From 2af2f4cabef1e6cfff89651e81ae9bc8d2411b0a Mon Sep 17 00:00:00 2001 From: CentOS Sources Date: Nov 07 2021 10:19:50 +0000 Subject: import java-11-openjdk-11.0.13.0.8-3.el8 --- diff --git a/.gitignore b/.gitignore index 82100af..8a39ad5 100644 --- a/.gitignore +++ b/.gitignore @@ -1,2 +1,2 @@ -SOURCES/jdk-updates-jdk11u-jdk-11.0.13+7-4curve.tar.xz +SOURCES/jdk-updates-jdk11u-jdk-11.0.13+8-4curve.tar.xz SOURCES/tapsets-icedtea-6.0.0pre00-c848b93a8598.tar.xz diff --git a/.java-11-openjdk.metadata b/.java-11-openjdk.metadata index df078f3..78958a2 100644 --- a/.java-11-openjdk.metadata +++ b/.java-11-openjdk.metadata @@ -1,2 +1,2 @@ -a460b6663729a172c3d9464b8dc5e6bf2f92ff98 SOURCES/jdk-updates-jdk11u-jdk-11.0.13+7-4curve.tar.xz +e36bde565834fe738fd222d419cfedc23ab80cee SOURCES/jdk-updates-jdk11u-jdk-11.0.13+8-4curve.tar.xz c8281ee37b77d535c9c1af86609a531958ff7b34 SOURCES/tapsets-icedtea-6.0.0pre00-c848b93a8598.tar.xz diff --git a/SOURCES/NEWS b/SOURCES/NEWS index 830abd1..df6dc0c 100644 --- a/SOURCES/NEWS +++ b/SOURCES/NEWS @@ -9,12 +9,38 @@ Live versions of these release notes can be found at: * https://bitly.com/openjdk11013 * https://builds.shipilev.net/backports-monitor/release-notes-11.0.13.txt +* Security fixes + - JDK-8163326, CVE-2021-35550: Update the default enabled cipher suites preference + - JDK-8254967, CVE-2021-35565: com.sun.net.HttpsServer spins on TLS session close + - JDK-8263314: Enhance XML Dsig modes + - JDK-8265167, CVE-2021-35556: Richer Text Editors + - JDK-8265574: Improve handling of sheets + - JDK-8265580, CVE-2021-35559: Enhanced style for RTF kit + - JDK-8265776: Improve Stream handling for SSL + - JDK-8266097, CVE-2021-35561: Better hashing support + - JDK-8266103: Better specified spec values + - JDK-8266109: More Resilient Classloading + - JDK-8266115: More Manifest Jar Loading + - JDK-8266137, CVE-2021-35564: Improve Keystore integrity + - JDK-8266689, CVE-2021-35567: More Constrained Delegation + - JDK-8267086: ArrayIndexOutOfBoundsException in java.security.KeyFactory.generatePublic + - JDK-8267712: Better LDAP reference processing + - JDK-8267729, CVE-2021-35578: Improve TLS client handshaking + - JDK-8267735, CVE-2021-35586: Better BMP support + - JDK-8268193: Improve requests of certificates + - JDK-8268199: Correct certificate requests + - JDK-8268205: Enhance DTLS client handshake + - JDK-8268506: More Manifest Digests + - JDK-8269618, CVE-2021-35603: Better session identification + - JDK-8269624: Enhance method selection support + - JDK-8270398: Enhance canonicalization + - JDK-8270404: Better canonicalization * Other changes - JDK-8024368: private methods are allocated vtable indices - JDK-8042902: Test java/net/Inet6Address/serialize/Inet6AddressSerializationTest.java fails intermittently - JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites + - JDK-8157404: Unable to read certain PKCS12 keystores from SequenceInputStream - JDK-8158066: SourceDebugExtensionTest fails to rename file - - JDK-8163326: Update the default enabled cipher suites preference - JDK-8168304: Make all of DependencyContext_test available in product mode - JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java fails intermittently with BindException - JDK-8181313: SA: Remove libthread_db dependency on Linux @@ -68,6 +94,7 @@ Live versions of these release notes can be found at: - JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails intermittently due to NumberFormatException - JDK-8220445: Support for side by side MSVC Toolset versions - JDK-8221988: add possibility to build with Visual Studio 2019 + - JDK-8222751: closed/test/jdk/sun/security/util/DerIndefLenConverter/IndefBerPkcs12.java fail - JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use Dependencies::find_unique_concrete_method() for non-virtual methods - JDK-8224853: CDS address sanitizer errors - JDK-8225082: Remove IdenTrust certificate that is expiring in September 2021 @@ -151,7 +178,6 @@ Live versions of these release notes can be found at: - JDK-8254270: linux 32 bit build doesn't compile libjdwp/log_messages.c - JDK-8254282: Add Linux x86_32 builds to submit workflow - JDK-8254850: Update terminology in java.awt.GridBagLayout source code comments - - JDK-8254967: com.sun.net.HttpsServer spins on TLS session close - JDK-8255255: Update Apache Santuario (XML Signature) to version 2.2.1 - JDK-8255305: Add Linux x86_32 tier1 to submit workflow - JDK-8255352: Archive important test outputs in submit workflow @@ -261,6 +287,7 @@ Live versions of these release notes can be found at: - JDK-8269650: Optimize gc-locker in [Get|Release]StringCritical for latin string - JDK-8269661: JNI_GetStringCritical does not lock char array - JDK-8269668: [aarch64] java.library.path not including /usr/lib64 + - JDK-8269763: The JEditorPane is blank after JDK-8265167 - JDK-8269795: C2: Out of bounds array load floats above its range check in loop peeling resulting in SEGV - JDK-8269847: JDK-8269594 backport breaks 11u builds - JDK-8269850: Most JDK releases report macOS version 12 as 10.16 instead of 12.0 diff --git a/SPECS/java-11-openjdk.spec b/SPECS/java-11-openjdk.spec index 1eb26d0..52c9766 100644 --- a/SPECS/java-11-openjdk.spec +++ b/SPECS/java-11-openjdk.spec @@ -344,8 +344,8 @@ %global origin_nice OpenJDK %global top_level_dir_name %{origin} %global top_level_dir_name_backup %{top_level_dir_name}-backup -%global buildver 7 -%global rpmrelease 1 +%global buildver 8 +%global rpmrelease 3 #%%global tagsuffix %%{nil} # Priority must be 8 digits in total; up to openjdk 1.8, we were using 18..... so when we moved to 11, we had to add another digit %if %is_system_jdk @@ -374,7 +374,7 @@ # Release will be (where N is usually a number starting at 1): # - 0.N%%{?extraver}%%{?dist} for EA releases, # - N%%{?extraver}{?dist} for GA releases -%global is_ga 0 +%global is_ga 1 %if %{is_ga} %global ea_designator "" %global ea_designator_zip "" @@ -2450,6 +2450,12 @@ end %endif %changelog +* Wed Oct 13 2021 Andrew Hughes - 1:11.0.13.0.8-3 +- Update to jdk-11.0.13.0+8 +- Update release notes to 11.0.13.0+8 +- Switch to GA mode for final release. +- Resolves: rhbz#2012335 + * Tue Oct 12 2021 Andrew Hughes - 1:11.0.13.0.7-0.1.ea - Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7