diff --git a/NEWS b/NEWS index 0a796bbce359bfe765894ea2a94fe45c6ae6407e..03a3b86e9d90ddbaf630fcd925f536e2a3f83928 100644 --- a/NEWS +++ b/NEWS @@ -3,6 +3,85 @@ Key: JDK-X - https://bugs.openjdk.java.net/browse/JDK-X CVE-XXXX-YYYY: https://cve.mitre.org/cgi-bin/cvename.cgi?name=XXXX-YYYY +New in release OpenJDK 8u472 (2025-10-21): +=========================================== +Live versions of these release notes can be found at: + * https://bit.ly/openjdk8u472 + +* CVEs + - CVE-2025-53057 + - CVE-2025-53066 +* Changes + - JDK-7102969: currency.properties supercede not working correctly + - JDK-8041924: [TESTBUG] sun/net/www/http/ChunkedOutputStream/checkError.java fails on some systems + - JDK-8044051: Test jdk/lambda/vm/InterfaceAccessFlagsTest.java gets IOException during compilation + - JDK-8056283: @ignore tools/javac/defaultMethods/Assertions.java until JDK-8047675 is fixed + - JDK-8081734: ConcurrentHashMap/ConcurrentAssociateTest.java, times out 90% of time on sparc with 256 cpu. + - JDK-8157138: Error while fetching currency instance by Currency.getInstance(currencycode) + - JDK-8160767: [TEST_BUG] java/awt/Frame/MaximizedToIconified/MaximizedToIconified.java + - JDK-8185348: Major performance regression in GetMethodDeclaringClass and other JVMTI Method functions + - JDK-8185500: [TESTBUG] Add keywords headful/printer in java/awt and javax tests. + - JDK-8186259: IOExceptionIfEncodedURLTest.sh versus IOExceptionIfEncodedURLTest.java + - JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with handshake_failure + - JDK-8228658: test GetTotalSafepointTime.java fails on fast Linux machines with Total safepoint time 0 ms + - JDK-8275303: sun/java2d/pipe/InterpolationQualityTest.java fails with D3D basic render driver + - JDK-8312065: Socket.connect does not timeout when profiling + - JDK-8335978: [8u] incorrect include file name in semaphore.inline.hpp + - JDK-8339414: Fix JDK-8202369 incorrect backport for 8u + - JDK-8340387: Update OS detection code to recognize Windows Server 2025 + - JDK-8345414: Google CAInterop test failures + - JDK-8348760: RadioButton is not shown if JRadioButtonMenuItem is rendered with ImageIcon in WindowsLookAndFeel + - JDK-8351624: [8u] Xerces-J version wrong in THIRD_PARTY_README after JDK-7150324 + - JDK-8352302: Test sun/security/tools/jarsigner/TimestampCheck.java is failing + - JDK-8352637: Enhance bytecode verification + - JDK-8356294: Enhance Path Factories + - JDK-8358328: Bump update version of OpenJDK: 8u472 + - JDK-8358538: Update GHA Windows runner to 2025 + - JDK-8360937: Enhance certificate handling + - JDK-8361212: Remove AffirmTrust root CAs + - JDK-8363965: GHA: Switch cross-compiling sysroots to Debian bookworm + - JDK-8365375: Method SU3.setAcceleratorSelectionForeground assigns to acceleratorForeground + - JDK-8365389: Remove static color fields from SwingUtilities3 and WindowsMenuItemUI + - JDK-8365560: [8u] ppc64le MaxRAM default is too low at 4GiB + - JDK-8365811: test/jdk/java/net/CookieHandler/B6644726.java failure - "Should have 5 cookies. Got only 4, expires probably didn't parse correctly" + - JDK-8366112: [8u] GHA: Fix broken installation of Windows SDK + - JDK-8368308: ISO 4217 Amendment 180 Update + +Notes on individual issues: +=========================== + +security-libs/java.security: + +JDK-8361212: Remove AffirmTrust root CAs +======================================== +The following root certificates from AffirmTrust, which were +deactivated in the 8u432 release of October 2024, have been removed +from the `cacerts` keystore: + +Alias name: affirmtrustcommercialca [jdk] +CN=AffirmTrust Commercial +O=AffirmTrust +C=US +SHA256: 03:76:AB:1D:54:C5:F9:80:3C:E4:B2:E2:01:A0:EE:7E:EF:7B:57:B6:36:E8:A9:3C:9B:8D:48:60:C9:6F:5F:A7 + +Alias name: affirmtrustnetworkingca [jdk] +CN=AffirmTrust Networking +O=AffirmTrust +C=US +SHA256: 0A:81:EC:5A:92:97:77:F1:45:90:4A:F3:8D:5D:50:9F:66:B5:E2:C5:8F:CD:B5:31:05:8B:0E:17:F3:F0B4:1B + +Alias name: affirmtrustpremiumca [jdk] +CN=AffirmTrust Premium +O=AffirmTrust +C=US +SHA256: 70:A7:3F:7F:37:6B:60:07:42:48:90:45:34:B1:14:82:D5:BF:0E:69:8E:CC:49:8D:F5:25:77:EB:F2:E9:3B:9A + +Alias name: affirmtrustpremiumeccca [jdk] +CN=AffirmTrust Premium ECC +O=AffirmTrust +C=US +SHA256: BD:71:FD:F6:DA:97:E4:CF:62:D1:64:7A:DD:25:81:B0:7D:79:AD:F8:39:7E:B4:EC:BA:9C:5E:84:88:82:14:23 + New in release OpenJDK 8u462 (2025-07-15): =========================================== Live versions of these release notes can be found at: diff --git a/download b/download index 6e1f7de41e37456b14f495a267d52c1c21fd5d8f..2926cd01faac2bbbd465a549cd106ac0435c1a47 100644 --- a/download +++ b/download @@ -1,2 +1,2 @@ 870d829d8e1c38e251cc7498032a768a tapsets-icedtea-3.15.0.tar.xz -58c09cbadbdc66c7b849667bc3cd26f3 shenandoah8u462-b08.tar.xz +a2dbd4070e5bc35cd5b47771fd829428 shenandoah8u472-b08.tar.xz diff --git a/java-1.8.0-openjdk-portable.spec b/java-1.8.0-openjdk-portable.spec index 995f645f4239924eaee987b19669ab4bed78f83e..d5b8e054f78451e4b84551b34ca66222ba6605ee 100644 --- a/java-1.8.0-openjdk-portable.spec +++ b/java-1.8.0-openjdk-portable.spec @@ -277,7 +277,7 @@ # Define version of OpenJDK 8 used %global project openjdk %global repo shenandoah-jdk8u -%global openjdk_revision 8u462-b08 +%global openjdk_revision 8u472-b08 %global shenandoah_revision shenandoah%{openjdk_revision} # Define IcedTea version used for SystemTap tapsets and desktop file %global icedteaver 3.15.0 @@ -616,7 +616,6 @@ Patch15: jdk8141590-bundle_libffi-followup.patch # able to be removed once that release is out # and used by this RPM. ############################################# -Patch901: jdk8339414-fix_8202369_backport.patch ############################################# # @@ -913,7 +912,6 @@ popd # Early fixes pushd %{top_level_dir_name} -%patch -P901 -p1 popd pushd %{top_level_dir_name} @@ -1590,13 +1588,44 @@ done %endif %changelog -* Tue Jul 22 2025 Liwei Ge - 1:1.8.0.462.b08-1.0.1 +* Fri Oct 24 2025 Liwei Ge - 1:1.8.0.472.b08-1.0.1 - Use anolis dist - Update loongson src -* Thu Jul 17 2025 Release Engineering - 1.8.0.462.b08-1 +* Thu Oct 23 2025 Release Engineering - 1.8.0.472.b08-1 - Build for Rocky Linux %{rocky} +* Thu Oct 16 2025 Andrew Hughes - 1:1.8.0.472.b08-1 +- Update to 8u472-b08 (GA). +- Update release notes for 8u472-b08. +- Drop local JDK-8339414 fix as this is now included upstream +- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** +- Resolves: OPENJDK-4125 + +* Sat Oct 04 2025 Andrew Hughes - 1:1.8.0.462.b08-2 +- Update get_bundle_versions.sh to match other scripts +- * get_bundle_versions.sh: Add license +- * get_bundle_versions.sh: Set compile-command in Emacs +- * get_bundle_versions.sh: Use different error codes for different failures +- * get_bundle_versions.sh: Remove unneeded '.' in JPEG version +- * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) +- * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) +- Add OpenJDK 8u support to get_bundle_versions.sh +- Print bundle updates and backouts at end of openjdk_news.sh output +- Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh +- Add timezone data update check to openjdk_news.sh +- Add duplicate check to openjdk_news.sh +- Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh +- Resolves: OPENJDK-3952 + +* Fri Oct 03 2025 Antonio Vieiro - 1:1.8.0.462.b08-2 +- Add script to obtain bundled library versions from OpenJDK sources +- Related: OPENJDK-3952 + +* Mon Sep 29 2025 Thomas Fitzsimmons - 1:1.8.0.462.b08-2 +- Warn about bundled provide version bumps and backouts in openjdk_news.sh +- Related: OPENJDK-3952 + * Thu Jul 10 2025 Andrew Hughes - 1:1.8.0.462.b08-1 - Update to 8u462-b08 (GA) - Update release notes for 8u462-b08. diff --git a/jdk8339414-fix_8202369_backport.patch b/jdk8339414-fix_8202369_backport.patch deleted file mode 100644 index 3250ef4bd9f0e89471d438f43e8783b98042086f..0000000000000000000000000000000000000000 --- a/jdk8339414-fix_8202369_backport.patch +++ /dev/null @@ -1,63 +0,0 @@ -commit 51b6307937d9584f8690e4916444e479eeafff28 -Author: Thomas Fitzsimmons -Date: Mon Jun 16 23:04:07 2025 +0000 - - 8339414: Fix JDK-8202369 incorrect backport for 8u - - Reviewed-by: andrew - -diff --git a/jdk/src/solaris/native/java/net/Inet4AddressImpl.c b/jdk/src/solaris/native/java/net/Inet4AddressImpl.c -index e30851df576..8b2e3cdce93 100644 ---- a/jdk/src/solaris/native/java/net/Inet4AddressImpl.c -+++ b/jdk/src/solaris/native/java/net/Inet4AddressImpl.c -@@ -332,37 +332,33 @@ Java_java_net_Inet4AddressImpl_getHostByAddr(JNIEnv *env, jobject this, - */ - JNIEXPORT jstring JNICALL - Java_java_net_Inet4AddressImpl_getLocalHostName(JNIEnv *env, jobject this) { -- char hostname[NI_MAXHOST+1]; -+ char hostname[NI_MAXHOST + 1]; - - hostname[0] = '\0'; - if (JVM_GetHostName(hostname, sizeof(hostname))) { -- /* Something went wrong, maybe networking is not setup? */ - strcpy(hostname, "localhost"); - } else { -+#if defined(__solaris__) -+ // try to resolve hostname via nameservice -+ // if it is known but getnameinfo fails, hostname will still be the -+ // value from gethostname - struct addrinfo hints, *res; -- int error; - -+ // make sure string is null-terminated - hostname[NI_MAXHOST] = '\0'; - memset(&hints, 0, sizeof(hints)); - hints.ai_flags = AI_CANONNAME; - hints.ai_family = AF_INET; - -- error = getaddrinfo(hostname, NULL, &hints, &res); -- -- if (error == 0) {/* host is known to name service */ -- getnameinfo(res->ai_addr, -- res->ai_addrlen, -- hostname, -- NI_MAXHOST, -- NULL, -- 0, -- NI_NAMEREQD); -- -- /* if getnameinfo fails hostname is still the value -- from gethostname */ -- -+ if (getaddrinfo(hostname, NULL, &hints, &res) == 0) { -+ getnameinfo(res->ai_addr, res->ai_addrlen, hostname, NI_MAXHOST, -+ NULL, 0, NI_NAMEREQD); - freeaddrinfo(res); - } -+#else -+ // make sure string is null-terminated -+ hostname[NI_MAXHOST] = '\0'; -+#endif - } - return (*env)->NewStringUTF(env, hostname); - }