chewi 15/07/29 12:42:08 Modified: metadata.xml ChangeLog Added: oracle-jre-bin-1.8.0.51.ebuild Log: Version bump, address security bug #554886. Also addresses bugs #475550, #543658, #553960. (Portage version: 2.2.20/cvs/Linux x86_64, signed Manifest commit with key 9C6D7DE4)
Revision Changes Path 1.3 dev-java/oracle-jre-bin/metadata.xml file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/dev-java/oracle-jre-bin/metadata.xml?rev=1.3&view=markup plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/dev-java/oracle-jre-bin/metadata.xml?rev=1.3&content-type=text/plain diff : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/dev-java/oracle-jre-bin/metadata.xml?r1=1.2&r2=1.3 Index: metadata.xml =================================================================== RCS file: /var/cvsroot/gentoo-x86/dev-java/oracle-jre-bin/metadata.xml,v retrieving revision 1.2 retrieving revision 1.3 diff -u -r1.2 -r1.3 --- metadata.xml 23 Jul 2012 17:28:56 -0000 1.2 +++ metadata.xml 29 Jul 2015 12:42:08 -0000 1.3 @@ -4,7 +4,9 @@ <herd>java</herd> <longdescription>Oracle Java SE Runtime Environment, Official Binary Distribution</longdescription> <use> - <flag name="jce">Enable Java Cryptographic Extension Unlimited Strength Policy files</flag> - <flag name="pax_kernel">Use paxctl to mark the JVM binaries.</flag> + <flag name="awt">Install non-headless AWT libraries, needed by some GUIs (used to be X flag)</flag> + <flag name="javafx">Install JavaFX libraries</flag> + <flag name="jce">Install Java Cryptographic Extension Unlimited Strength Jurisdiction Policy Files</flag> + <flag name="pax_kernel">Use paxctl to mark the JVM binaries</flag> </use> </pkgmetadata> 1.86 dev-java/oracle-jre-bin/ChangeLog file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/dev-java/oracle-jre-bin/ChangeLog?rev=1.86&view=markup plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/dev-java/oracle-jre-bin/ChangeLog?rev=1.86&content-type=text/plain diff : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/dev-java/oracle-jre-bin/ChangeLog?r1=1.85&r2=1.86 Index: ChangeLog =================================================================== RCS file: /var/cvsroot/gentoo-x86/dev-java/oracle-jre-bin/ChangeLog,v retrieving revision 1.85 retrieving revision 1.86 diff -u -r1.85 -r1.86 --- ChangeLog 19 Apr 2015 12:09:52 -0000 1.85 +++ ChangeLog 29 Jul 2015 12:42:08 -0000 1.86 @@ -1,6 +1,13 @@ # ChangeLog for dev-java/oracle-jre-bin # Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/dev-java/oracle-jre-bin/ChangeLog,v 1.85 2015/04/19 12:09:52 chewi Exp $ +# $Header: /var/cvsroot/gentoo-x86/dev-java/oracle-jre-bin/ChangeLog,v 1.86 2015/07/29 12:42:08 chewi Exp $ + +*oracle-jre-bin-1.8.0.51 (29 Jul 2015) + + 29 Jul 2015; James Le Cuirot <ch...@gentoo.org> + +oracle-jre-bin-1.8.0.51.ebuild, metadata.xml: + Version bump, address security bug #554886. Also addresses bugs #475550, + #543658, #553960. 19 Apr 2015; James Le Cuirot <ch...@gentoo.org> -oracle-jre-bin-1.7.0.76.ebuild, -oracle-jre-bin-1.8.0.40.ebuild: 1.1 dev-java/oracle-jre-bin/oracle-jre-bin-1.8.0.51.ebuild file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/dev-java/oracle-jre-bin/oracle-jre-bin-1.8.0.51.ebuild?rev=1.1&view=markup plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/dev-java/oracle-jre-bin/oracle-jre-bin-1.8.0.51.ebuild?rev=1.1&content-type=text/plain Index: oracle-jre-bin-1.8.0.51.ebuild =================================================================== # Copyright 1999-2015 Gentoo Foundation # Distributed under the terms of the GNU General Public License v2 # $Header: /var/cvsroot/gentoo-x86/dev-java/oracle-jre-bin/oracle-jre-bin-1.8.0.51.ebuild,v 1.1 2015/07/29 12:42:08 chewi Exp $ EAPI="5" inherit eutils java-vm-2 prefix versionator # This URIs need updating when bumping! JRE_URI="http://www.oracle.com/technetwork/java/javase/downloads/jre8-downloads-2133155.html"; JCE_URI="http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html"; if [[ "$(get_version_component_range 4)" == 0 ]] ; then S_PV="$(get_version_component_range 1-3)" else MY_PV_EXT="u$(get_version_component_range 4)" S_PV="$(get_version_component_range 1-4)" fi MY_PV="$(get_version_component_range 2)${MY_PV_EXT}" AT_amd64="jre-${MY_PV}-linux-x64.tar.gz" AT_x86="jre-${MY_PV}-linux-i586.tar.gz" JCE_DIR="UnlimitedJCEPolicyJDK8" JCE_FILE="jce_policy-8.zip" DESCRIPTION="Oracle's Java SE Runtime Environment" HOMEPAGE="http://www.oracle.com/technetwork/java/javase/"; SRC_URI=" amd64? ( ${AT_amd64} ) x86? ( ${AT_x86} ) jce? ( ${JCE_FILE} )" LICENSE="Oracle-BCLA-JavaSE" SLOT="1.8" KEYWORDS="~amd64 ~x86" IUSE="alsa +awt cups +fontconfig javafx jce nsplugin pax_kernel selinux" RESTRICT="fetch preserve-libs strip" QA_PREBUILT="*" # NOTES: # # * cups is dlopened. # # * libpng is also dlopened but only by libsplashscreen, which isn't # important, so we can exclude that. # # * We still need to work out the exact AWT and JavaFX dependencies # under MacOS. It doesn't appear to use many, if any, of the # dependencies below. # RDEPEND="!x64-macos? ( awt? ( x11-libs/libX11 x11-libs/libXext x11-libs/libXi x11-libs/libXrender ) javafx? ( dev-libs/glib:2 dev-libs/libxml2:2 dev-libs/libxslt media-libs/freetype:2 x11-libs/cairo x11-libs/gtk+:2 x11-libs/libX11 x11-libs/libXtst x11-libs/libXxf86vm x11-libs/pango virtual/opengl ) ) alsa? ( media-libs/alsa-lib ) cups? ( net-print/cups ) fontconfig? ( media-libs/fontconfig:1.0 ) !prefix? ( sys-libs/glibc:* ) selinux? ( sec-policy/selinux-java )" # A PaX header isn't created by scanelf so depend on paxctl to avoid # fallback marking. See bug #427642. DEPEND="jce? ( app-arch/unzip ) pax_kernel? ( sys-apps/paxctl )" S="${WORKDIR}/jre" pkg_nofetch() { local AT_ARCH="AT_${ARCH}" local AT="${!AT_ARCH}" einfo "Please download '${AT}' from:" einfo "'${JRE_URI}'" einfo "and move it to '${DISTDIR}'" if use jce; then einfo "Also download '${JCE_FILE}' from:" einfo "'${JCE_URI}'" einfo "and move it to '${DISTDIR}'" fi einfo einfo "If the above mentioned urls do not point to the correct version anymore," einfo "please download the files from Oracle's java download archive:" einfo einfo " http://www.oracle.com/technetwork/java/javase/downloads/java-archive-javase8-2177648.html#jre-${MY_PV}-oth-JPR"; einfo } src_unpack() { default # Upstream is changing their versioning scheme every release around 1.8.0.*; # to stop having to change it over and over again, just wildcard match and # live a happy life instead of trying to get this new jre1.8.0_05 to work. mv "${WORKDIR}"/jre* "${S}" || die } src_prepare() { if use jce ; then mv "${WORKDIR}"/${JCE_DIR} lib/security/ || die fi } src_install() { local dest="/opt/${P}" local ddest="${ED}${dest#/}" # Create files used as storage for system preferences. mkdir .systemPrefs || die touch .systemPrefs/.system.lock || die touch .systemPrefs/.systemRootModFile || die if ! use alsa ; then rm -vf lib/*/libjsoundalsa.* || die fi if ! use awt ; then rm -vf lib/*/lib*{[jx]awt,splashscreen}* \ bin/{javaws,policytool} || die fi if ! use javafx ; then rm -vf lib/*/lib*{decora,fx,glass,prism}* \ lib/*/libgstreamer-lite.* lib/{,ext/}*fx* || die fi if ! use nsplugin ; then rm -vf lib/*/libnpjp2.* || die else local nsplugin=$(echo lib/*/libnpjp2.*) fi # Even though plugins linked against multiple ffmpeg versions are # provided, they generally lag behind what Gentoo has available. rm -vf lib/*/libavplugin* || die dodoc COPYRIGHT dodir "${dest}" cp -pPR bin lib man "${ddest}" || die if use jce ; then dodir ${dest}/lib/security/strong-jce mv "${ddest}"/lib/security/US_export_policy.jar \ "${ddest}"/lib/security/strong-jce || die mv "${ddest}"/lib/security/local_policy.jar \ "${ddest}"/lib/security/strong-jce || die dosym "${dest}"/lib/security/${JCE_DIR}/US_export_policy.jar \ "${dest}"/lib/security/US_export_policy.jar dosym "${dest}"/lib/security/${JCE_DIR}/local_policy.jar \ "${dest}"/lib/security/local_policy.jar fi if use nsplugin ; then install_mozilla_plugin "${dest}/${nsplugin}" fi # Install desktop file for the Java Control Panel. # Using ${PN}-${SLOT} to prevent file collision with jre and or other slots. # make_desktop_entry can't be used as ${P} would end up in filename. newicon lib/desktop/icons/hicolor/48x48/apps/sun-jcontrol.png \ sun-jcontrol-${PN}-${SLOT}.png || die sed -e "s#Name=.*#Name=Java Control Panel for Oracle JRE ${SLOT}#" \ -e "s#Exec=.*#Exec=/opt/${P}/bin/jcontrol#" \ -e "s#Icon=.*#Icon=sun-jcontrol-${PN}-${SLOT}#" \ -e "s#Application;##" \ -e "/Encoding/d" \ lib/desktop/applications/sun_java.desktop > \ "${T}"/jcontrol-${PN}-${SLOT}.desktop || die domenu "${T}"/jcontrol-${PN}-${SLOT}.desktop # Prune all fontconfig files so libfontconfig will be used and only install # a Gentoo specific one if fontconfig is disabled. # http://docs.oracle.com/javase/8/docs/technotes/guides/intl/fontconfig.html rm "${ddest}"/lib/fontconfig.* || die if ! use fontconfig ; then cp "${FILESDIR}"/fontconfig.Gentoo.properties "${T}"/fontconfig.properties || die eprefixify "${T}"/fontconfig.properties insinto "${dest}"/lib/ doins "${T}"/fontconfig.properties fi # This needs to be done before CDS - #215225 java-vm_set-pax-markings "${ddest}" # see bug #207282 einfo "Creating the Class Data Sharing archives" case ${ARCH} in arm|ia64) ${ddest}/bin/java -client -Xshare:dump || die ;; x86) ${ddest}/bin/java -client -Xshare:dump || die # limit heap size for large memory on x86 #467518 # this is a workaround and shouldn't be needed. ${ddest}/bin/java -server -Xms64m -Xmx64m -Xshare:dump || die ;; *) ${ddest}/bin/java -server -Xshare:dump || die ;; esac # Remove empty dirs we might have copied. find "${D}" -type d -empty -exec rmdir -v {} + || die set_java_env java-vm_revdep-mask java-vm_sandbox-predict /dev/random /proc/self/coredump_filter }
