ELBA-2021-14374

ELBA-2021-14374 - java-latest-openjdk Bug Fix update

Type:	BUG
Severity:	NA
Release Date:	2021-05-13

Description

[1:16.0.1.0.9-1.rolling]
- update to 16.0.1+9 april cpu tag
- dropped jdk8259949-allow_cf-protection_on_x86.patch

[1:16.0.0.0.36-2.rolling]
- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf

[1:16.0.0.0.36-1.rolling]
- fixed suggests of wrong pcsc-lite-devel(x86-64) to correct pcsc-lite-libs(x86-64)
- bumped buildjdkver to build by itself - 16

[1:16.0.0.0.36-0.rolling]
- Update to jdk-16.0.0.0+36
- Update tarball generation script to use git following OpenJDK's move to github
- Update tarball generation script to use PR3823 which handles JDK-8235710 changes
- Use upstream default for version-pre rather than setting it to 'ea' or ''
- Drop libsunec.so which is no longer generated, thanks to JDK-8235710
- Drop unnecessary compiler flags, dating back to work on GCC 6 & 10
- Adapt RH1750419 alt-java patch to still apply after some variable re-naming in the makefiles
- Update filever to remove any trailing zeros, as in the OpenJDK build, and use for source filename
- Use system harfbuzz now this is supported.
- Pass SOURCE_DATE_EPOCH to build for reproducible builds

[1:15.0.2.0.7-1.rolling]
- Hardcode /usr/sbin/alternatives for Flatpak builds

[1:15.0.2.0.7-0.rolling.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1:15.0.2.0.7-0.rolling]
- Update to jdk-15.0.2.0+7
- Add release notes for 15.0.1.0 & 15.0.2.0
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 15.0.x rather than 15.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Cleanup debug package descriptions and version number placement.
- Remove unused patch files.

[1:15.0.1.9-10.rolling]
- Use -march=i686 for x86 builds if -fcf-protection is detected (needs CMOV)

[1:15.0.1.9-9.rolling]
- fixed missing condition for fastdebug packages being counted as debug ones

[1:15.0.1.9-8.rolling]
- removed lib-style provides for fastdebug_suffix_unquoted

[1:15.0.1.9-6.rolling]
- many cosmetic changes taken from more maintained jdk11
- introduced debug_arches, bootstrap_arches, systemtap_arches, fastdebug_arches, sa_arches, share_arches, shenandoah_arches, zgc_arches
instead of various hardcoded ifarches
- updated systemtap
- added requires excludes for debug pkgs
- removed redundant logic around jsa files
- added runtime requires of lksctp-tools and libXcomposite%
- added and used Source15 TestSecurityProperties.java, but is made always positive as jdk15 now does not honor system policies
- s390x excluded form fastdebug build

[1:15.0.1.9-5.rolling]
- introduced nm based check to verify alt-java on x86_64 is patched, and no other alt-java or java is patched
- patch600 rh1750419-redhat_alt_java.patch amended to die, if it is used wrongly
- introduced ssbd_arches with currently only valid arch of x86_64 to separate real alt-java architectures

[1:15.0.1.9-4.rolling]
- moved wrongly placed licenses to accompany other ones
- this bad placement was killng parallel-installability and thus having bad impact to leapp if used

[1:15.0.1.9-3.rolling]
- added patch600, rh1750419-redhat_alt_java.patch, suprassing removed patch
- no longer copying of java->alt-java as it is created by patch600

[1:15.0.1.9-2.rolling]
- Create a copy of java as alt-java with alternatives and man pages
- java-11-openjdk doesn't have a JRE tree, so don't try and copy alt-java there...

[1:15.0.1.9-1.rolling]
- updated to October CPU 2020 sources

[1:15.0.0.36-4.rolling]
- Fix directory ownership of -static-libs sub-package.

[1:15.0.0.36-3.rolling]
- Build static-libs-image and add resulting files via -static-libs sub-package.
- Disable stripping of debug symbols for static libraries part of the -static-libs sub-package.
- JDK-8245832 increases the set of static libraries, so try and include them all with a wildcard.
- Update static-libs packaging to new layout

[1:15.0.0.36-2.rolling]
- Add support for fastdebug builds on 64 bit architectures

[1:15.0.0.36-1.rolling]
- Remove EA designation
- Re-generate sources with PR3803 patch

[1:15.0.0.36-0.1.ea.rolling]
- Update to jdk 15.0.0.36 tag
- Modify rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- Update vendor version string to 20.9
- jjs removed from packaging after JEP 372: Nashorn removal
- rmic removed from packaging after JDK-8225319

[1:14.0.2.12-2.rolling]
- Disable LTO so as to pass debuginfo check

[1:14.0.2.12-1.rolling]
- update to jdk 14.0.2.12 CPU version
- remove upstreamed patch jdk8237879-make_4_3_build_fixes.patch
- remove upstreamed patch jdk8235833-posixplatform_cpp_should_not_include_sysctl_h.patch
- remove upstreamed patch jdk8243059-build_fails_when_with_vendor_contains_comma.patch

[1:14.0.1.7-4.rolling]
- Re-introduce java-openjdk-src & java-openjdk-demo for system_jdk builds.
- Fix accidental renaming of java-openjdk-devel to java-devel-openjdk.

[ 1:14.0.1.7-3.rolling]
- introduce patch jdk8235833-posixplatform_cpp_should_not_include_sysctl_h to fix build issues in rawhide
- rename and reorganize patch sections

[1:14.0.1.7-2.rolling]
- Fix vendor version to 20.3 (from 19.9)

[1:14.0.1.7-1.rolling]
- April security update
- uploaded new src tarball

[1:14.0.0.36-4.rolling]
- set vendor property and vendor urls
- made urls to be preconfigured by os

[1:14.0.0.36-3.rolling]
- Remove s390x workaround flags for GCC 10
- bump buildjdkver to 14
- uploaded new src tarball

[1:14.0.0.36-2.rolling]
- removed a whitespace causing fail of postinstall script
- removed backslashes at the end of alternatives command

[1:14.0.0.36-1.rolling]
- update to jdk 14+36 ga build
- remove JDK-8224851 patch, as OpenJDK 14 already contains it
- removed pack200 and unpack200 binaries, slaves, manpages and libunpack.so library
- added listings for jpackage binary, manpages and added slave records to alternatives

[1:13.0.2.8-4.rolling]
- add patch for build issues with make 4.3

[1:13.0.2.8-3.rolling]
- add workaround for issues with build with GCC10 on s390x (see RHBZ#1799531)
- fix issues with build with GCC10: JDK-8224851, -fcommon switch

* Thu Feb 27 2020 Petra Alice Mikova pmikova@redhat.com> - 1:13.0.2.8-3.rolling
- Add JDK-8224851 patch to resolve aarch64 issues

[1:13.0.2.8-2.rolling]
- fix Release, as it was broken by last rpmdev-bumpspec

[1:13.0.2.8-1.rolling.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[1:13.0.2.8-1.rolling]
- removed patch jdk8231405_guarantee_d_nonequals_null_failed_null_dominator_info.patch
- removed patch jdk8231583_fix_register_clash_in_sbsa_resolve_forwarding_pointer_borrowing.patch
- updated sources to the 13.0.2+8 tag

[1:13.0.1.9-2.rolling]
- Fixed hardcoded major version in jdk13u to macro
- added jdk8231405_guarantee_d_nonequals_null_failed_null_dominator_info.patch
- added jdk8231583_fix_register_clash_in_sbsa_resolve_forwarding_pointer_borrowing.patch

[1:13.0.1.9-1.rolling]
- Updated to October 2019 CPU sources

[1:13.0.0.33-3.rolling]
- synced up generate tarball script with other OpenJDK packages
- dropped pr2126-synchronise_elliptic_curves_in_sun_security_ec_namedcurve_with_those_listed_by_nss.patch from the sources
- regenerated sources with the updated script

[1:13.0.0.33-3.rolling]
- Switch to in-tree SunEC code, dropping NSS runtime dependencies and patches to link against it.

[ 1:13.0.0.33-3.rolling]
- Drop unnecessary build requirement on gtk3-devel, as OpenJDK searches for Gtk+ at runtime.
- Add missing build requirement for libXrender-devel, previously masked by Gtk3+ dependency
- Add missing build requirement for libXrandr-devel, previously masked by Gtk3+ dependency
- fontconfig build requirement should be fontconfig-devel, previously masked by Gtk3+ dependency

[1:13.0.0.33-3.rolling]
- Obsolete javadoc-slowdebug and javadoc-slowdebug-zip packages via javadoc and javadoc-zip respectively.

[1:13.0.0.33-2.rolling]
- Don't produce javadoc/javadoc-zip sub packages for the
debug variant build.
- Don't perform a bootcycle build for the debug variant build.

[1:13.0.0.33-2.rolling]
- Fix vendor version as JDK 13 has been GA'ed September 2019: 19.3 => 19.9

[1:13.0.0.33-1.rolling]
- updated to 13+33 sources
- added two manpages to file listings (jfr, jaotc)
- set is_ga to 1 to match build from jdk.java.net

[1:13.0.0.28-0.2.ea.rolling]
- Fix bootjdkver macro. It attempted to build with jdk 12, which is
no longer available in rawhide (it's 13 instead).
- Fix Release as rpmdev-bumpspec doesn't do it correctly.

[1:13.0.0.28-0.1.ea.rolling.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[1:13.0.0.28-0.1.ea.rolling]
- updated to jdk 13
- adapted pr2126-synchronise_elliptic_curves_in_sun_security_ec_namedcurve_with_those_listed_by_nss.patch
- adapted rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch
- fixed file listings
- included https://src.fedoraproject.org/rpms/java-11-openjdk/pull-request/49:
- Include 'ea' designator in Release when appropriate
- Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately

[1:12.0.1.12-2.rolling]
- fixed requires/provides for the non-system JDK case (backport of RHBZ#1702324)

[1:12.0.1.12-1.rolling]
- updated sources to current CPU release

[1:12.0.0.33-4.rolling]
- added slave for jfr binary in devel package

[1:12.0.0.33-3.rolling]
- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc
- removed LTS string from LTS designator, because epel builds get identified as rhel and JDK 12 is not LTS
- removed duplicated dependency on lksctp-tools

[1:12.0.0.33-2.ea.1.rolling]
- Drop chkconfig dep, 1.7 shipped in f24

[1:12.0.0.33-1.ea.1.rolling]
- bumped sources to jdk12+33

[1:12.0.0.30-1.ea.1.rolling]
- Only build 'bootcycle-images docs' target and 'images docs' targets, respectively.

[1:12.0.0.25-0.ea.1.rolling.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[1:12.0.0.25-0.ea.1.rolling]
- bumped sources to jdk12. Crypto list synced.
- adapted patches to usptream (removed are upstreamed)
- removed fixed upstreamed patch6, jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch:
- renamed patch5, pr1983-rh1565658-..._sunec_provider_jdk11.patch to pr1983-rh1565658-..._sunec_provider_jdk12.patch
- adapted patch5, pr1983-rh1565658 to jdk12 (libraries.m4 and /Lib-jdk.crypto.ec.gmk)
- removed patch8, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch
- removed patch9, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch
- removed patch10, jdk8210647-rh1632174. Is rummored to be in upstream
- removed patch11, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch
- removed patch12, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0
- removed patch584, jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch
- removed patch585, jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch
- set build jdk to jdk11; buildjdkver set to 11
- todo, revisit _privatelibs and slaves, discuse patch10, more?
- now building with --no-print-directory to workaround JDK8215213
- renamed original of docs zip to jdk-major+build
- check shenandaoh with -XX:+UnlockExperimentalVMOptions
- libjli moved from lib/libjli to lib
- added lib/jspawnhelper and bin/jfr and conf/sdp/sdp.conf.template
- added explanation to the --no-print-directory
- re-added lts_designator_zip macro
- added patch6 for rh1673833-remove_removal_of_wformat_during_test_compilation.patch

[1:11.0.1.13-10.rolling]
- for non debug supackages, ghosted all masters and slaves (rhbz1649776)
- for tech-preview packages, if-outed versionless provides. Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Removed all slowdebug provides (rhbz1655938); for tech-preview packages also removed all internal provides

[1:11.0.1.13-9]
- Added %global _find_debuginfo_opts -g
- Resolves: RHBZ#1520879 (Detailed NMT issue)

[1:11.0.1.13-8]
- added rolling suffix to release (before dist) to prevent conflict with java-11-openjdk which now have same major version

[1:11.0.1.13-6]
- fixed tck failures of arraycopy and process exec with shenandoah on
- added patch585 rh1648995-shenandoah_array_copy_broken_by_not_always_copy_forward_for_disjoint_arrays.patch

[1:11.0.1.13-5]
- headless' suggests of cups, replaced by Requires of cups-libs

[1:11.0.1.13-3]
- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch

[1:11.0.1.13-3]
- Use upstream's version of Aarch64 intrinsics disable patch:
- Removed:
RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
- Superceded by:
jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch

[1:11.0.1.13-2]
- Use LTS designator in version output for RHEL.

[1:11.0.1.13-1]
- Update to October 2018 CPU release, 11.0.1+13.

[1:11.0.0.28-2]
- Use --with-vendor-version-string=18.9 so as to show original
GA date for the JDK.

[1:11.0.0.28-1]
- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.

[1:11.0.ea.28-9]
- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
RHBZ-1624122.
- Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
optimize compilation of fdlibm library.
- Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
optimize compilation of libsaproc (extra c flags won't override
optimization).
- Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
optimize compilation of libjsig.
- Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.

[1:11.0.ea.28-8]
- removed version less provides
- javadocdir moved to arched dir as it is no longer noarch

[1:11.0.ea.28-6]
- Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
so as to disable log math intrinsic on aarch64. Work-around for
JDK-8210858

[1:11.0.ea.28-5]
- Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
JDK-8210461.

[1:11.0.ea.22-6]
- Add patch, JDK-8210416-RHBZ-1624122-fdlibm-opt-fix.patch, so as to
optimize compilation of fdlibm library.
- Add patch, JDK-8210425-RHBZ-1624122-sharedRuntimeTrig-opt-fix.patch, so
as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, JDK-8210647-RHBZ-1624122-libsaproc-opt-fix.patch, so as to
optimize compilation of libsaproc (extra c flags won't override
optimization).
- Add patch, JDK-8210703-RHBZ-1624122-vmStructs-opt-fix.patch, so as to
optimize compilation of vmStructs.cpp (part of libjvm.so).
- No longer filter -O flags from C flags coming from
redhat-rpm-config.

[1:11.0.ea.28-4]
- link to jhsdb followed its file to ifarch jit_arches ifnarch s390x

[1:11.0.ea.28-3]
- Enable ZGC on x86_64.

[1:11.0.ea.28-2]
- jfr/*jfc files listed for all arches
- lib/classlist do not exists s390, ifarch-ed via jit_arches out

[1:11.0.ea.28-1]
- Update to latest upstream build jdk11+28, the first release
candidate.

[1:11.0.ea.22-8]
- Adjust system NSS patch, pr1983-rh1565658-support_using_the_system_installation_of_nss_with_the_sunec_provider_jdk11.patch, so
as to filter -Wl,--as-needed from linker flags. Fixes FTBFS issue.

[1:11.0.ea.22-6]
- dissabled accessibility, fixed provides for main package's debug variant

[1:11.0.ea.22-5]
- now buildrequires javapackages-filesystem as the issue with macros should be fixed

[1:11.0.ea.22-2]
- changed to build by itself instead of by jdk10

[1:11.0.ea.22-1]
- added Recommends gtk3 for main package
- changed BuildRequires from gtk2-devel to gtk3-devel (it can be more likely dropped)
- added Suggests lksctp-tools, pcsc-lite-devel, cups for headless package
- see RHBZ1598152
- added trick to catch hs_err files (sgehwolf)
- updated to shenandaoh-jdk-11+22

[1:11.0.ea.20-1]
- removed patch6 JDK-8205616-systemLcmsAndJpgFixFor-rev_f0aeede1b855.patch
- improved a bit generate_source_tarball.sh to serve also for systemtap
- thus deleted generate_tapsets.sh
- simplified and cleared update_package.sh
- moved to single source jdk - from shenandoah/jdk11
- bumped to latest jdk11+20
- adapted PR2126 to jdk11+20
- adapted handling of systemtap sources to new style
- (no (misleading) version inside (full version is in name), thus different sed on tapsets and different directory)
- shortened summaries and descriptions to around 80 chars
- Hunspell spell checked
- license fixed to correct jdk11 (sgehwolf)
- more correct handling of internal libraries (sgehwolf)
- added lib/security/public_suffix_list.dat as +20 have added it (JDK-8201815)
- added test for shenandaoh GC presence where expected
- Removed workaround for broken aarch64 slowdebug build
- Removed all defattrs
- Removed no longer necessary cleanup of diz and debuginfo files

[1:11.0.ea.19-1]
- updated sources to jdk-11+19
- added patch6 systemLcmsAndJpgFixFor-f0aeede1b855.patch to fix regression of system libraries after f0aeede1b855 commit
- adapted pr1983-rh1565658-support_using_the_system_installation_of_nss_with_the_sunec_provider_jdk11.patch to accommodate changes after f0aeede1b855 commit

[1:11.0.ea.16-5]
- Revert rename: java-11-openjdk => java-openjdk.

[1:11.0.ea.16-4]
- Add aarch64 to aot_arches.

[1:11.0.ea.16-3]
- Rename to package java-11-openjdk.

[1:11.0.ea.16-2]
- Disable Aarch64 slowdebug build (see JDK-8204331).
- s390x doesn't have the SA even though it's a JIT arch.

[1:11.0.ea.16-1]
- Initial version of JDK 11 ea based on tag jdk-11+16.
- Removed patches no longer needed or upstream:
sorted-diff.patch (see JDK-8198844)
JDK-8201788-bootcycle-images-jobs.patch
JDK-8201509-s390-atomic_store.patch
JDK-8202262-libjsig.so-extra-link-flags.patch (never was an issue on 11)
JDK-8193802-npe-jar-getVersionMap.patch
- Updated and renamed patches:
java-openjdk-s390-size_t.patch => JDK-8203030-s390-size_t.patch
- Updated patches for JDK 11:
pr1983-rh1565658-support_using_the_system_installation_of_nss_with_the_sunec_provider_jdk11.patch

[1:10.0.1.10-9]
- Use proper private_libs expression for filtering requires/provides.

[1:10.0.1.10-8]
- Bump release and rebuild for fixed gdb. See RHBZ#1589118.

[1:10.0.1.10-7]
- quoted sed expressions, changed possibly confusing # by @
- added vendor(origin) into icons
- removed last trace of relative symlinks
- added BuildRequires of javapackages-tools to fix build failure after Requires change to javapackages-filesystem

[1:10.0.1.10-5]
- Move to javapackages-filesystem for directory ownership.
Resolves RHBZ#1500288

[1:10.0.1.10-4]
- Add JDK-8193802-npe-jar-getVersionMap.patch so as to fix
RHBZ#1557375.

[1:10.0.1.10-3]
- Inject build flags properly. See RHBZ#1571359
- Added patch JDK-8202262-libjsig.so-extra-link-flags.patch
since libjsig.so doesn't get linker flags injected properly.

[1:10.0.1.10-2]
- Removed unneeded patches:
PStack-808293.patch
multiple-pkcs11-library-init.patch
ppc_stack_overflow_fix.patch
- Added patches for s390 Zero builds:
JDK-8201495-s390-java-opts.patch
JDK-8201509-s390-atomic_store.patch
- Renamed patches for clarity:
aarch64BuildFailure.patch => JDK-8200556-aarch64-slowdebug-crash.patch
systemCryptoPolicyPR3183.patch => pr3183-rh1340845-support_fedora_rhel_system_crypto_policy.patch
bootcycle_jobs.patch => JDK-8201788-bootcycle-images-jobs.patch
system-nss-ec-rh1565658.patch => pr1983-rh1565658-support_using_the_system_installation_of_nss_with_the_sunec_provider_jdk11.patch

[1:10.0.1.10-1]
- updated to security update 1
- jexec unlinked from path
- used java-openjdk as boot jdk
- aligned provides/requires
- renamed zip javadoc

[1:10.0.0.46-12]
- Enable basic EC ciphers test in %check.

[1:10.0.0.46-11]
- Port Martin Balao's JDK 9 patch for system NSS support to JDK 10.
- Resolves RHBZ#1565658

[1:10.0.0.46-10]
- jexec linked to path

[1:10.0.0.46-9]
- subpackage(s) replaced by sub-package(s) and other cosmetic changes

[1:10.0.0.46-8]
- removed accessibility sub-packages
- kept applied patch and properties files
- debug sub-packages renamed to slowdebug

[1:10.0.0.46-1]
- initial load

Updated Packages

Release/Architecture

Filename

MD5sum

Superseded By Advisory

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team