From e05857f839a25c6061af62ddee61fbdb0938d115 Mon Sep 17 00:00:00 2001 From: Jacob Wang Date: Wed, 23 Jul 2025 10:23:29 +0800 Subject: [PATCH 1/3] [CVE]update to java-1.8.0-openjdk-1.8.0.462.b08-2 to #ICO68W update to java-1.8.0-openjdk-1.8.0.462.b08-2 for CVE-2025-30749 CVE-2025-30754 CVE-2025-30761 CVE-2025-50106 Project: TC2024080204 Signed-off-by: Jacob Wang --- NEWS | 95 +++++++++++++++++++++++++++ download | 2 +- java-1.8.0-openjdk-portable.specfile | 17 ++++- java-1.8.0-openjdk.spec | 61 +++++++++-------- jdk8339414-fix_8202369_backport.patch | 63 ++++++++++++++++++ 5 files changed, 204 insertions(+), 34 deletions(-) create mode 100644 jdk8339414-fix_8202369_backport.patch diff --git a/NEWS b/NEWS index d8b827e..0a796bb 100644 --- a/NEWS +++ b/NEWS @@ -3,6 +3,101 @@ Key: JDK-X - https://bugs.openjdk.java.net/browse/JDK-X CVE-XXXX-YYYY: https://cve.mitre.org/cgi-bin/cvename.cgi?name=XXXX-YYYY +New in release OpenJDK 8u462 (2025-07-15): +=========================================== +Live versions of these release notes can be found at: + * https://bit.ly/openjdk8u462 + +* CVEs + - CVE-2025-30749 + - CVE-2025-30754 + - CVE-2025-30761 + - CVE-2025-50106 +* Changes + - JDK-8026976: ECParameters, Point does not match field size + - JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java failed + - JDK-8046883: com/sun/jdi/ProcessAttachTest.sh gets "java.io.IOException: Invalid process identifier" on windows + - JDK-8071996: split_if accesses NULL region of ConstraintCast + - JDK-8159694: HiDPI, Unity, java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java + - JDK-8186143: keytool -ext option doesn't accept wildcards for DNS subject alternative names + - JDK-8186787: clang-4.0 SIGSEGV in Unsafe_PutByte + - JDK-8248001: javadoc generates invalid HTML pages whose ftp:// links are broken + - JDK-8274597: Some of the dnd tests time out and fail intermittently + - JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/SurrogateTest.java test + - JDK-8278472: Invalid value set to CANDIDATEFORM structure + - JDK-8293107: GHA: Bump to Ubuntu 22.04 + - JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts + - JDK-8303770: Remove Baltimore root certificate expiring in May 2025 + - JDK-8341946: [8u] sun/security/pkcs11/ec/ tests fail on RHEL9 + - JDK-8345133: Test sun/security/tools/jarsigner/TsacertOptionTest.java failed: Warning found in stdout + - JDK-8345625: Better HTTP connections + - JDK-8346887: DrawFocusRect() may cause an assertion failure + - JDK-8348989: Better Glyph drawing + - JDK-8349111: Enhance Swing supports + - JDK-8349594: Enhance TLS protocol support + - JDK-8350498: Remove two Camerfirma root CA certificates + - JDK-8351098: Bump update version of OpenJDK: 8u462 + - JDK-8351422: Improve scripting supports + - JDK-8351439: [8u] test/java/util/TimeZone/tools/share/Makefile use wrong path to tzdb + - JDK-8352716: (tz) Update Timezone Data to 2025b + - JDK-8356096: ISO 4217 Amendment 179 Update + - JDK-8359170: Add 2 TLS and 2 CS Sectigo roots + - JDK-8360147: Better Glyph drawing redux + +Notes on individual issues: +=========================== + +security-libs/java.security: + +JDK-8303770: Remove Baltimore root certificate expiring in May 2025 +=================================================================== +The following root certificate from Baltimore has been removed from +the `cacerts` keystore: + +Alias Name: baltimorecybertrustca [jdk] +Distinguished Name: CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE + +JDK-8350498: Remove two Camerfirma root CA certificates +======================================================= +The following expired root certificates from Camerfirma have been +removed from the `cacerts` keystore: + +Alias name: camerfirmachamberscommerceca [jdk] +CN=Chambers of Commerce Root +OU=http://www.chambersign.org +O=AC Camerfirma SA CIF A82743287 +C=EU +SHA256: 0C:25:8A:12:A5:67:4A:EF:25:F2:8B:A7:DC:FA:EC:EE:A3:48:E5:41:E6:F5:CC:4E:E6:3B:71:B3:61:60:6A:C3 + +Alias name: camerfirmachambersignca [jdk] +CN=Global Chambersign Root - 2008 +O=AC Camerfirma S.A. +SERIALNUMBER=A82743287 +L=Madrid (see current address at www.camerfirma.com/address) +C=EU +SHA256: 13:63:35:43:93:34:A7:69:80:16:A0:D3:24:DE:72:28:4E:07:9D:7B:52:20:BB:8F:BD:74:78:16:EE:BE:BA:CA + +JDK-8359170: Add 2 TLS and 2 CS Sectigo roots +============================================= +The following root certificates have been added to the cacerts +truststore: + +Name: Sectigo Limited +Alias Name: sectigocodesignroote46 +Distinguished Name: CN=Sectigo Public Code Signing Root E46, O=Sectigo Limited, C=GB + +Name: Sectigo Limited +Alias Name: sectigocodesignrootr46 +Distinguished Name: CN=Sectigo Public Code Signing Root R46, O=Sectigo Limited, C=GB + +Name: Sectigo Limited +Alias Name: sectigotlsroote46 +Distinguished Name: Sectigo Public Server Authentication Root E46, O=Sectigo Limited, C=GB + +Name: Sectigo Limited +Alias Name: sectigotlsrootr46 +Distinguished Name: Sectigo Public Server Authentication Root R46, O=Sectigo Limited, C=GB + New in release OpenJDK 8u452 (2025-04-15): =========================================== Live versions of these release notes can be found at: diff --git a/download b/download index 7eecc38..27bb89c 100644 --- a/download +++ b/download @@ -1,2 +1,2 @@ -fef57f31111866a2470881a03376d4a1 shenandoah8u452-b09.tar.xz +58c09cbadbdc66c7b849667bc3cd26f3 shenandoah8u462-b08.tar.xz 870d829d8e1c38e251cc7498032a768a tapsets-icedtea-3.15.0.tar.xz diff --git a/java-1.8.0-openjdk-portable.specfile b/java-1.8.0-openjdk-portable.specfile index 9315c28..faf0a5b 100644 --- a/java-1.8.0-openjdk-portable.specfile +++ b/java-1.8.0-openjdk-portable.specfile @@ -269,7 +269,7 @@ # Define version of OpenJDK 8 used %global project openjdk %global repo shenandoah-jdk8u -%global openjdk_revision 8u452-b09 +%global openjdk_revision 8u462-b08 %global shenandoah_revision shenandoah%{openjdk_revision} # Define IcedTea version used for SystemTap tapsets and desktop file %global icedteaver 3.15.0 @@ -601,13 +601,14 @@ Patch15: jdk8141590-bundle_libffi-followup.patch ############################################# # -# Patches appearing in 8u382 +# Patches appearing in 8u472 # # This section includes patches which are present # in the listed OpenJDK 8u release and should be # able to be removed once that release is out # and used by this RPM. ############################################# +Patch901: jdk8339414-fix_8202369_backport.patch ############################################# # @@ -882,6 +883,11 @@ pushd %{top_level_dir_name} %patch -P15 -p1 popd +# Early fixes +pushd %{top_level_dir_name} +%patch -P901 -p1 +popd + pushd %{top_level_dir_name} # Add crypto policy and FIPS support %patch -P1001 -p1 @@ -1547,6 +1553,13 @@ done %endif %changelog +* Thu Jul 10 2025 Andrew Hughes - 1:1.8.0.462.b08-1 +- Update to 8u462-b08 (GA) +- Update release notes for 8u462-b08. +- Add early backport of JDK-8339414 +- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** +- Resolves: OPENJDK-3965 + * Fri Apr 11 2025 Andrew Hughes - 1:1.8.0.452.b09-1 - Update to 8u452-b09 (GA) - Update release notes for 8u452-b09. diff --git a/java-1.8.0-openjdk.spec b/java-1.8.0-openjdk.spec index ef1f2f3..11023be 100644 --- a/java-1.8.0-openjdk.spec +++ b/java-1.8.0-openjdk.spec @@ -1,4 +1,3 @@ -%define anolis_release .0.2 # To rebuild this RPM, you must first rebuild the portable # RPM using the java-1.8.0-openjdk-portable.specfile, install # it and then adjust portablerelease and portablesuffix @@ -109,11 +108,11 @@ # Set of architectures which support multiple ABIs %global multilib_arches %{power64} sparc64 x86_64 # Set of architectures for which we build slowdebug builds -%global debug_arches %{ix86} x86_64 sparcv9 sparc64 %{aarch64} %{power64} loongarch64 +%global debug_arches %{ix86} x86_64 sparcv9 sparc64 %{aarch64} %{power64} # Set of architectures for which we build fastdebug builds -%global fastdebug_arches x86_64 ppc64le aarch64 loongarch64 +%global fastdebug_arches x86_64 ppc64le aarch64 # Set of architectures with a Just-In-Time (JIT) compiler -%global jit_arches %{aarch64} %{ix86} %{power64} sparcv9 sparc64 x86_64 loongarch64 +%global jit_arches %{aarch64} %{ix86} %{power64} sparcv9 sparc64 x86_64 # Set of architectures which use the Zero assembler port (!jit_arches) %global zero_arches %{arm} ppc s390 s390x # Set of architectures which run a full bootstrap cycle @@ -121,11 +120,11 @@ # Set of architectures which support SystemTap tapsets %global systemtap_arches %{jit_arches} # Set of architectures which support the serviceability agent -%global sa_arches %{ix86} x86_64 sparcv9 sparc64 %{aarch64} loongarch64 +%global sa_arches %{ix86} x86_64 sparcv9 sparc64 %{aarch64} # Set of architectures which support class data sharing # See https://bugzilla.redhat.com/show_bug.cgi?id=513605 # MetaspaceShared::generate_vtable_methods is not implemented for the PPC JIT -%global share_arches %{ix86} x86_64 sparcv9 sparc64 %{aarch64} loongarch64 +%global share_arches %{ix86} x86_64 sparcv9 sparc64 %{aarch64} # Set of architectures which support Java Flight Recorder (JFR) %global jfr_arches %{jit_arches} # Set of architectures for which alt-java has SSB mitigation @@ -133,7 +132,7 @@ # Set of architectures where we verify backtraces with gdb %global gdb_arches %{jit_arches} %{zero_arches} # Set of architectures for which we have a portable build -%global portable_build_arches %{aarch64} %{ix86} %{power64} x86_64 %{zero_arches} loongarch64 +%global portable_build_arches %{aarch64} %{ix86} %{power64} x86_64 %{zero_arches} # Architecture on which we run Java only tests %global jdk_test_arch x86_64 @@ -272,10 +271,6 @@ %global archinstall aarch64 %global stapinstall arm64 %endif -%ifarch loongarch64 -%global archinstall loongarch64 -%global stapinstall loongarch64 -%endif # 32 bit sparc, optimized for v9 %ifarch sparcv9 %global archinstall sparc @@ -304,7 +299,7 @@ # Define version of OpenJDK 8 used %global project openjdk %global repo shenandoah-jdk8u -%global openjdk_revision 8u452-b09 +%global openjdk_revision 8u462-b08 %global shenandoah_revision shenandoah%{openjdk_revision} # Define IcedTea version used for SystemTap tapsets and desktop files %global icedteaver 3.15.0 @@ -353,8 +348,9 @@ # rpmrelease numbering must start at 2 to be later than the 8.6 RPM %global rpmrelease 2 # Settings used by the portable build -%global portablerelease 1%{anolis_release} -%global portablesuffix an8 +%global portablerelease 1 +%global portablerhel 8 +%global portablesuffix el%{portablerhel} %global portablebuilddir /builddir/build/BUILD # Define milestone (EA for pre-releases, GA ("fcs") for releases) @@ -934,9 +930,7 @@ exit 0 %endif %{_jvmdir}/%{jredir -- %{?1}}/lib/%{archinstall}/libsctp.so %{_jvmdir}/%{jredir -- %{?1}}/lib/%{archinstall}/libsunec.so -%ifnarch loongarch64 %{_jvmdir}/%{jredir -- %{?1}}/lib/%{archinstall}/libsystemconf.so -%endif %{_jvmdir}/%{jredir -- %{?1}}/lib/%{archinstall}/libunpack.so %{_jvmdir}/%{jredir -- %{?1}}/lib/%{archinstall}/libverify.so %{_jvmdir}/%{jredir -- %{?1}}/lib/%{archinstall}/libzip.so @@ -1169,8 +1163,8 @@ Provides: jre%{?1} = %{epoch}:%{javaver} Requires: ca-certificates # Require javapackages-filesystem for ownership of /usr/lib/jvm/ Requires: javapackages-filesystem -# 2025a required as of JDK-8347965 -Requires: tzdata-java >= 2025a +# 2025b required as of JDK-8352716 +Requires: tzdata-java >= 2025b # for support of kernel stream control # libsctp.so.1 is being `dlopen`ed on demand Requires: lksctp-tools%{?_isa} @@ -1299,7 +1293,7 @@ Provides: java-%{javaver}-%{origin}-accessibility = %{epoch}:%{version}-%{releas Name: java-%{javaver}-%{origin} Version: %{javaver}.%{updatever}.%{buildver} -Release: %{?eaprefix}%{rpmrelease}%{?extraver}%{anolis_release}%{?dist} +Release: %{?eaprefix}%{rpmrelease}%{?extraver}%{?dist} # Equivalent for the portable build %global prelease %{?eaprefix}%{portablerelease}%{?extraver} # java-1.5.0-ibm from jpackage.org set Epoch to 1 for unknown reasons @@ -1512,13 +1506,14 @@ Patch15: jdk8141590-bundle_libffi-followup.patch ############################################# # -# Patches appearing in 8u382 +# Patches appearing in 8u472 # # This section includes patches which are present # in the listed OpenJDK 8u release and should be # able to be removed once that release is out # and used by this RPM. ############################################# +Patch901: jdk8339414-fix_8202369_backport.patch ############################################# @@ -1913,10 +1908,8 @@ ln -s %{top_level_dir_name} openjdk # # the configure macro will do this too, but it also passes a few flags not # supported by openjdk configure script -%ifnarch loongarch64 cp %{SOURCE100} %{top_level_dir_name}/common/autoconf/build-aux/ cp %{SOURCE101} %{top_level_dir_name}/common/autoconf/build-aux/ -%endif # OpenJDK patches @@ -1947,7 +1940,6 @@ sh %{SOURCE12} %patch -P204 %endif -%ifnarch loongarch64 %patch -P1 %patch -P5 @@ -1978,17 +1970,19 @@ pushd %{top_level_dir_name} %patch -P14 -p1 %patch -P15 -p1 popd -%endif pushd %{top_level_dir_name} # Add crypto policy and FIPS support -%ifnarch loongarch64 %patch -P1001 -p1 # nss.cfg PKCS11 support; must come last as it also alters java.security %patch -P1000 -p1 # system cacerts support %patch -P539 -p1 -%endif +popd + +# Upstreamed fixes +pushd %{top_level_dir_name} +%patch -P901 -p1 popd # RPM-only fixes @@ -2716,11 +2710,16 @@ cjc.mainProgram(args) %endif %changelog -* Mon May 12 2025 Xiang Zhai - 1:1.8.0.452.b09-1.0.2 -- Add loongarch64 base support - -* Mon May 12 2025 Jacob Wang - 1:1.8.0.452.b09-1.0.1 -- Update portable pkg dist +* Thu Jul 10 2025 Andrew Hughes - 1:1.8.0.462.b08-1 +- Update to 8u462-b08 (GA) +- Update release notes for 8u462-b08. +- Require tzdata 2025b due to upstream inclusion of JDK-8352716 +- Add early backport of JDK-8339414 +- Sync the copy of the portable specfile with the latest update +- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** +- Resolves: RHEL-101654 +- Resolves: RHEL-102307 +- Resolves: RHEL-102907 * Fri Apr 11 2025 Andrew Hughes - 1:1.8.0.452.b09-1 - Update to 8u452-b09 (GA) diff --git a/jdk8339414-fix_8202369_backport.patch b/jdk8339414-fix_8202369_backport.patch new file mode 100644 index 0000000..3250ef4 --- /dev/null +++ b/jdk8339414-fix_8202369_backport.patch @@ -0,0 +1,63 @@ +commit 51b6307937d9584f8690e4916444e479eeafff28 +Author: Thomas Fitzsimmons +Date: Mon Jun 16 23:04:07 2025 +0000 + + 8339414: Fix JDK-8202369 incorrect backport for 8u + + Reviewed-by: andrew + +diff --git a/jdk/src/solaris/native/java/net/Inet4AddressImpl.c b/jdk/src/solaris/native/java/net/Inet4AddressImpl.c +index e30851df576..8b2e3cdce93 100644 +--- a/jdk/src/solaris/native/java/net/Inet4AddressImpl.c ++++ b/jdk/src/solaris/native/java/net/Inet4AddressImpl.c +@@ -332,37 +332,33 @@ Java_java_net_Inet4AddressImpl_getHostByAddr(JNIEnv *env, jobject this, + */ + JNIEXPORT jstring JNICALL + Java_java_net_Inet4AddressImpl_getLocalHostName(JNIEnv *env, jobject this) { +- char hostname[NI_MAXHOST+1]; ++ char hostname[NI_MAXHOST + 1]; + + hostname[0] = '\0'; + if (JVM_GetHostName(hostname, sizeof(hostname))) { +- /* Something went wrong, maybe networking is not setup? */ + strcpy(hostname, "localhost"); + } else { ++#if defined(__solaris__) ++ // try to resolve hostname via nameservice ++ // if it is known but getnameinfo fails, hostname will still be the ++ // value from gethostname + struct addrinfo hints, *res; +- int error; + ++ // make sure string is null-terminated + hostname[NI_MAXHOST] = '\0'; + memset(&hints, 0, sizeof(hints)); + hints.ai_flags = AI_CANONNAME; + hints.ai_family = AF_INET; + +- error = getaddrinfo(hostname, NULL, &hints, &res); +- +- if (error == 0) {/* host is known to name service */ +- getnameinfo(res->ai_addr, +- res->ai_addrlen, +- hostname, +- NI_MAXHOST, +- NULL, +- 0, +- NI_NAMEREQD); +- +- /* if getnameinfo fails hostname is still the value +- from gethostname */ +- ++ if (getaddrinfo(hostname, NULL, &hints, &res) == 0) { ++ getnameinfo(res->ai_addr, res->ai_addrlen, hostname, NI_MAXHOST, ++ NULL, 0, NI_NAMEREQD); + freeaddrinfo(res); + } ++#else ++ // make sure string is null-terminated ++ hostname[NI_MAXHOST] = '\0'; ++#endif + } + return (*env)->NewStringUTF(env, hostname); + } -- Gitee From d875c7102ebf7452d55dd9a401ec86adb9d663cf Mon Sep 17 00:00:00 2001 From: Jacob Wang Date: Sat, 1 Jul 2023 20:10:54 +0800 Subject: [PATCH 2/3] Update dist for portable pkg Signed-off-by: Jacob Wang --- java-1.8.0-openjdk.spec | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/java-1.8.0-openjdk.spec b/java-1.8.0-openjdk.spec index 11023be..8ece837 100644 --- a/java-1.8.0-openjdk.spec +++ b/java-1.8.0-openjdk.spec @@ -1,3 +1,4 @@ +%define anolis_release .0.1 # To rebuild this RPM, you must first rebuild the portable # RPM using the java-1.8.0-openjdk-portable.specfile, install # it and then adjust portablerelease and portablesuffix @@ -348,9 +349,8 @@ # rpmrelease numbering must start at 2 to be later than the 8.6 RPM %global rpmrelease 2 # Settings used by the portable build -%global portablerelease 1 -%global portablerhel 8 -%global portablesuffix el%{portablerhel} +%global portablerelease 1%{anolis_release} +%global portablesuffix an8 %global portablebuilddir /builddir/build/BUILD # Define milestone (EA for pre-releases, GA ("fcs") for releases) @@ -1293,7 +1293,7 @@ Provides: java-%{javaver}-%{origin}-accessibility = %{epoch}:%{version}-%{releas Name: java-%{javaver}-%{origin} Version: %{javaver}.%{updatever}.%{buildver} -Release: %{?eaprefix}%{rpmrelease}%{?extraver}%{?dist} +Release: %{?eaprefix}%{rpmrelease}%{?extraver}%{anolis_release}%{?dist} # Equivalent for the portable build %global prelease %{?eaprefix}%{portablerelease}%{?extraver} # java-1.5.0-ibm from jpackage.org set Epoch to 1 for unknown reasons @@ -2710,6 +2710,9 @@ cjc.mainProgram(args) %endif %changelog +* Thu Jul 31 2025 Jacob Wang - 1:1.8.0.462.b08-1.0.1 +- Update portable pkg dist + * Thu Jul 10 2025 Andrew Hughes - 1:1.8.0.462.b08-1 - Update to 8u462-b08 (GA) - Update release notes for 8u462-b08. -- Gitee From 851a737646b2368d14e0a6c8038afae2883d3cba Mon Sep 17 00:00:00 2001 From: zhaixiang Date: Thu, 22 Feb 2024 16:33:21 +0800 Subject: [PATCH 3/3] Add loongarch64 base support --- java-1.8.0-openjdk.spec | 25 +++++++++++++++++++------ 1 file changed, 19 insertions(+), 6 deletions(-) diff --git a/java-1.8.0-openjdk.spec b/java-1.8.0-openjdk.spec index 8ece837..c027235 100644 --- a/java-1.8.0-openjdk.spec +++ b/java-1.8.0-openjdk.spec @@ -109,11 +109,11 @@ # Set of architectures which support multiple ABIs %global multilib_arches %{power64} sparc64 x86_64 # Set of architectures for which we build slowdebug builds -%global debug_arches %{ix86} x86_64 sparcv9 sparc64 %{aarch64} %{power64} +%global debug_arches %{ix86} x86_64 sparcv9 sparc64 %{aarch64} %{power64} loongarch64 # Set of architectures for which we build fastdebug builds -%global fastdebug_arches x86_64 ppc64le aarch64 +%global fastdebug_arches x86_64 ppc64le aarch64 loongarch64 # Set of architectures with a Just-In-Time (JIT) compiler -%global jit_arches %{aarch64} %{ix86} %{power64} sparcv9 sparc64 x86_64 +%global jit_arches %{aarch64} %{ix86} %{power64} sparcv9 sparc64 x86_64 loongarch64 # Set of architectures which use the Zero assembler port (!jit_arches) %global zero_arches %{arm} ppc s390 s390x # Set of architectures which run a full bootstrap cycle @@ -121,11 +121,11 @@ # Set of architectures which support SystemTap tapsets %global systemtap_arches %{jit_arches} # Set of architectures which support the serviceability agent -%global sa_arches %{ix86} x86_64 sparcv9 sparc64 %{aarch64} +%global sa_arches %{ix86} x86_64 sparcv9 sparc64 %{aarch64} loongarch64 # Set of architectures which support class data sharing # See https://bugzilla.redhat.com/show_bug.cgi?id=513605 # MetaspaceShared::generate_vtable_methods is not implemented for the PPC JIT -%global share_arches %{ix86} x86_64 sparcv9 sparc64 %{aarch64} +%global share_arches %{ix86} x86_64 sparcv9 sparc64 %{aarch64} loongarch64 # Set of architectures which support Java Flight Recorder (JFR) %global jfr_arches %{jit_arches} # Set of architectures for which alt-java has SSB mitigation @@ -133,7 +133,7 @@ # Set of architectures where we verify backtraces with gdb %global gdb_arches %{jit_arches} %{zero_arches} # Set of architectures for which we have a portable build -%global portable_build_arches %{aarch64} %{ix86} %{power64} x86_64 %{zero_arches} +%global portable_build_arches %{aarch64} %{ix86} %{power64} x86_64 %{zero_arches} loongarch64 # Architecture on which we run Java only tests %global jdk_test_arch x86_64 @@ -272,6 +272,10 @@ %global archinstall aarch64 %global stapinstall arm64 %endif +%ifarch loongarch64 +%global archinstall loongarch64 +%global stapinstall loongarch64 +%endif # 32 bit sparc, optimized for v9 %ifarch sparcv9 %global archinstall sparc @@ -930,7 +934,9 @@ exit 0 %endif %{_jvmdir}/%{jredir -- %{?1}}/lib/%{archinstall}/libsctp.so %{_jvmdir}/%{jredir -- %{?1}}/lib/%{archinstall}/libsunec.so +%ifnarch loongarch64 %{_jvmdir}/%{jredir -- %{?1}}/lib/%{archinstall}/libsystemconf.so +%endif %{_jvmdir}/%{jredir -- %{?1}}/lib/%{archinstall}/libunpack.so %{_jvmdir}/%{jredir -- %{?1}}/lib/%{archinstall}/libverify.so %{_jvmdir}/%{jredir -- %{?1}}/lib/%{archinstall}/libzip.so @@ -1908,8 +1914,10 @@ ln -s %{top_level_dir_name} openjdk # # the configure macro will do this too, but it also passes a few flags not # supported by openjdk configure script +%ifnarch loongarch64 cp %{SOURCE100} %{top_level_dir_name}/common/autoconf/build-aux/ cp %{SOURCE101} %{top_level_dir_name}/common/autoconf/build-aux/ +%endif # OpenJDK patches @@ -1940,6 +1948,7 @@ sh %{SOURCE12} %patch -P204 %endif +%ifnarch loongarch64 %patch -P1 %patch -P5 @@ -1970,14 +1979,17 @@ pushd %{top_level_dir_name} %patch -P14 -p1 %patch -P15 -p1 popd +%endif pushd %{top_level_dir_name} # Add crypto policy and FIPS support +%ifnarch loongarch64 %patch -P1001 -p1 # nss.cfg PKCS11 support; must come last as it also alters java.security %patch -P1000 -p1 # system cacerts support %patch -P539 -p1 +%endif popd # Upstreamed fixes @@ -2712,6 +2724,7 @@ cjc.mainProgram(args) %changelog * Thu Jul 31 2025 Jacob Wang - 1:1.8.0.462.b08-1.0.1 - Update portable pkg dist +- Add loongarch64 base support * Thu Jul 10 2025 Andrew Hughes - 1:1.8.0.462.b08-1 - Update to 8u462-b08 (GA) -- Gitee