Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package java-17-openj9 for openSUSE:Factory checked in at 2025-05-12 16:47:17 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/java-17-openj9 (Old) and /work/SRC/openSUSE:Factory/.java-17-openj9.new.30101 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "java-17-openj9" Mon May 12 16:47:17 2025 rev:19 rq:1276324 version:17.0.15.0 Changes: -------- --- /work/SRC/openSUSE:Factory/java-17-openj9/java-17-openj9.changes 2025-02-18 21:03:19.570748779 +0100 +++ /work/SRC/openSUSE:Factory/.java-17-openj9.new.30101/java-17-openj9.changes 2025-05-12 16:50:28.192672412 +0200 @@ -1,0 +2,25 @@ +Fri May 9 19:57:18 UTC 2025 - Fridrich Strba <fst...@suse.com> + +- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine +- Including Oracle April 2025 CPU changes + * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275), + CVE-2025-30698 (bsc#1241276) + * OpenJ9 changes, see + https://www.eclipse.org/openj9/docs/version0.51/ +- Removed patch: + * openj9-nasm-noexecstack.patch + + chosing a better upstream solution +- Added patch: + * openj9-noexecstack.patch + + better upstream solution to the previous fix +- Modified patch: + * openssl-OSSL_LIB_CTX.patch + + rediff + +------------------------------------------------------------------- +Wed May 7 06:41:05 UTC 2025 - Simon Lees <sfl...@suse.de> + +- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes + minimum version warnings + +------------------------------------------------------------------- Old: ---- 3c3d179854a524d7f95225999169ee09fda46033.zip cbbc8b94a625528b517fc01a8050d5f14c893962.zip e49875871c2862e0d132e3695d55273bfbac08b6.zip openj9-nasm-noexecstack.patch New: ---- 31cf5538b0a4875a2310e917a80bb16c81065d3c.zip 9bcff94a2a0f12baeac8f5d098b597e8ea076b67.zip d3deabff95c27dabda38118aba9041eb2406bda7.zip openj9-noexecstack.patch BETA DEBUG BEGIN: Old:- Removed patch: * openj9-nasm-noexecstack.patch + chosing a better upstream solution BETA DEBUG END: BETA DEBUG BEGIN: New:- Added patch: * openj9-noexecstack.patch + better upstream solution to the previous fix BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ java-17-openj9.spec ++++++ --- /var/tmp/diff_new_pack.Y8Y0UJ/_old 2025-05-12 16:50:31.816824900 +0200 +++ /var/tmp/diff_new_pack.Y8Y0UJ/_new 2025-05-12 16:50:31.844826079 +0200 @@ -31,18 +31,18 @@ # Standard JPackage naming and versioning defines. %global featurever 17 %global interimver 0 -%global updatever 14 -%global buildver 7 +%global updatever 15 +%global buildver 6 %global root_repository https://github.com/ibmruntimes/openj9-openjdk-jdk17/archive -%global root_revision cbbc8b94a625528b517fc01a8050d5f14c893962 -%global root_branch v0.49.0-release +%global root_revision d3deabff95c27dabda38118aba9041eb2406bda7 +%global root_branch v0.51.0-release %global omr_repository https://github.com/eclipse/openj9-omr/archive -%global omr_revision e49875871c2862e0d132e3695d55273bfbac08b6 -%global omr_branch v0.49.0-release +%global omr_revision 9bcff94a2a0f12baeac8f5d098b597e8ea076b67 +%global omr_branch v0.51.0-release %global openj9_repository https://github.com/eclipse/openj9/archive -%global openj9_revision 3c3d179854a524d7f95225999169ee09fda46033 -%global openj9_branch v0.49.0-release -%global openj9_tag openj9-0.49.0 +%global openj9_revision 31cf5538b0a4875a2310e917a80bb16c81065d3c +%global openj9_branch v0.51.0-release +%global openj9_tag openj9-0.51.0 # priority must be 6 digits in total %if 0%{?suse_version} > 1500 || 0%{?java_bootstrap} %global priority 2701 @@ -113,7 +113,7 @@ # Fix build with older version of openssl Patch6: openssl-OSSL_LIB_CTX.patch Patch7: openj9-openssl.patch -Patch8: openj9-nasm-noexecstack.patch +Patch8: openj9-noexecstack.patch # Fix: implicit-pointer-decl Patch13: implicit-pointer-decl.patch # @@ -366,7 +366,7 @@ %patch -P 5 -p1 %patch -P 6 -p1 %patch -P 7 -p1 -%patch -P 8 +%patch -P 8 -p1 %patch -P 13 -p1 %if %{with_system_pcsc} @@ -399,6 +399,9 @@ done %build +# Remove cmake4 error due to not setting +# min cmake version - sflees.de +export CMAKE_POLICY_VERSION_MINIMUM=3.5 export ARCH_DATA_MODEL=64 EXTRA_CFLAGS="-Wno-error -Wno-maybe-uninitialized -fno-delete-null-pointer-checks -fno-lifetime-dse" @@ -855,6 +858,7 @@ %{_jvmdir}/%{sdkdir}/lib/options.default %{_jvmdir}/%{sdkdir}/lib/psfontj2d.properties %{_jvmdir}/%{sdkdir}/lib/psfont.properties.ja +%{_jvmdir}/%{sdkdir}/lib/schema.xsd %{_jvmdir}/%{sdkdir}/lib/tzdb.dat %{_jvmdir}/%{sdkdir}/lib/*/libjsig.so %{_jvmdir}/%{sdkdir}/lib/*/libjvm.so ++++++ 3c3d179854a524d7f95225999169ee09fda46033.zip -> 31cf5538b0a4875a2310e917a80bb16c81065d3c.zip ++++++ /work/SRC/openSUSE:Factory/java-17-openj9/3c3d179854a524d7f95225999169ee09fda46033.zip /work/SRC/openSUSE:Factory/.java-17-openj9.new.30101/31cf5538b0a4875a2310e917a80bb16c81065d3c.zip differ: char 11, line 2 ++++++ 3c3d179854a524d7f95225999169ee09fda46033.zip -> 9bcff94a2a0f12baeac8f5d098b597e8ea076b67.zip ++++++ /work/SRC/openSUSE:Factory/java-17-openj9/3c3d179854a524d7f95225999169ee09fda46033.zip /work/SRC/openSUSE:Factory/.java-17-openj9.new.30101/9bcff94a2a0f12baeac8f5d098b597e8ea076b67.zip differ: char 11, line 2 ++++++ 3c3d179854a524d7f95225999169ee09fda46033.zip -> d3deabff95c27dabda38118aba9041eb2406bda7.zip ++++++ /work/SRC/openSUSE:Factory/java-17-openj9/3c3d179854a524d7f95225999169ee09fda46033.zip /work/SRC/openSUSE:Factory/.java-17-openj9.new.30101/d3deabff95c27dabda38118aba9041eb2406bda7.zip differ: char 11, line 2 ++++++ openj9-nasm-noexecstack.patch -> openj9-noexecstack.patch ++++++ --- /work/SRC/openSUSE:Factory/java-17-openj9/openj9-nasm-noexecstack.patch 2025-02-18 21:03:19.702754290 +0100 +++ /work/SRC/openSUSE:Factory/.java-17-openj9.new.30101/openj9-noexecstack.patch 2025-05-12 16:50:28.248674761 +0200 @@ -1,11 +1,25 @@ ---- openj9/runtime/compiler/CMakeLists.txt -+++ openj9/runtime/compiler/CMakeLists.txt -@@ -391,7 +391,7 @@ set_source_files_properties( +--- a/omr/cmake/modules/platform/toolcfg/gnu.cmake ++++ b/omr/cmake/modules/platform/toolcfg/gnu.cmake +@@ -69,6 +69,11 @@ if(OMR_ARCH_X86) + endif() + endif() + ++if(OMR_OS_LINUX) ++ list(APPEND OMR_PLATFORM_EXE_LINKER_OPTIONS "-Wl,-z,noexecstack") ++ list(APPEND OMR_PLATFORM_SHARED_LINKER_OPTIONS "-Wl,-z,noexecstack") ++endif() ++ + if(OMR_HOST_ARCH STREQUAL "s390") + list(APPEND OMR_PLATFORM_COMPILE_OPTIONS -march=z9-109) + endif() +--- a/openj9/runtime/compiler/CMakeLists.txt ++++ b/openj9/runtime/compiler/CMakeLists.txt +@@ -403,7 +403,7 @@ set_source_files_properties( if(OMR_OS_LINUX) set_property(TARGET j9jit APPEND_STRING PROPERTY -- LINK_FLAGS " -Wl,--version-script=${CMAKE_CURRENT_SOURCE_DIR}/build/scripts/j9jit.linux.exp") -+ LINK_FLAGS " -Wl,-z,noexecstack -Wl,--version-script=${CMAKE_CURRENT_SOURCE_DIR}/build/scripts/j9jit.linux.exp") +- LINK_FLAGS " -Wl,-z,noexecstack -Wl,--version-script=${CMAKE_CURRENT_SOURCE_DIR}/build/scripts/j9jit.linux.exp") ++ LINK_FLAGS " -Wl,--version-script=${CMAKE_CURRENT_SOURCE_DIR}/build/scripts/j9jit.linux.exp") target_link_libraries(j9jit PRIVATE m) elseif(OMR_OS_WINDOWS) target_sources(j9jit PRIVATE build/scripts/j9jit.def) ++++++ openssl-OSSL_LIB_CTX.patch ++++++ --- /var/tmp/diff_new_pack.Y8Y0UJ/_old 2025-05-12 16:50:33.816909139 +0200 +++ /var/tmp/diff_new_pack.Y8Y0UJ/_new 2025-05-12 16:50:33.872911497 +0200 @@ -2,7 +2,7 @@ index 2e53d0a8e1e..1226f96f1f8 100644 --- a/closed/src/java.base/share/native/libjncrypto/NativeCrypto.c +++ b/closed/src/java.base/share/native/libjncrypto/NativeCrypto.c -@@ -64,6 +64,10 @@ +@@ -77,6 +77,10 @@ # include <pthread.h> #endif /* defined(WINDOWS) */ @@ -10,7 +10,7 @@ +typedef struct ossl_lib_ctx_st OSSL_LIB_CTX; +#endif + - /* Header for RSA algorithm using 1.0.2 OpenSSL. */ - int OSSL102_RSA_set0_key(RSA *, BIGNUM *, BIGNUM *, BIGNUM *); - int OSSL102_RSA_set0_factors(RSA *, BIGNUM *, BIGNUM *); + /* Header for NativeCrypto loading methods. */ + static void * find_crypto_symbol(void *handle, const char *symname); + static void * find_crypto_library(jboolean traceEnabled, const char *chomepath);
