Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package java-1_8_0-openjdk for openSUSE:Factory checked in at 2024-02-06 16:35:48 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/java-1_8_0-openjdk (Old) and /work/SRC/openSUSE:Factory/.java-1_8_0-openjdk.new.1815 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "java-1_8_0-openjdk" Tue Feb 6 16:35:48 2024 rev:97 rq:1144558 version:1.8.0.402 Changes: -------- --- /work/SRC/openSUSE:Factory/java-1_8_0-openjdk/java-1_8_0-openjdk.changes 2023-11-14 21:42:37.199703586 +0100 +++ /work/SRC/openSUSE:Factory/.java-1_8_0-openjdk.new.1815/java-1_8_0-openjdk.changes 2024-02-06 16:36:31.871351841 +0100 @@ -1,0 +2,64 @@ +Tue Feb 6 12:10:43 UTC 2024 - Fridrich Strba <fst...@suse.com> + +- Update to version jdk8u402 (icedtea-3.30.0) + * Security fixes + + JDK-8308204: Enhanced certificate processing + + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn + performance + + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance + verification of verifier + + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop + handling + + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler + loops + + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature + handling + + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS + connection support + * Import of OpenJDK 8 u402 build 06 + + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion + + JDK-8029995: accept yes/no for boolean krb5.conf settings + + JDK-8159156: [TESTBUG] ReserveMemory test is not useful on + Aix. + + JDK-8176509: Use pandoc for converting build readme to html + + JDK-8206179: com/sun/management/OperatingSystemMXBean/ + /GetCommittedVirtualMemorySize.java fails with Committed + virtual memory size illegal value + + JDK-8207404: MulticastSocket tests failing on AIX + + JDK-8212677: X11 default visual support for IM status window + on VNC + + JDK-8239365: ProcessBuilder test modifications for AIX + execution + + JDK-8271838: AmazonCA.java interop test fails + + JDK-8285398: Cache the results of constraint checks + + JDK-8285696: AlgorithmConstraints:permits not throwing + IllegalArgumentException when 'alg' is null + + JDK-8302017: Allocate BadPaddingException only if it will be + thrown + + JDK-8305329: [8u] Unify test libraries into single test + library - step 1 + + JDK-8307837: [8u] Check step in GHA should also print errors + + JDK-8309088: security/infra/java/security/cert/ + /CertPathValidator/certification/AmazonCA.java fails + + JDK-8311813: C1: Uninitialized PhiResolver::_loop field + + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default + which is too low for JARs such as WhiteSource/Mend unified agent jar + + JDK-8312535: MidiSystem.getSoundbank() throws unexpected + SecurityException + + JDK-8315280: Bump update version of OpenJDK: 8u402 + + JDK-8315506: C99 compatibility issue in LinuxNativeDispatcher + + JDK-8317291: Missing null check for + nmethod::is_native_method() + + JDK-8317373: Add Telia Root CA v2 + + JDK-8317374: Add Let's Encrypt ISRG Root X2 + + JDK-8318759: Add four DigiCert root certificates + + JDK-8319187: Add three eMudhra emSign roots + + JDK-8319405: [s390] [jdk8] Increase javac default stack size + for s390x zero + + JDK-8320597: RSA signature verification fails on signed data + that does not encode params correctly + * Bug fixes + + JDK-8324184: Windows VS2010 build failed with "error C2275: + 'int64_t'" + +------------------------------------------------------------------- Old: ---- icedtea-3.29.0.tar.xz New: ---- icedtea-3.30.0.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ java-1_8_0-openjdk.spec ++++++ --- /var/tmp/diff_new_pack.tfzGzc/_old 2024-02-06 16:36:35.167471081 +0100 +++ /var/tmp/diff_new_pack.tfzGzc/_new 2024-02-06 16:36:35.167471081 +0100 @@ -1,7 +1,7 @@ # # spec file for package java-1_8_0-openjdk # -# Copyright (c) 2023 SUSE LLC +# Copyright (c) 2024 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,7 +18,7 @@ %{!?aarch64:%global aarch64 aarch64 arm64 armv8} %global jit_arches %{ix86} x86_64 ppc64 ppc64le %{aarch64} %{arm} -%global icedtea_version 3.29.0 +%global icedtea_version 3.30.0 %global buildoutputdir openjdk.build/ # Convert an absolute path to a relative path. Each symbolic link is # specified relative to the directory in which it is installed so that @@ -31,7 +31,7 @@ # priority must be 6 digits in total %global priority 1805 %global javaver 1.8.0 -%global updatever 392 +%global updatever 402 %global buildver 08 # Standard JPackage directories and symbolic links. %global sdklnk java-%{javaver}-openjdk @@ -309,7 +309,7 @@ # Post requires update-alternatives to install tool update-alternatives. Requires(post): update-alternatives # Postun requires update-alternatives to uninstall tool update-alternatives. -Requires(postun):update-alternatives +Requires(postun): update-alternatives Recommends: tzdata-java8 # Standard JPackage base provides. Provides: java-%{javaver}-headless = %{version}-%{release} @@ -342,7 +342,7 @@ # Post requires update-alternatives to install tool update-alternatives. Requires(post): update-alternatives # Postun requires update-alternatives to uninstall tool update-alternatives. -Requires(postun):update-alternatives +Requires(postun): update-alternatives # Standard JPackage devel provides. Provides: java-%{javaver}-devel = %{version} Provides: java-devel = %{javaver} @@ -378,7 +378,7 @@ # Post requires update-alternatives to install javadoc alternative. Requires(post): update-alternatives # Postun requires update-alternatives to uninstall javadoc alternative. -Requires(postun):update-alternatives +Requires(postun): update-alternatives # Standard JPackage javadoc provides. Provides: java-%{javaver}-javadoc = %{version}-%{release} Provides: java-javadoc = %{version}-%{release} ++++++ aarch32-git.tar.xz ++++++ /work/SRC/openSUSE:Factory/java-1_8_0-openjdk/aarch32-git.tar.xz /work/SRC/openSUSE:Factory/.java-1_8_0-openjdk.new.1815/aarch32-git.tar.xz differ: char 26, line 1 ++++++ icedtea-3.29.0.tar.xz -> icedtea-3.30.0.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/icedtea-3.29.0/ChangeLog new/icedtea-3.30.0/ChangeLog --- old/icedtea-3.29.0/ChangeLog 2023-10-28 05:03:17.514586168 +0200 +++ new/icedtea-3.30.0/ChangeLog 2024-02-02 16:03:13.312047107 +0100 @@ -1,3 +1,38 @@ +2024-02-02 Andrew John Hughes <gnu_and...@member.fsf.org> + + Prepare for release. + * NEWS: Set release date to today (2024-02-02). + +2024-01-31 Andrew John Hughes <gnu_and...@member.fsf.org> + + Bump aarch32 to jdk8u402-ga-aarch32-20240118 + * hotspot.map.in: Bump aarch32 to + jdk8u402-ga-aarch32-20240118 + +2024-01-31 Andrew John Hughes <gnu_and...@member.fsf.org> + + Bump shenandoah to shenandoah-jdk8u402-b06. + * hotspot.map.in: Bump shenandoah to + shenandoah-jdk8u402-b06. + +2024-01-31 Andrew John Hughes <gnu_and...@member.fsf.org> + + Bump to icedtea-3.30.0. + * Makefile.am: + (OPENJDK_CHANGESET): Update to icedtea-3.30.0 tag. + (OPENJDK_SHA256SUM): Likewise. + * NEWS: Updated. + * acinclude.m4: + (IT_DETERMINE_VERSION): Set JDK_UPDATE_VERSION + to 402 and BUILD_VERSION to b06. + * configure.ac: Bump to 3.30.0. + +2024-01-31 Andrew John Hughes <gnu_and...@member.fsf.org> + + Start 3.30.0 release cycle. + * NEWS: Add 3.30.0 section. + * configure.ac: Bump to 3.30.0pre00. + 2023-10-27 Andrew John Hughes <gnu_and...@member.fsf.org> Prepare for release. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/icedtea-3.29.0/Makefile.am new/icedtea-3.30.0/Makefile.am --- old/icedtea-3.29.0/Makefile.am 2023-10-28 05:03:17.521252820 +0200 +++ new/icedtea-3.30.0/Makefile.am 2024-02-02 16:03:13.318713766 +0100 @@ -1,8 +1,8 @@ # Dependencies -OPENJDK_CHANGESET = b5a9ddb3d9 +OPENJDK_CHANGESET = d4b65565c2 -OPENJDK_SHA256SUM = 74d33382e17a757728bc209595a89068528406428fe3c66fc0bbf9d489ecfc14 +OPENJDK_SHA256SUM = 1b205735e518f8fd172b2c945f8f28fe7564b378ce5cc1730484a9e325e6d478 HS_TYPE = "`$(AWK) 'version==$$1 {print $$2}' version=$(HSBUILD) $(abs_top_builddir)/hotspot.map`" HS_URL = "`$(AWK) 'version==$$1 {print $$3}' version=$(HSBUILD) $(abs_top_builddir)/hotspot.map`" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/icedtea-3.29.0/Makefile.in new/icedtea-3.30.0/Makefile.in --- old/icedtea-3.29.0/Makefile.in 2023-10-28 05:11:21.216759203 +0200 +++ new/icedtea-3.30.0/Makefile.in 2024-02-02 17:00:51.611491893 +0100 @@ -647,8 +647,8 @@ top_build_prefix = @top_build_prefix@ top_builddir = @top_builddir@ top_srcdir = @top_srcdir@ -OPENJDK_CHANGESET = b5a9ddb3d9 -OPENJDK_SHA256SUM = 74d33382e17a757728bc209595a89068528406428fe3c66fc0bbf9d489ecfc14 +OPENJDK_CHANGESET = d4b65565c2 +OPENJDK_SHA256SUM = 1b205735e518f8fd172b2c945f8f28fe7564b378ce5cc1730484a9e325e6d478 HS_TYPE = "`$(AWK) 'version==$$1 {print $$2}' version=$(HSBUILD) $(abs_top_builddir)/hotspot.map`" HS_URL = "`$(AWK) 'version==$$1 {print $$3}' version=$(HSBUILD) $(abs_top_builddir)/hotspot.map`" HS_CHANGESET = "`$(AWK) 'version==$$1 {print $$4}' version=$(HSBUILD) $(abs_top_builddir)/hotspot.map`" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/icedtea-3.29.0/NEWS new/icedtea-3.30.0/NEWS --- old/icedtea-3.29.0/NEWS 2023-10-28 05:03:17.524586145 +0200 +++ new/icedtea-3.30.0/NEWS 2024-02-02 16:03:13.322047094 +0100 @@ -12,6 +12,54 @@ CVE-XXXX-YYYY: https://cve.mitre.org/cgi-bin/cvename.cgi?name=XXXX-YYYY +New in release 3.30.0 (2024-02-02): + +* CVEs + - CVE-2024-20918 + - CVE-2024-20919 + - CVE-2024-20921 + - CVE-2024-20926 + - CVE-2024-20945 + - CVE-2024-20952 +* Security fixes + - JDK-8308204: Enhanced certificate processing + - JDK-8314284: Enhance Nashorn performance + - JDK-8314295: Enhance verification of verifier + - JDK-8314307: Improve loop handling + - JDK-8314468: Improve Compiler loops + - JDK-8316976: Improve signature handling + - JDK-8317547: Enhance TLS connection support +* Import of OpenJDK 8 u402 build 06 + - JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion + - JDK-8029995: accept yes/no for boolean krb5.conf settings + - JDK-8159156: [TESTBUG] ReserveMemory test is not useful on Aix. + - JDK-8176509: Use pandoc for converting build readme to html + - JDK-8206179: com/sun/management/OperatingSystemMXBean/GetCommittedVirtualMemorySize.java fails with Committed virtual memory size illegal value + - JDK-8207404: MulticastSocket tests failing on AIX + - JDK-8212677: X11 default visual support for IM status window on VNC + - JDK-8239365: ProcessBuilder test modifications for AIX execution + - JDK-8271838: AmazonCA.java interop test fails + - JDK-8285398: Cache the results of constraint checks + - JDK-8285696: AlgorithmConstraints:permits not throwing IllegalArgumentException when 'alg' is null + - JDK-8302017: Allocate BadPaddingException only if it will be thrown + - JDK-8305329: [8u] Unify test libraries into single test library - step 1 + - JDK-8307837: [8u] Check step in GHA should also print errors + - JDK-8309088: security/infra/java/security/cert/CertPathValidator/certification/AmazonCA.java fails + - JDK-8311813: C1: Uninitialized PhiResolver::_loop field + - JDK-8312489: Increase jdk.jar.maxSignatureFileSize default which is too low for JARs such as WhiteSource/Mend unified agent jar + - JDK-8312535: MidiSystem.getSoundbank() throws unexpected SecurityException + - JDK-8315280: Bump update version of OpenJDK: 8u402 + - JDK-8315506: C99 compatibility issue in LinuxNativeDispatcher + - JDK-8317291: Missing null check for nmethod::is_native_method() + - JDK-8317373: Add Telia Root CA v2 + - JDK-8317374: Add Let's Encrypt ISRG Root X2 + - JDK-8318759: Add four DigiCert root certificates + - JDK-8319187: Add three eMudhra emSign roots + - JDK-8319405: [s390] [jdk8] Increase javac default stack size for s390x zero + - JDK-8320597: RSA signature verification fails on signed data that does not encode params correctly +* Bug fixes + - JDK-8324184: Windows VS2010 build failed with "error C2275: 'int64_t'" + New in release 3.29.0 (2023-10-27): * CVEs diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/icedtea-3.29.0/acinclude.m4 new/icedtea-3.30.0/acinclude.m4 --- old/icedtea-3.29.0/acinclude.m4 2023-10-28 05:03:17.524586145 +0200 +++ new/icedtea-3.30.0/acinclude.m4 2024-02-02 16:03:13.322047094 +0100 @@ -1966,8 +1966,8 @@ dnl (e.g. 1.8.0 = 8, 1.7.0 = 7, etc.) JAVA_SPEC_VER=8 JAVA_VENDOR=openjdk - JDK_UPDATE_VERSION=392 - BUILD_VERSION=b08 + JDK_UPDATE_VERSION=402 + BUILD_VERSION=b06 MILESTONE=fcs if test "x${MILESTONE}" = "xfcs"; then COMBINED_VERSION=${JDK_UPDATE_VERSION}-${BUILD_VERSION} diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/icedtea-3.29.0/configure new/icedtea-3.30.0/configure --- old/icedtea-3.29.0/configure 2023-10-28 05:11:20.836760147 +0200 +++ new/icedtea-3.30.0/configure 2024-02-02 17:00:51.254825529 +0100 @@ -1,6 +1,6 @@ #! /bin/sh # Guess values for system-dependent variables and create Makefiles. -# Generated by GNU Autoconf 2.71 for icedtea 3.29.0. +# Generated by GNU Autoconf 2.71 for icedtea 3.30.0. # # Report bugs to <distro-pkg-...@openjdk.java.net>. # @@ -611,8 +611,8 @@ # Identity of this package. PACKAGE_NAME='icedtea' PACKAGE_TARNAME='icedtea' -PACKAGE_VERSION='3.29.0' -PACKAGE_STRING='icedtea 3.29.0' +PACKAGE_VERSION='3.30.0' +PACKAGE_STRING='icedtea 3.30.0' PACKAGE_BUGREPORT='distro-pkg-...@openjdk.java.net' PACKAGE_URL='' @@ -1763,7 +1763,7 @@ # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat <<_ACEOF -\`configure' configures icedtea 3.29.0 to adapt to many kinds of systems. +\`configure' configures icedtea 3.30.0 to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... @@ -1835,7 +1835,7 @@ if test -n "$ac_init_help"; then case $ac_init_help in - short | recursive ) echo "Configuration of icedtea 3.29.0:";; + short | recursive ) echo "Configuration of icedtea 3.30.0:";; esac cat <<\_ACEOF @@ -2100,7 +2100,7 @@ test -n "$ac_init_help" && exit $ac_status if $ac_init_version; then cat <<\_ACEOF -icedtea configure 3.29.0 +icedtea configure 3.30.0 generated by GNU Autoconf 2.71 Copyright (C) 2021 Free Software Foundation, Inc. @@ -2574,7 +2574,7 @@ This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. -It was created by icedtea $as_me 3.29.0, which was +It was created by icedtea $as_me 3.30.0, which was generated by GNU Autoconf 2.71. Invocation command line was $ $0$ac_configure_args_raw @@ -4173,7 +4173,7 @@ # Define the identity of the package. PACKAGE='icedtea' - VERSION='3.29.0' + VERSION='3.30.0' printf "%s\n" "#define PACKAGE \"$PACKAGE\"" >>confdefs.h @@ -4404,8 +4404,8 @@ JAVA_VER=1.8.0 JAVA_SPEC_VER=8 JAVA_VENDOR=openjdk - JDK_UPDATE_VERSION=392 - BUILD_VERSION=b08 + JDK_UPDATE_VERSION=402 + BUILD_VERSION=b06 MILESTONE=fcs if test "x${MILESTONE}" = "xfcs"; then COMBINED_VERSION=${JDK_UPDATE_VERSION}-${BUILD_VERSION} @@ -16844,7 +16844,7 @@ # report actual input values of CONFIG_FILES etc. instead of their # values after options handling. ac_log=" -This file was extended by icedtea $as_me 3.29.0, which was +This file was extended by icedtea $as_me 3.30.0, which was generated by GNU Autoconf 2.71. Invocation command line was CONFIG_FILES = $CONFIG_FILES @@ -16903,7 +16903,7 @@ cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_cs_config='$ac_cs_config_escaped' ac_cs_version="\\ -icedtea config.status 3.29.0 +icedtea config.status 3.30.0 configured by $0, generated by GNU Autoconf 2.71, with options \\"\$ac_cs_config\\" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/icedtea-3.29.0/configure.ac new/icedtea-3.30.0/configure.ac --- old/icedtea-3.29.0/configure.ac 2023-10-28 05:03:17.524586145 +0200 +++ new/icedtea-3.30.0/configure.ac 2024-02-02 16:03:13.322047094 +0100 @@ -1,4 +1,4 @@ -AC_INIT([icedtea], [3.29.0], [distro-pkg-...@openjdk.java.net]) +AC_INIT([icedtea], [3.30.0], [distro-pkg-...@openjdk.java.net]) AC_CANONICAL_HOST AC_CANONICAL_TARGET AM_INIT_AUTOMAKE([1.9 tar-pax foreign]) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/icedtea-3.29.0/hotspot.map.in new/icedtea-3.30.0/hotspot.map.in --- old/icedtea-3.29.0/hotspot.map.in 2023-10-28 05:03:17.531252796 +0200 +++ new/icedtea-3.30.0/hotspot.map.in 2024-02-02 16:03:13.328713752 +0100 @@ -1,3 +1,3 @@ # version type(drop/hg) url changeset sha256sum -shenandoah drop https://icedtea.classpath.org/download/drops/icedtea8/@ICEDTEA_RELEASE@ aabeb2da532 fae45df7da24d04252c8fda59e753f3cec5684b978e889cdf5ad04f7832f8542 -aarch32 drop https://icedtea.classpath.org/download/drops/icedtea8/@ICEDTEA_RELEASE@ 6e20bc344f bb00d352f3748fdc5d26980999c83665bb3753ef4a74a9a4e82a8deee1f86476 +shenandoah drop https://icedtea.classpath.org/download/drops/icedtea8/@ICEDTEA_RELEASE@ 2b110953435 d807f0abf774f3f437e0e957e54b804a60bbed4b9c92721303539824787fabf0 +aarch32 drop https://icedtea.classpath.org/download/drops/icedtea8/@ICEDTEA_RELEASE@ bdb9ae8caa ed96507df0daede6ab358927160c7ac5a145052fea575f32097b9b03cd440f5a ++++++ openjdk-git.tar.xz ++++++ /work/SRC/openSUSE:Factory/java-1_8_0-openjdk/openjdk-git.tar.xz /work/SRC/openSUSE:Factory/.java-1_8_0-openjdk.new.1815/openjdk-git.tar.xz differ: char 25, line 1 ++++++ shenandoah-git.tar.xz ++++++ /work/SRC/openSUSE:Factory/java-1_8_0-openjdk/shenandoah-git.tar.xz /work/SRC/openSUSE:Factory/.java-1_8_0-openjdk.new.1815/shenandoah-git.tar.xz differ: char 26, line 1