Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package java-17-openjdk for openSUSE:Factory checked in at 2024-01-17 22:18:56 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/java-17-openjdk (Old) and /work/SRC/openSUSE:Factory/.java-17-openjdk.new.16006 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "java-17-openjdk" Wed Jan 17 22:18:56 2024 rev:29 rq:1139476 version:17.0.10.0 Changes: -------- --- /work/SRC/openSUSE:Factory/java-17-openjdk/java-17-openjdk.changes 2023-10-22 21:01:42.132946334 +0200 +++ /work/SRC/openSUSE:Factory/.java-17-openjdk.new.16006/java-17-openjdk.changes 2024-01-17 22:19:30.108259697 +0100 @@ -1,0 +2,541 @@ +Wed Jan 17 14:03:44 UTC 2024 - Fridrich Strba <fst...@suse.com> + +- Update to upstream tag jdk-17.0.10+7 (January 2024 CPU) + * CVEs + + CVE-2024-20918, bsc#1218907 + + CVE-2024-20919, bsc#1218903 + + CVE-2024-20921, bsc#1218905 + + CVE-2024-20932, bsc#1218908 + + CVE-2024-20945, bsc#1218909 + + CVE-2024-20952, bsc#1218911 + * Security fixes + + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a + file entry when there is a directory entry of the same name + within a Zip File + + JDK-8308204: Enhanced certificate processing + + JDK-8314295: Enhance verification of verifier + + JDK-8314307: Improve loop handling + + JDK-8314468: Improve Compiler loops + + JDK-8316976: Improve signature handling + + JDK-8317547: Enhance TLS connection support + * Other changes + + JDK-6445283: ProgressMonitorInputStream not large file aware + (>2GB) + + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java + fails with java.lang.RuntimeException: Test failed, scroll on + drag doesn't work + + JDK-8061729: Update java/net tests to eliminate dependency on + sun.net.www.MessageHeader and some other internal APIs + + JDK-8161536: sun/security/pkcs11/sslecc/ + /ClientJSSEServerJSSE.java fails with ProviderException + + JDK-8168469: Memory leak in JceSecurity + + JDK-8176567: nsk/jdi/ReferenceType/instances/instances002: + TestFailure: Unexpected size of referenceType + .instances(nsk.share.jdi.TestInterfaceImplementer1): 11, + expected: 10 + + JDK-8193543: Regression automated test '/open/test/jdk/java/ + /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java' + fails + + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/ + /isexceeded001/TestDescription.java still failing + + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not + clean up + + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/ + /ChoicePopupLocation.java fails + + JDK-8207166: jdk/jshell/ + /JdiHangingLaunchExecutionControlTest.java - launch timeout + + JDK-8225313: serviceability/jvmti/HeapMonitor/MyPackage/ + /HeapMonitorStatObjectCorrectnessTest.java failed with + Unexpected high difference percentage + + JDK-8228990: JFR: TestNetworkUtilizationEvent.java expects 2+ + Network interfaces on Linux but finding 1 + + JDK-8232839: JDI AfterThreadDeathTest.java failed due to + "FAILED: Did not get expected IllegalThreadStateException on a + StepRequest.enable()" + + JDK-8232933: Javac inferred type does not conform to equality + constraint + + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/ + /AccessibleChoiceTest.java fails + + JDK-8244289: fatal error: Possible safepoint reached by + thread that does not allow it + + JDK-8247351: [aarch64] NullPointerException during stack + walking (clhsdb "where -a") + + JDK-8249826: 5 javax/net/ssl/SSLEngine tests use @ignore w/o + bug-id + + JDK-8258951: java/net/httpclient/HandshakeFailureTest.java + failed with "RuntimeException: Not found expected + SSLHandshakeException in java.io.IOException" + + JDK-8262186: Call X509KeyManager.chooseClientAlias once for + all key types + + JDK-8262901: [macos_aarch64] NativeCallTest + expected:<-3.8194101E18> but was:<3.02668882E10> + + JDK-8265586: [windows] last button is not shown in AWT Frame + with BorderLayout and MenuBar set. + + JDK-8266593: vmTestbase/nsk/jvmti/PopFrame/popframe011 fails + with "assert(java_thread == _state->get_thread()) failed: Must be" + + JDK-8268433: serviceability/dcmd/framework/VMVersionTest.java + fails with Unable to send object throw not established PipeIO + Listener Thread connection + + JDK-8268916: Tests for AffirmTrust roots + + JDK-8269425: 2 jdk/jfr/api/consumer/streaming tests failed to + attach + + JDK-8270199: Most SA tests are skipped on macosx-aarch64 + because all executables are signed + + JDK-8270447: [IR Framework] Add missing compilation level + restriction when using FlipC1C2 stress option + + JDK-8271073: Improve testing with VM option + VerifyArchivedFields + + JDK-8271566: DSA signature length value is not accurate in + P11Signature + + JDK-8271824: mark hotspot runtime/CompressedOops tests which + ignore external VM flags + + JDK-8271826: mark hotspot runtime/condy tests which ignore + external VM flags + + JDK-8271828: mark hotspot runtime/classFileParserBug tests + which ignore external VM flags + + JDK-8271829: mark hotspot runtime/Throwable tests which + ignore external VM flags + + JDK-8271886: mark hotspot runtime/InvocationTests tests which + ignore external VM flags + + JDK-8271887: mark hotspot runtime/CDSCompressedKPtrs tests + which ignore external VM flags + + JDK-8271890: mark hotspot runtime/Dictionary tests which + ignore external VM flags + + JDK-8271891: mark hotspot runtime/Safepoint tests which + ignore external VM flags + + JDK-8271892: mark hotspot runtime/PrintStringTableStats/ + /PrintStringTableStatsTest.java test as ignoring external VM + flags + + JDK-8271893: mark hotspot runtime/PerfMemDestroy/ + /PerfMemDestroy.java test as ignoring external VM flags + + JDK-8271904: mark hotspot runtime/ClassFile tests which + ignore external VM flags + + JDK-8271905: mark hotspot runtime/Metaspace tests which + ignore external VM flags + + JDK-8272099: mark hotspot runtime/Monitor tests which ignore + external VM flags + + JDK-8272291: mark hotspot runtime/logging tests which ignore + external VM flags + + JDK-8272551: mark hotspot runtime/modules tests which ignore + external VM flags + + JDK-8272552: mark hotspot runtime/cds tests which ignore + external VM flags + + JDK-8272998: ImageIO.read() throws incorrect exception type + + JDK-8273456: Do not hold ttyLock around stack walking + + JDK-8273522: Rename test property vm.cds.archived.java.heap + to vm.cds.write.archived.java.heap + + JDK-8273629: compiler/uncommontrap/TestDeoptOOM.java fails + with release VMs + + JDK-8273831: PrintServiceLookup spawns 2 threads in the + current classloader, getting orphaned + + JDK-8273921: Refactor NSK/JDI tests to create thread using + factory + + JDK-8274211: Test man page that options are documented + + JDK-8274345: make build-test-lib is broken + + JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/ + /soft004.java fails with assert(_phases->length() <= 1000) + failed: Too many recored phases? + + JDK-8275333: Print count in "Too many recored phases?" assert + + JDK-8275440: Remove VirtualSpaceList::is_full() + + JDK-8275509: ModuleDescriptor.hashCode isn't reproducible + across builds + + JDK-8276036: The value of full_count in the message of + insufficient codecache is wrong + + JDK-8276054: JMH benchmarks for Fences + + JDK-8276711: compiler/codecache/cli tests failing when + SegmentedCodeCache used with -Xint + + JDK-8276819: javax/print/PrintServiceLookup/ + /FlushCustomClassLoader.java fails to free + + JDK-8277307: Pre shared key sent under both session_ticket + and pre_shared_key extensions + + JDK-8279856: Parallel: Use PreservedMarks to record + promotion-failed objects + + JDK-8281015: Further simplify NMT backend + + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java fails + with java.lang.RuntimeException: values differ by more than + 1GB + + JDK-8281874: Can't unpack msi installers from test/jdk/tools/ + /jpackage/windows/test/jdk/tools/jpackage/windows/ + /WinShortcutPromptTest.java test + + JDK-8282011: test/jdk/tools/jpackage/windows/WinL10nTest.java + test fails if light.exe is not in %PATH% + + JDK-8282017: sun/net/www/protocol/https/HttpsURLConnection/ + /B6216082.java fails with "SocketException: Unexpected end of + file from server" + + JDK-8283670: gtest os.release_multi_mappings_vm is still racy + + JDK-8284047: Harmonize/Standardize the + SSLSocket/SSLEngine/SSLSocketSSLEngine test templates + + JDK-8285516: clearPassword should be called in a finally try + block + + JDK-8285785: CheckCleanerBound test fails with + PasswordCallback object is not released + + JDK-8285867: Convert applet manual tests + SelectionVisible.java to Frame and automate + + JDK-8286430: make test TEST="gtest:<sometag>" exits with + error when it shouldn't + + JDK-8286473: Drop --enable-preview from Record related tests + + JDK-8286474: Drop --enable-preview from Sealed Classes + related tests + + JDK-8286475: Drop --enable-preview from instanceof pattern + matching related tests + + JDK-8286969: Add a new test library API to execute kinit in + SecurityTools.java + + JDK-8287596: Reorg jdk.test.lib.util.ForceGC + + JDK-8287671: Adjust ForceGC to invoke System::gc fewer times + for negative case + + JDK-8287867: Bad merge of jdk/test/lib/util/ForceGC.java + causing test compilation error + + JDK-8288325: [windows] Actual and Preferred Size of AWT + Non-resizable frame are different + + JDK-8288961: jpackage: test MSI installation fix + + JDK-8288993: Make AwtFramePackTest generic by removing + @requires tag + + JDK-8289584: (fs) Print size values in java/nio/file/ + /FileStore/Basic.java when they differ by > 1GiB + + JDK-8289745: JfrStructCopyFailed uses heap words instead of + bytes for object sizes + + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests + failed with "isUsageThresholdExceeded() returned false, and is + still false, while threshold = MMMMMMM and used + peak = NNNNNNN" + + JDK-8291154: Create a non static nested class without + enclosing class throws VerifyError + + JDK-8291550: RISC-V: jdk uses misaligned memory access when + AvoidUnalignedAccess enabled + + JDK-8291911: java/io/File/GetXSpace.java fails with + "53687091200 != 161051996160" + + JDK-8292067: Convert test/sun/management/jmxremote/bootstrap + shell tests to java version + + JDK-8292072: NMT: repurpose Tracking overhead counter as + global malloc counter + + JDK-8292261: adjust timeouts in JLI + GetObjectSizeIntrinsicsTest.java + + JDK-8292381: java/net/httpclient/SpecialHeadersTest.java + fails with "ERROR: Shutting down connection: HTTP/2 client + stopped" + + JDK-8292636: (dc) Problem listing of java/nio/channels/ + /DatagramChannel/Unref.java has incorrect issue ID + + JDK-8292717: Clean up checking of testing requirements in + configure + + JDK-8293156: Dcmd VM.classloaders fails to print the full + hierarchy + + JDK-8293335: sun/management/jmxremote/bootstrap/ + /RmiBootstrapTest.java#id1failed with "Agent communication + error: java.io.EOFException" + + JDK-8293343: sun/management/jmxremote/bootstrap/ + /RmiSslNoKeyStoreTest.java failed with "Agent communication + error: java.io.EOFException" + + JDK-8293563: [macos-aarch64] SA core file tests failing with + sun.jvm.hotspot.oops.UnknownOopException + + JDK-8293579: tools/jpackage/share/jdk/jpackage/tests/ + /UnicodeArgsTest.java fails on Japanese Windows platform + + JDK-8294402: Add diagnostic logging to + VMProps.checkDockerSupport + + JDK-8294427: Check boxes and radio buttons have rendering + issues on Windows in High DPI env + + JDK-8294881: test/hotspot/jtreg/vmTestbase/nsk/jdi( + /VirtualMachine/dispose/dispose003/TestDescription.java fails + + JDK-8295229: Try to verify gtest version + + JDK-8295424: adjust timeout for another JLI + GetObjectSizeIntrinsicsTest.java subtest + + JDK-8296275: Write a test to verify setAccelerator method of + JMenuItem + + JDK-8296437: NMT incurs costs if disabled + + JDK-8296821: compiler/jvmci/jdk.vm.ci.code.test/src/jdk/vm/ci/ + /code/test/NativeCallTest.java fails after JDK-8262901 + + JDK-8297142: jdk/jfr/event/runtime/TestShutdown.java fails on + Linux ppc64le and Linux aarch64 + + JDK-8297296: java/awt/Mouse/EnterExitEvents/ + /DragWindowTest.java fails with "No MouseReleased event on + label!" + + JDK-8297367: disable TestRedirectLinks.java in slowdebug mode + + JDK-8297640: Increase buffer size for buf + (insert_features_names) in + Abstract_VM_Version::insert_features_names + + JDK-8297798: Timeout with DTLSOverDatagram test template + + JDK-8297958: NMT: Display peak values + + JDK-8298298: NMT: count deltas are printed with 32-bit signed + size + + JDK-8298619: java/io/File/GetXSpace.java is failing + + JDK-8298735: Some tools/jpackage/windows/* tests fails with + jtreg test timeout + + JDK-8298867: Basics.java fails with SSL handshake exception + + JDK-8298868: Update EngineCloseOnAlert.java for changes to + TLS implementation + + JDK-8298869: Update ConnectionTest.java for changes to TLS + implementation + + JDK-8298872: Update CheckStatus.java for changes to TLS + implementation + + JDK-8298873: Update IllegalRecordVersion.java for changes to + TLS implementation + + JDK-8298874: Update TestAllSuites.java for TLS v1.2 and 1.3 + + JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/ + /PrintARGBImage.java" fails because the frames of instruction + does not display + + JDK-8299075: TestStringDeduplicationInterned.java fails + because extra deduplication + + JDK-8299207: [Testbug] Add back test/jdk/java/awt/Graphics2D/ + /DrawPrimitivesTest.java + + JDK-8299241: jdk/jfr/api/consumer/streaming/TestJVMCrash.java + generates unnecessary core file + + JDK-8299255: Unexpected round errors in FreetypeFontScaler + + JDK-8299677: Formatter.format might take a long time to + format an integer or floating-point + + JDK-8299748: java/util/zip/Deinflate.java failing on s390x + + JDK-8300259: Add test coverage for processing of pending + block files in signed JARs + + JDK-8300272: Improve readability of the test + JarWithOneNonDisabledDigestAlg + + JDK-8300727: java/awt/List/ListGarbageCollectionTest/ + /AwtListGarbageCollectionTest.java failed with "List wasn't + garbage collected" + + JDK-8300997: Add curl support to createJMHBundle.sh + + JDK-8301065: Handle control characters in + java_lang_String::print + + JDK-8301189: validate-source fails after JDK-8298873 + + JDK-8301247: JPackage app-image exe launches multiple exe's + in JDK 17+ ++++ 244 more lines (skipped) ++++ between /work/SRC/openSUSE:Factory/java-17-openjdk/java-17-openjdk.changes ++++ and /work/SRC/openSUSE:Factory/.java-17-openjdk.new.16006/java-17-openjdk.changes Old: ---- jdk-17.0.9+9.tar.gz New: ---- jdk-17.0.10+7.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ java-17-openjdk.spec ++++++ --- /var/tmp/diff_new_pack.zBB6z7/_old 2024-01-17 22:19:32.844360234 +0100 +++ /var/tmp/diff_new_pack.zBB6z7/_new 2024-01-17 22:19:32.844360234 +0100 @@ -1,7 +1,7 @@ # # spec file # -# Copyright (c) 2023 SUSE LLC +# Copyright (c) 2024 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -33,8 +33,8 @@ # Standard JPackage naming and versioning defines. %global featurever 17 %global interimver 0 -%global updatever 9 -%global buildver 9 +%global updatever 10 +%global buildver 7 %global openjdk_repo jdk17u %global openjdk_tag jdk-%{featurever}.%{interimver}.%{updatever}%{?patchver:.%{patchver}}+%{buildver} %global openjdk_dir %{openjdk_repo}-jdk-%{featurever}.%{interimver}.%{updatever}%{?patchver:.%{patchver}}-%{buildver} @@ -491,6 +491,7 @@ %if %{is_release} --with-version-pre="" \ %endif + --with-version-build="%{buildver}" \ --with-version-opt="suse-%{release}-%{_arch}" \ %if %{with zero} --with-jvm-variants=zero \ ++++++ fips.patch ++++++ --- /var/tmp/diff_new_pack.zBB6z7/_old 2024-01-17 22:19:32.948364055 +0100 +++ /var/tmp/diff_new_pack.zBB6z7/_new 2024-01-17 22:19:32.952364203 +0100 @@ -2408,29 +2408,32 @@ private static final long serialVersionUID = -2575874101938349339L; private static final String PUBLIC = "public"; -@@ -140,8 +145,7 @@ abstract class P11Key implements Key, Length { +@@ -139,9 +144,7 @@ abstract class P11Key implements Key, Length { + this.tokenObject = tokenObject; this.sensitive = sensitive; this.extractable = extractable; - char[] tokenLabel = this.token.tokenInfo.label; +- char[] tokenLabel = this.token.tokenInfo.label; - isNSS = (tokenLabel[0] == 'N' && tokenLabel[1] == 'S' - && tokenLabel[2] == 'S'); + isNSS = P11Util.isNSS(this.token); boolean extractKeyInfo = (!DISABLE_NATIVE_KEYS_EXTRACTION && isNSS && extractable && !tokenObject); this.keyIDHolder = new NativeKeyHolder(this, keyID, session, -@@ -383,7 +387,9 @@ abstract class P11Key implements Key, Length { - new CK_ATTRIBUTE(CKA_SENSITIVE), - new CK_ATTRIBUTE(CKA_EXTRACTABLE), +@@ -395,8 +398,10 @@ abstract class P11Key implements Key, Length { + new CK_ATTRIBUTE(CKA_EXTRACTABLE), }); -- if (attributes[1].getBoolean() || (attributes[2].getBoolean() == false)) { + +- boolean keySensitive = (attrs[0].getBoolean() || +- attrs[1].getBoolean() || !attrs[2].getBoolean()); + boolean exportable = plainKeySupportEnabled && !algorithm.equals("DH"); -+ if (!exportable && (attributes[1].getBoolean() || -+ (attributes[2].getBoolean() == false))) { - return new P11PrivateKey - (session, keyID, algorithm, keyLength, attributes); - } else { -@@ -465,7 +471,8 @@ abstract class P11Key implements Key, Length { - } ++ boolean keySensitive = (!exportable && ++ (attrs[0].getBoolean() || ++ attrs[1].getBoolean() || !attrs[2].getBoolean())); + + switch (algorithm) { + case "RSA": +@@ -451,7 +456,8 @@ abstract class P11Key implements Key, Length { + public String getFormat() { token.ensureValid(); - if (sensitive || !extractable || (isNSS && tokenObject)) { ++++++ jdk-17.0.9+9.tar.gz -> jdk-17.0.10+7.tar.gz ++++++ /work/SRC/openSUSE:Factory/java-17-openjdk/jdk-17.0.9+9.tar.gz /work/SRC/openSUSE:Factory/.java-17-openjdk.new.16006/jdk-17.0.10+7.tar.gz differ: char 12, line 1