diff --git a/.gitignore b/.gitignore index 18fa5b4..cb2f371 100644 --- a/.gitignore +++ b/.gitignore @@ -1,2 +1,2 @@ -SOURCES/jdk-updates-jdk11u-jdk-11.0.11+6-4curve.tar.xz +SOURCES/jdk-updates-jdk11u-jdk-11.0.11+9-4curve.tar.xz SOURCES/tapsets-icedtea-6.0.0pre00-c848b93a8598.tar.xz diff --git a/.java-11-openjdk.metadata b/.java-11-openjdk.metadata index 3091fe9..35e6794 100644 --- a/.java-11-openjdk.metadata +++ b/.java-11-openjdk.metadata @@ -1,2 +1,2 @@ -0b0975515f9e01aeb4d78c8ea50aa0c465797980 SOURCES/jdk-updates-jdk11u-jdk-11.0.11+6-4curve.tar.xz +a339f6e108c16a23c47504565b602a6fc395bf2e SOURCES/jdk-updates-jdk11u-jdk-11.0.11+9-4curve.tar.xz c8281ee37b77d535c9c1af86609a531958ff7b34 SOURCES/tapsets-icedtea-6.0.0pre00-c848b93a8598.tar.xz diff --git a/SOURCES/NEWS b/SOURCES/NEWS index 93e0f8c..4b4509e 100644 --- a/SOURCES/NEWS +++ b/SOURCES/NEWS @@ -9,6 +9,13 @@ Live versions of these release notes can be found at: * https://bitly.com/openjdk11011 * https://builds.shipilev.net/backports-monitor/release-notes-11.0.11.txt +* Security fixes + - JDK-8244473: Contextualize registration for JNDI + - JDK-8244543: Enhanced handling of abstract classes + - JDK-8249906, CVE-2021-2163: Enhance opening JARs + - JDK-8250568, CVE-2021-2161: Less ambiguous processing + - JDK-8253799: Make lists of normal filenames + - JDK-8257001: Improve Http Client Support * Other changes - JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream readDouble() conversion to long mishandled - JDK-7146776: deadlock between URLStreamHandler.getHostAddress and file.Handler.openconnection @@ -174,6 +181,7 @@ Live versions of these release notes can be found at: - JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java again reports leaks after JDK-8257884 - JDK-8257999: Parallel GC crash in gc/parallel/TestDynShrinkHeap.java: new region is not in covered_region - JDK-8258077: Using -Xcheck:jni can lead to a double-free after JDK-8193234 + - JDK-8258247: Couple of issues in fix for JDK-8249906 - JDK-8258373: Update the text handling in the JPasswordField - JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder.rotateDisk() - JDK-8258419: RSA cipher buffer cleanup @@ -192,9 +200,11 @@ Live versions of these release notes can be found at: - JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert will expire in 90 days - JDK-8259319: Illegal package access when SunPKCS11 requires SunJCE's classes - JDK-8259339: AllocateUninitializedArray C2 intrinsic fails with void.class input + - JDK-8259428: AlgorithmId.getEncodedParams() should return copy - JDK-8259446: runtime/jni/checked/TestCheckedReleaseArrayElements.java fails with stderr not empty - JDK-8259949: x86 32-bit build fails when -fcf-protection is passed in the compiler flags - JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use condition is incorrect + - JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE after JDK-8244543 - JDK-8259706: C2 compilation fails with assert(vtable_index == Method::invalid_vtable_index) failed: correct sentinel value - JDK-8259707: LDAP channel binding does not work with StartTLS extension - JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction @@ -212,6 +222,8 @@ Live versions of these release notes can be found at: - JDK-8260704: ParallelGC: oldgen expansion needs release-store for _end - JDK-8261022: Fix incorrect result of Math.abs() with char type - JDK-8261089: [TESTBUG] native library of test TestCheckedReleaseCriticalArray.java fails to compile with gcc 4.x + - JDK-8261183: Follow on to Make lists of normal filenames + - JDK-8261209: isStandalone property: remove dependency on pretty-print - JDK-8261231: Windows IME was disabled after DnD operation - JDK-8261251: Shenandoah: Use object size for full GC humongous compaction - JDK-8261310: PPC64 Zero build fails with 'VMError::controlled_crash(int)::FunctionDescriptor functionDescriptor' has incomplete type and cannot be defined @@ -225,6 +237,7 @@ Live versions of these release notes can be found at: - JDK-8261912: Code IfNode::fold_compares_helper more defensively - JDK-8261920: [AIX] jshell command throws java.io.IOError on non English locales - JDK-8262018: Wrong format in SAP copyright header of OsVersionTest + - JDK-8263069: Exclude some failing tests from security/infra/java/security/cert/CertPathValidator Notes on individual issues: =========================== diff --git a/SPECS/java-11-openjdk.spec b/SPECS/java-11-openjdk.spec index f631f79..79bbb4f 100644 --- a/SPECS/java-11-openjdk.spec +++ b/SPECS/java-11-openjdk.spec @@ -338,8 +338,8 @@ %global origin_nice OpenJDK %global top_level_dir_name %{origin} %global top_level_dir_name_backup %{top_level_dir_name}-backup -%global buildver 6 -%global rpmrelease 2 +%global buildver 9 +%global rpmrelease 3 #%%global tagsuffix %%{nil} # Priority must be 8 digits in total; up to openjdk 1.8, we were using 18..... so when we moved to 11, we had to add another digit %if %is_system_jdk @@ -368,7 +368,7 @@ # Release will be (where N is usually a number starting at 1): # - 0.N%%{?extraver}%%{?dist} for EA releases, # - N%%{?extraver}{?dist} for GA releases -%global is_ga 0 +%global is_ga 1 %if %{is_ga} %global ea_designator "" %global ea_designator_zip "" @@ -1007,8 +1007,8 @@ Requires: ca-certificates # Require javapackages-filesystem for ownership of /usr/lib/jvm/ and macros Requires: javapackages-filesystem # Require zone-info data provided by tzdata-java sub-package -# 2020f required as of JDK-8259048 in October CPU -Requires: tzdata-java >= 2020f +# 2021a required as of JDK-8260356 in April 2021 CPU +Requires: tzdata-java >= 2021a # for support of kernel stream control # libsctp.so.1 is being `dlopen`ed on demand Requires: lksctp-tools%{?_isa} @@ -1300,8 +1300,8 @@ BuildRequires: java-%{buildjdkver}-openjdk-devel %ifnarch %{jit_arches} BuildRequires: libffi-devel %endif -# 2020f required as of JDK-8259048 in October CPU -BuildRequires: tzdata-java >= 2020f +# 2021a required as of JDK-8260356 in April 2021 CPU +BuildRequires: tzdata-java >= 2021a # Earlier versions have a bug in tree vectorization on PPC BuildRequires: gcc >= 4.8.3-8 @@ -2343,6 +2343,22 @@ end %endif %changelog +* Wed Apr 21 2021 Andrew Hughes - 1:11.0.11.0.9-3 +- Update to jdk-11.0.11.0+9 +- Update release notes to 11.0.11.0+9 +- Switch to GA mode for final release. +- This tarball is embargoed until 2021-04-20 @ 1pm PT. +- Resolves: rhbz#1938201 + +* Thu Apr 15 2021 Andrew Hughes - 1:11.0.11.0.7-0.3.ea +- Require tzdata 2021a to match upstream change JDK-8260356 +- Resolves: rhbz#1942310 + +* Mon Apr 12 2021 Andrew Hughes - 1:11.0.11.0.7-0.2.ea +- Update to jdk-11.0.11.0+7 +- Update release notes to 11.0.11.0+7 +- Resolves: rhbz#1942310 + * Mon Apr 12 2021 Andrew Hughes - 1:11.0.11.0.6-0.2.ea - Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6