] Made ShenandoahPrinter debug only
+    + [backport] Make sure different Verifier levels work
+    + [backport] Make sure we have at least one memory pool per 
+	  memory manager (JMX) + JMX double-counts heap used size
+    + [backport] Mark heuristics diagnostic/experimental
+    + [backport] Move Verifier "start" message under (gc,start)
+    + [backport] On-demand commit as heap resizing strategy
+    + [backport] Periodic GC
+    + [backport] PhiNode::has_only_data_users() needs to apply to 
+	  shenandoah barrier only
+    + [backport] Pinning humongous regions should be allowed
+    + [backport] Reclaimed humongous regions should count towards 
+	  immediate garbage
+    + [backport] Refactor region flags into finite state machine
+    + [backport] Refactor ShConcThread dispatch
+    + [backport] Refactor ShenandoahFreeSet + Fast-forward over 
+	  humongous regions to keep "current" non-humongous
+    + [backport] Refactor ShenandoahHeapLock
+    + [backport] Refactor ShenandoahHeapRegionSet
+    + [backport] Region (byte|word) shifts as the replacement for 
+	  divisions
+    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation 
+	  tests
+    + [backport] Rename inline guards
+    + [backport] Selectable humongous threshold + Humongous top() 
+	  should be correct for iteration
+    + [backport] Shortcut concurrent cycle when enough immediate 
+	  garbage is reclaimed
+    + [backport] Templatize and improve inlining of arraycopy and 
+	  clone barriers.
+    + [backport] TestRegionSampling test
+    + [backport] TestSmallHeap test for Shenandoah
+    + [backport] Uncommit heap regions after given delay
+    + [backport] Underflow in adaptive free_threshold calculation
+    + [backport] Unlock more GC-specific tests for Shenandoah
+    + [backport] Update counters on slow-path more rarely
+    + [backport] Verifier should avoid pushing on stack when 
+	  walking objects past TAMS
+    + [backport] Verifier should walk cset and humongous regions
+    + [backport] Verify humongous regions liveness
+    + [backport] Verify liveness data
+    + Correct way to fix Windows call convention issue
+    + Fix build error in release config.
+    + Fixed Fixed message logging
+    + Handle Java heap initialization and expansion failures
+    + Make sure -verbose:gc, PrintGC, PrintGCDetails work 
+	  consistently
+    + Missing barriers on constant oops + acmp rework + cas fix + 
+	  write barrier on constant oop fix
+    + Missing UseShenandoahGC check in 
+	  LibraryCallKit::inline_multiplyToLen()
+    + Missing UseShenandoahGC check to C2
+    + OOME in SurrogateLockerThread deadlocks the GC cycle
+    + Properly unlock ShenandoahVerify
+    + Remove unused memory_for, fixing the build
+    + Remove useless code following acmp rework
+    + Revert accidental G1 closure rename
+    + Test bug: test library and flags in TestHeapAlloc
+    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
+    + Write barrier pin and expand cleanup
+- Removed patches:
+  * alternative-tzdb_dat.patch
+  * java-1_8_0-openjdk-linuxfilestore.patch
+    + Integrated upstream
+
+-------------------------------------------------------------------
 Sun Oct  8 12:44:35 UTC 2017 - fstrba@suse.com
 
 - Enable improved font rendering on systems where it applies
--- java-1_8_0-openjdk.spec.orig
+++ java-1_8_0-openjdk.spec
@@ -18,7 +18,7 @@
 
 %{!?aarch64:%global aarch64 aarch64 arm64 armv8}
 %global jit_arches %{ix86} x86_64 ppc64 ppc64le %{aarch64} %{arm}
-%global icedtea_version 3.5.1
+%global icedtea_version 3.6.0
 %global icedtea_sound_version 1.0.1
 %global buildoutputdir openjdk.build/
 # Convert an absolute path to a relative path.  Each symbolic link is
@@ -32,7 +32,8 @@
 # priority must be 6 digits in total
 %global priority        1805
 %global javaver         1.8.0
-%global updatever       144
+%global updatever       151
+%global buildver        12
 # Standard JPackage directories and symbolic links.
 %global sdklnk          java-%{javaver}-openjdk
 %global archname        %{sdklnk}
@@ -203,8 +204,7 @@ Patch1000:      icedtea-3.0.1-sunec.patc
 Patch1001:      java-1_8_0-openjdk-suse-desktop-files.patch
 Patch2000:      java-1_8_0-openjdk-gcc6.patch
 Patch2001:      disable-doclint-by-default.patch
-Patch2002:      java-1_8_0-openjdk-linuxfilestore.patch
-Patch2003:      alternative-tzdb_dat.patch
+Patch2002:      tzdb_dat.patch
 BuildRequires:  alsa-lib-devel
 BuildRequires:  autoconf
 BuildRequires:  automake
@@ -431,33 +431,6 @@ this package unless you really need to.
 %patch1000 -p1
 %patch1001 -p1
 
-# Extract systemtap tapsets
-
-%if %{with_systemtap}
-
-for file in tapset/*.in; do
-
-    OUTPUT_FILE=`echo $file | sed -e s:\.in$::g`
-%ifnarch %{arm}
-    sed -e s:@ABS_SERVER_LIBJVM_SO@:%{_jvmdir}/%{jredir}/lib/%{archinstall}/server/libjvm.so:g $file > $file.1
-%else
-    sed -e '/@ABS_SERVER_LIBJVM_SO@/d' $file > $file.1
-%endif
-
-# TODO find out which architectures other than ix86 and arm have a client vm
-
-%ifarch %{ix86} %{arm}
-    sed -e s:@ABS_CLIENT_LIBJVM_SO@:%{_jvmdir}/%{jredir}/lib/%{archinstall}/client/libjvm.so:g $file.1 > $OUTPUT_FILE
-%else
-    sed -e '/@ABS_CLIENT_LIBJVM_SO@/d' $file.1 > $OUTPUT_FILE
-%endif
-    sed -i -e s:@ABS_JAVA_HOME_DIR@:%{_jvmdir}/%{sdkdir}:g $OUTPUT_FILE
-    sed -i -e s:@INSTALL_ARCH_DIR@:%{archinstall}:g $OUTPUT_FILE
-
-done
-
-%endif
-
 %build
 export LANG=C
 unset JAVA_HOME
@@ -484,6 +457,10 @@ export NSS_LIBS="$NSS_SOFTOKN_LIBS"
 
 sh autogen.sh
 %configure \
+        --disable-downloading \
+        --with-tzdata-dir=%{_datadir}/javazi \
+        --with-pkgversion="build %{javaver}_%{updatever}-b%{buildver} suse-%{release}-%{_arch}" \
+        --with-jdk-home="%{_sysconfdir}/alternatives/java_sdk" \
 %if %{with_sunec}
         --enable-sunec \
 %endif
@@ -492,19 +469,12 @@ sh autogen.sh
 %else
         --disable-bootstrap \
 %endif
-        --disable-downloading \
-        --with-abs-install-dir=%{_jvmdir}/%{sdkdir} \
 %ifnarch %{arm} %{aarch64}
         --with-parallel-jobs="${NUM_PROC}" \
 %endif
 %ifarch s390
         --with-boot-jdk-jvmargs="-Xms256M -Xmx768M" \
 %endif
-        --with-pkgversion="suse-%{release}-%{_arch}" \
-        --with-jdk-home="%{_sysconfdir}/alternatives/java_sdk" \
-%if %{with_systemtap}
-        --enable-systemtap \
-%endif
 %if %{with zero}
         --enable-zero \
 %endif
@@ -573,9 +543,7 @@ patch -p0 -i %{PATCH104}
 
 patch -p0 -i %{PATCH2000}
 patch -p0 -i %{PATCH2001}
-
 patch -p0 -i %{PATCH2002}
-patch -p0 -i %{PATCH2003}
 
 (cd openjdk/common/autoconf
  bash ./autogen.sh
@@ -621,9 +589,6 @@ echo "" >> $JAVA_HOME/jre/lib/pulseaudio
 popd
 %endif
 
-# Copy tz.properties
-echo "sun.zoneinfo.dir=%{_datadir}/javazi" >> $JAVA_HOME/jre/lib/tz.properties
-
 # Check debug symbols are present and can identify code
 SERVER_JVM="$JAVA_HOME/jre/lib/%{archinstall}/server/libjvm.so"
 if [ -f "$SERVER_JVM" ] ; then
@@ -645,19 +610,6 @@ export STRIP_KEEP_SYMTAB=libjvm*
 # skip /usr/lib/rpm/brp-check-bytecode-version:
 export NO_BRP_CHECK_BYTECODE_VERSION=true
 
-%if %{with_systemtap}
-  # Install systemtap support files.
-  install -dm 755 %{buildroot}%{_jvmdir}/%{sdkdir}/tapset
-  for i in tapset/*.stp; do
-    cp -a $i %{buildroot}%{_jvmdir}/%{sdkdir}/tapset/$(basename $i .stp)-%{javaver}.stp
-  done
-  install -d -m 755 %{buildroot}%{tapsetdir}
-  pushd %{buildroot}%{tapsetdir}
-    RELATIVE=$(%{abs2rel} %{_jvmdir}/%{sdkdir}/tapset %{tapsetdir})
-    ln -sf $RELATIVE/*.stp .
-  popd
-%endif
-
 pushd %{buildoutputdir}images/j2sdk-image
 
   # Install main files.
@@ -725,6 +677,21 @@ pushd %{buildoutputdir}images/j2sdk-imag
   [ -f bin/java-rmi.cgi ] && mv bin/java-rmi.cgi sample/rmi
   cp -a sample %{buildroot}%{_jvmdir}/%{sdkdir}
 
+%if %{with_systemtap}
+  # Install systemtap support files.
+  cp -a tapset %{buildroot}%{_jvmdir}/%{sdkdir}
+  pushd %{buildroot}%{_jvmdir}/%{sdkdir}/tapset
+    for i in *.stp; do
+      mv $i $(basename $i .stp)-%{javaver}.stp
+    done
+  popd
+  install -d -m 755 %{buildroot}%{tapsetdir}
+  pushd %{buildroot}%{tapsetdir}
+    RELATIVE=$(%{abs2rel} %{_jvmdir}/%{sdkdir}/tapset %{tapsetdir})
+    ln -sf $RELATIVE/*.stp .
+  popd
+%endif
+
 popd
 
 # Install Javadoc documentation.
@@ -1091,6 +1058,9 @@ fi
 %dir %{_jvmdir}/%{jredir}/lib/images/cursors
 %dir %{_jvmdir}/%{jredir}/lib/management
 %dir %{_jvmdir}/%{jredir}/lib/security
+%dir %{_jvmdir}/%{jredir}/lib/security/policy
+%dir %{_jvmdir}/%{jredir}/lib/security/policy/limited
+%dir %{_jvmdir}/%{jredir}/lib/security/policy/unlimited
 %dir %{_libdir}/jvm-exports
 %dir %{_libdir}/jvm-private
 
@@ -1121,8 +1091,10 @@ fi
 %{_mandir}/man1/servertool-%{sdklnk}.1*
 %{_mandir}/man1/tnameserv-%{sdklnk}.1*
 %{_mandir}/man1/unpack200-%{sdklnk}.1*
-%{_jvmdir}/%{jredir}/lib/security/US_export_policy.jar
-%{_jvmdir}/%{jredir}/lib/security/local_policy.jar
+%{_jvmdir}/%{jredir}/lib/security/policy/limited/US_export_policy.jar
+%{_jvmdir}/%{jredir}/lib/security/policy/limited/local_policy.jar
+%{_jvmdir}/%{jredir}/lib/security/policy/unlimited/US_export_policy.jar
+%{_jvmdir}/%{jredir}/lib/security/policy/unlimited/local_policy.jar
 
 %files devel
 %dir %{_jvmdir}/%{sdkdir}/bin

Places

File project.diff of Package java-1_8_0-openjdk (Revision 614600b781eefb4f427804a626cbba9b)

Places