Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package java-11-openjdk for openSUSE:Factory checked in at 2023-04-27 19:59:42 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/java-11-openjdk (Old) and /work/SRC/openSUSE:Factory/.java-11-openjdk.new.1533 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "java-11-openjdk" Thu Apr 27 19:59:42 2023 rev:62 rq:1083019 version:11.0.19.0 Changes: -------- --- /work/SRC/openSUSE:Factory/java-11-openjdk/java-11-openjdk.changes 2023-03-01 16:14:04.294605853 +0100 +++ /work/SRC/openSUSE:Factory/.java-11-openjdk.new.1533/java-11-openjdk.changes 2023-04-27 19:59:47.465522229 +0200 @@ -1,0 +2,402 @@ +Wed Apr 26 09:03:12 UTC 2023 - Fridrich Strba <fst...@suse.com> + +- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU) + * Security fixes: + + JDK-8287404: Improve ping times + + JDK-8288436: Improve Xalan supports + + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support + + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support + improvements + + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String + platform support + + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String + platform support + + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String + platform support + + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing + platform support + + JDK-8297371: Improve UTF8 representation redux + + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object + reclamation process + + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session + negotiation + + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path + handling + + JDK-8299129: Enhance NameService lookups + * Fixes: + + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion + + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/ + /Receiver/bug6186488.java fails + + JDK-8035787: SourcePositions are wrong for Strings + concatenated with '+' operator + + JDK-8065097: [macosx] javax/swing/Popup/ + /TaskbarPositionTest.java fails because Popup is one pixel off + + JDK-8065422: Trailing dot in hostname causes TLS handshake to + fail with SNI disabled + + JDK-8129315: java/net/Socket/LingerTest.java and + java/net/Socket/ShutdownBoth.java timeout intermittently + + JDK-8144030: [macosx] test java/awt/Frame/ + /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again) + + JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java + fails intermittently with Invalid Http response + + JDK-8171405: java/net/URLConnection/ResendPostBody.java + failed with "Error while cleaning up threads after test" + + JDK-8179317: [TESTBUG] rewrite runtime shell tests in java + + JDK-8247741: Test test/hotspot/jtreg/runtime/7162488/ + /TestUnrecognizedVmOption.java fails when + -XX:+IgnoreUnrecognizedVMOptions is set + + JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled + TLS protocols + + JDK-8192931: Regression test java/awt/font/TextLayout/ + /CombiningPerf.java fails + + JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java + failed w/ Xcomp + + JDK-8195716: BootstrapLoggerTest : Executor still alive + + JDK-8202621: bad test with broken links needs to be updated + + JDK-8207248: Reduce incidence of + compiler.warn.source.no.bootclasspath in javac tests + + JDK-8208077: File.listRoots performance degradation + + JDK-8209023: fix 2 compiler tests to avoid JDK-8208690 + + JDK-8209115: adjust libsplashscreen linux ppc64le builds for + easier libpng update + + JDK-8209774: Refactor shell test + javax/xml/jaxp/common/8035437/run.sh to java + + JDK-8209935: Test to cover CodeSource.getCodeSigners() + + JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and + "net" libraries in parallel. + + JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c + + JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID() + + JDK-8213130: Update ProblemList after verification of jtreg + tests in Win 7 + + JDK-8213265: fix missing newlines at end of files + + JDK-8213932: [TESTBUG] assertEquals is invoked with the + arguments in the wrong order + + JDK-8214445: [test] java/net/URL/HandlerLoop has illegal + reflective access + + JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java + not correct when using a glob + + JDK-8215759: [test] java/math/BigInteger/ModPow.java can + throw an ArithmeticException + + JDK-8217353: java/util/logging/LogManager/Configuration/ + /updateConfiguration/HandlersOnComplexResetUpdate.java fails + with Unexpected reference: java.lang.ref.WeakReference + + JDK-8217730: Split up MakeBase.gmk + + JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java + failed with "java.net.ConnectException" + + JDK-8218431: Improved platform checking in makefiles + + JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode + + JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java + fails + + JDK-8221351: Crash in + KlassFactory::check_shared_class_file_load_hook + + JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups + comments + + JDK-8222430: Add tests for ElementKind predicates + + JDK-8223463: Replace wildcard address with loopback or local + host in tests - part 2 + + JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java + should be more resilient to unexpected traffic + + JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/ + /TestDescription.java fails due to wrong number of + MonitorContendedEntered events + + JDK-8224024: java/util/concurrent/BlockingQueue/ + /DrainToFails.java testBounded fails intermittently + + JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/ + /TestDescription.java still fails due to wrong number of + MonitorContendedEntered events + + JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/ + /TestDescription.java fails on jvmti->InterruptThread + (JVMTI_ERROR_THREAD_NOT_ALIVE) + + JDK-8227422: sun/net/www/protocol/file/ + /DirPermissionDenied.java failed on Windows 2016 because + DirPermissionDenied directory has no read permission + + JDK-8230374: maxOutputSize, instead of + javatest.maxOutputSize, should be used in TEST.properties + + JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual + failed" + + JDK-8231595: [TEST] develop a test case for SuspendThreadList + including current thread + + JDK-8233462: serviceability/tmtools/jstat tests times out + with -Xcomp + + JDK-8235448: code cleanup in SSLContextImpl.java + + JDK-8238936: The crash in XRobotPeer when the custom + GraphicsDevice is used + + JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java + is unstable + + JDK-8244592: Start supporting SOURCE_DATE_EPOCH + + JDK-8245245: WebSocket can lose the URL encoding of URI query + parameters + + JDK-8298588: WebSockets: HandshakeUrlEncodingTest + unnecessarily depends on a response body + + JDK-8245654: Add Certigna Root CA + + JDK-8248306: gc/stress/gclocker/ + /TestExcessGCLockerCollections.java does not compile + + JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be + removed + + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH + + JDK-8252532: use Utils.TEST_NATIVE_PATH instead of + System.getProperty("test.nativepath") + + JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/ + /CtrlASCII.java on Linux + + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed + with "RuntimeException: Unexpected log output:" + + JDK-8255710: Opensource unit/regression tests for CMM + + JDK-8256110: Create implementation for NSAccessibilityStepper + protocol + + JDK-8256111: Create implementation for + NSAccessibilityStaticText protocol + + JDK-8256126: Create implementation for NSAccessibilityImage + protocol peer + + JDK-8256240: Reproducible builds should turn on the + "deterministic" flag for Visual Studio + + JDK-8281262: Windows builds in different directories are not + fully reproducible + + JDK-8256934: C2: assert(C->live_nodes() <= + C->max_node_limit()) failed: Live Node limit exceeded limit + + JDK-8257928: Test image build failure with clang-10 due to + -Wmisleading-indentation + + JDK-8258005: JDK build fails with incorrect fixpath script + + JDK-8259265: Refactor UncaughtExceptions shell test as java + test. + + JDK-8259267: Refactor LoaderLeak shell test as java test. + + JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/ + /Main.java fails with -Xcomp + + JDK-8260576: Typo in compiler/runtime/safepoints/ + /TestRegisterRestoring.java + + JDK-8261270: MakeMethodNotCompilableTest fails with + -XX:TieredStopAtLevel={1,2,3} + + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java + timed out + + JDK-8261350: Create implementation for + NSAccessibilityCheckBox protocol peer + + JDK-8261351: Create implementation for + NSAccessibilityRadioButton protocol + + JDK-8261352: Create implementation for component peer for all + the components who should be ignored in a11y interactions + + JDK-8262060: compiler/whitebox/BlockingCompilation.java timed + out + + JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java + fails intermittently + + JDK-8264299: Create implementation of native accessibility + peer for ScrollPane and ScrollBar Java Accessibility roles + + JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java + relies on default platform encoding + + JDK-8266974: duplicate property key in java.sql.rowset + resource bundle + + JDK-8267038: Update IANA Language Subtag Registry to Version + 2022-03-02 + + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java + does not show instruction + + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java + fails with -XX:TieredStopAtLevel=1 + + JDK-8271506: Add ResourceHashtable support for deleting + selected entries + + JDK-8272985: Reference discovery is confused about atomicity + and degree of parallelism + + JDK-8273497: building.md should link to both md and html + + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should ++++ 205 more lines (skipped) ++++ between /work/SRC/openSUSE:Factory/java-11-openjdk/java-11-openjdk.changes ++++ and /work/SRC/openSUSE:Factory/.java-11-openjdk.new.1533/java-11-openjdk.changes Old: ---- jdk-11.0.18+10.tar.gz New: ---- jdk-11.0.19+7.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ java-11-openjdk.spec ++++++ --- /var/tmp/diff_new_pack.2a1MpW/_old 2023-04-27 19:59:50.269538713 +0200 +++ /var/tmp/diff_new_pack.2a1MpW/_new 2023-04-27 19:59:50.277538760 +0200 @@ -37,8 +37,8 @@ # Standard JPackage naming and versioning defines. %global featurever 11 %global interimver 0 -%global updatever 18 -%global buildver 10 +%global updatever 19 +%global buildver 7 %global openjdk_repo jdk11u %global openjdk_tag jdk-%{featurever}.%{interimver}.%{updatever}%{?patchver:.%{patchver}}+%{buildver} %global openjdk_dir %{openjdk_repo}-jdk-%{featurever}.%{interimver}.%{updatever}%{?patchver:.%{patchver}}-%{buildver} ++++++ fips.patch ++++++ --- /var/tmp/diff_new_pack.2a1MpW/_old 2023-04-27 19:59:50.397539466 +0200 +++ /var/tmp/diff_new_pack.2a1MpW/_new 2023-04-27 19:59:50.401539489 +0200 @@ -927,40 +927,6 @@ } else { supportedProtocols = Arrays.asList( ProtocolVersion.TLS13, -@@ -620,6 +639,16 @@ - - static ProtocolVersion[] getSupportedProtocols() { - if (SunJSSE.isFIPS()) { -+ if (SharedSecrets.getJavaSecuritySystemConfiguratorAccess() -+ .isSystemFipsEnabled()) { -+ // RH1860986: TLSv1.3 key derivation not supported with -+ // the Security Providers available in system FIPS mode. -+ return new ProtocolVersion[] { -+ ProtocolVersion.TLS12, -+ ProtocolVersion.TLS11, -+ ProtocolVersion.TLS10 -+ }; -+ } - return new ProtocolVersion[] { - ProtocolVersion.TLS13, - ProtocolVersion.TLS12, -@@ -949,6 +978,16 @@ - - static ProtocolVersion[] getProtocols() { - if (SunJSSE.isFIPS()) { -+ if (SharedSecrets.getJavaSecuritySystemConfiguratorAccess() -+ .isSystemFipsEnabled()) { -+ // RH1860986: TLSv1.3 key derivation not supported with -+ // the Security Providers available in system FIPS mode. -+ return new ProtocolVersion[] { -+ ProtocolVersion.TLS12, -+ ProtocolVersion.TLS11, -+ ProtocolVersion.TLS10 -+ }; -+ } - return new ProtocolVersion[]{ - ProtocolVersion.TLS13, - ProtocolVersion.TLS12, --- jdk11u/src/java.base/share/classes/sun/security/ssl/SunJSSE.java 2022-10-19 09:05:18.352146661 +0200 +++ jdk11u/src/java.base/share/classes/sun/security/ssl/SunJSSE.java 2022-10-19 09:05:52.472419757 +0200 @@ -27,6 +27,8 @@ ++++++ jdk-11.0.18+10.tar.gz -> jdk-11.0.19+7.tar.gz ++++++ /work/SRC/openSUSE:Factory/java-11-openjdk/jdk-11.0.18+10.tar.gz /work/SRC/openSUSE:Factory/.java-11-openjdk.new.1533/jdk-11.0.19+7.tar.gz differ: char 13, line 1