|
|
 |
|
|
Changelog for java-17-openjdk-portable-devel-fastdebug-17.0.12.0.7-1.el8.x86_64.rpm :
* Wed Jul 10 2024 Thomas Fitzsimmons - 1:17.0.12.0.7-1- Update to jdk-17.0.12+7 (GA)- Update .gitignore to ignore openjdk-17.0.12+7.tar.xz- Update NEWS for 17.0.12+7 (GA)- Set buildver to 7- Set rpmrelease to 1- Set is_ga to 1- Update sources to openjdk-17.0.12+7.tar.xz-
*
* This tarball is embargoed until 2024-07-16 AATT 1pm PT.
*
*
* Mon Jul 08 2024 Andrew Hughes - 1:17.0.12.0.6-0.2.ea- Adjusted DTLS NEWS entry style to match other entries
* Mon Jul 08 2024 Andrew Hughes - 1:17.0.12.0.6-0.2.ea- NEWS: Import 21 entries for JDK-8256660, JDK-8326891, JDK-8325496, JDK-8281658, and JDK-8315503, use 21 formatting for JDK-8256660, JDK-8316138
* Mon Jul 08 2024 Thomas Fitzsimmons - 1:17.0.12.0.6-0.2.ea- Bump rpmrelease to 2- NEWS: Reword JDK-8256660 entry, add JDK-8316138 entry
* Thu Jun 27 2024 Thomas Fitzsimmons - 1:17.0.12.0.6-0.1.ea- Update to jdk-17.0.12+6 (EA)- Update .gitignore to ignore openjdk-17.0.12+6-ea.tar.xz- Update buildver to 6- Reset rpmrelease to 1- Update sources to openjdk-17.0.12+6-ea.tar.xz- Update NEWS for 17.0.12+6- Remove --enable-compatible-cds-alignment configure option- Resolves: OPENJDK-3134
* Wed Jun 26 2024 Thomas Fitzsimmons - 1:17.0.12.0.5-0.3.ea- Add upstream patch that removes illegal RLO Unicode characters- Related: OPENJDK-2904
* Mon Jun 24 2024 Thomas Fitzsimmons - 1:17.0.12.0.5-0.3.ea- Add build requirement for zlib-devel- Related: OPENJDK-3065
* Fri Jun 14 2024 Andrew Hughes - 1:17.0.12.0.5-0.3.ea- Re-run jlink to regenerate the jmods directory and lib/modules with stripped libraries- Resolves: OPENJDK-3055
* Fri Jun 14 2024 Thomas Fitzsimmons - 1:17.0.12.0.5-0.3.ea- Bump rpmrelease to 3
* Fri Jun 14 2024 Thomas Fitzsimmons - 1:17.0.12.0.5-0.2.ea- Delete fips-17u-d63771ea660.patch- Use fips-17u-e893be00150.patch, rebased to jdk-17.0.12+2- fips-17u-e893be00150.patch was already committed with \"Use 2.16.0...lcms2\"- Update fipsver to e893be00150
* Thu Jun 06 2024 Anton Bobrov - 1:17.0.12.0.5-0.2.ea- generate_source_tarball.sh: Use tar exclude options for VCS files- generate_source_tarball.sh: Improve VCS exclusion
* Thu Jun 06 2024 Andrew Hughes - 1:17.0.12.0.5-0.2.ea- generate_source_tarball.sh: Update examples in header for clarity- generate_source_tarball.sh: Cleanup message issued when checkout already exists- generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP- generate_source_tarball.sh: Only add --depth=1 on non-local repositories- icedtea_sync.sh: Reinstate from rhel-8.9.0 branch- Move maintenance scripts to a scripts subdirectory- discover_trees.sh: Set compile-command and indentation instructions for Emacs- discover_trees.sh: shellcheck: Do not use -o (SC2166)- discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)- discover_trees.sh: shellcheck: Double-quote variable references (SC2086)- generate_source_tarball.sh: Add authorship- icedtea_sync.sh: Set compile-command and indentation instructions for Emacs- icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)- icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)- openjdk_news.sh: Set compile-command and indentation instructions for Emacs- openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)- openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)- openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)- generate_source_tarball.sh: Output values of new options WITH_TEMP and OPENJDK_LATEST- generate_source_tarball.sh: Double-quote DEPTH reference (SC2086)- generate_source_tarball.sh: Avoid empty DEPTH reference while still appeasing shellcheck
* Mon Jun 03 2024 Thomas Fitzsimmons - 1:17.0.12.0.5-0.2.ea- Bump rpmrelease to 2- Sync generate_source_tarball.sh from Fedora rawhide
* Wed May 29 2024 Thomas Fitzsimmons - 1:17.0.12.0.5-0.1.ea- Update to jdk-17.0.12+5 (EA)- Update .gitignore to ignore openjdk-17.0.12+5-ea.tar.xz- Update buildver to 5- Update sources to openjdk-17.0.12+5-ea.tar.xz- Update NEWS for 17.0.12+5
* Wed May 29 2024 Thomas Fitzsimmons - 1:17.0.12.0.4-0.1.ea- Change a fix-me comment to a note instead
* Thu May 23 2024 Thomas Fitzsimmons - 1:17.0.12.0.4-0.1.ea- Update to jdk-17.0.12+4 (EA)- Update .gitignore to ignore openjdk-17.0.12+4-ea.tar.xz- Update buildver to 4- Update sources to openjdk-17.0.12+4-ea.tar.xz- Update NEWS for 17.0.12+4
* Wed May 22 2024 Thomas Fitzsimmons - 1:17.0.12.0.3-0.1.ea- Update to jdk-17.0.12+3 (EA)- Update .gitignore to ignore openjdk-17.0.12+3-ea.tar.xz- Update buildver to 3- Update sources to openjdk-17.0.12+3-ea.tar.xz- Update NEWS for 17.0.12+3
* Wed May 15 2024 Thomas Fitzsimmons - 1:17.0.12.0.2-0.1.ea- Use component in EPEL and Fedora bug URLs- Label as error a designator mismatch
* Mon May 13 2024 Thomas Fitzsimmons - 1:17.0.12.0.2-0.1.ea- Use lcms2.h for bundled provides version reference- Use 2.16.0, not 2.16, for lcms2 version- Use zlib.h for bundled provides version reference- Use freetype.h for bundled provides version reference- Remove remove-test-left-to-right-override-character.patch
* Fri May 10 2024 Thomas Fitzsimmons - 1:17.0.12.0.2-0.1.ea- Update to jdk-17.0.12+2 (EA)- Update .gitignore to ignore openjdk-17.0.12+2-ea.tar.xz- Update buildver to 2- Update sources to openjdk-17.0.12+2-ea.tar.xz- Update NEWS for 17.0.12+2- Add --enable-compatible-cds-alignment configure option (OPENJDK-3007)- Add remove-test-left-to-right-override-character.patch- Add remove-test-left-to-right-override-character.patch file- Remove tzdata build requires (OPENJDK-2843)
* Fri May 10 2024 Thomas Fitzsimmons - 1:17.0.12.0.1-0.1.ea- Update lcms2 version location comment- Update lcms2 bundled provides to 2.16- Add zlib 1.3.1 bundled provides
* Thu May 09 2024 Thomas Fitzsimmons - 1:17.0.12.0.1-0.1.ea- Update to jdk-17.0.12+1 (EA)- Update .gitignore to ignore openjdk-17.0.12+1-ea.tar.xz- Bump updatever to 12- Reset buildver to 1- Reset rpmrelease to 1- Reset is_ga to 0- Update sources to openjdk-17.0.12+1-ea.tar.xz- Update NEWS for 17.0.12+1- Fix fips-17u-d63771ea660.patch so that it applies to 17.0.12+1
* Thu Apr 18 2024 Andrew Hughes - 1:17.0.11.0.9-4- Sync release notes with upstream version: https://bit.ly/openjdk17011
* Wed Apr 10 2024 Thomas Fitzsimmons - 1:17.0.11.0.9-3- BuildRequires tzdata-java >= 2024a (JDK-8325150)
* Wed Apr 10 2024 Thomas Fitzsimmons - 1:17.0.11.0.9-2- NEWS: Add CVEs- NEWS: Remove backed out items from changes section- NEWS: Remove release note for JDK-8225377, which was backed out
* Tue Apr 09 2024 Thomas Fitzsimmons - 1:17.0.11.0.9-1- Update to jdk-17.0.11+9 (GA)- Update NEWS for 17.0.11+9- Switch to GA mode for release-
*
* This tarball is embargoed until 2024-04-16 AATT 1pm PT.
*
*
* Thu Apr 04 2024 Thomas Fitzsimmons - 1:17.0.11.0.7-0.1.ea- Import like NEWS entries verbatim from 21.0.3
* Thu Mar 28 2024 Thomas Fitzsimmons - 1:17.0.11.0.7-0.1.ea- Update to jdk-17.0.11+7 (EA)
* Mon Mar 11 2024 Thomas Fitzsimmons - 1:17.0.11.0.6-0.1.ea- Update to jdk-17.0.11+6 (EA)
* Fri Mar 08 2024 Thomas Fitzsimmons - 1:17.0.11.0.5-0.1.ea- Update to jdk-17.0.11+5 (EA)
* Mon Feb 26 2024 Thomas Fitzsimmons - 1:17.0.11.0.4-0.1.ea- Revert: Remove ExcludeArch to match java-21-openjdk
* Wed Feb 21 2024 Thomas Fitzsimmons - 1:17.0.11.0.4-0.1.ea- Update to jdk-17.0.11+4 (EA)
* Wed Feb 14 2024 Thomas Fitzsimmons - 1:17.0.11.0.3-0.1.ea- Update to jdk-17.0.11+3 (EA)
* Fri Feb 09 2024 Thomas Fitzsimmons - 1:17.0.11.0.2-0.1.ea- Remove RH1649512 patch for libjpeg-turbo FAR macro- Add some patch commentary
* Thu Feb 08 2024 Thomas Fitzsimmons - 1:17.0.11.0.2-0.1.ea- Update to jdk-17.0.11+2 (EA)
* Thu Feb 08 2024 Thomas Fitzsimmons - 1:17.0.11.0.1-0.2.ea- generate_source_tarball.sh: Add license- openjdk_news.sh: Use grep -E instead of egrep
* Wed Feb 07 2024 Thomas Fitzsimmons - 1:17.0.11.0.1-0.2.ea- Fix the quoting of hs_err_pid
* Tue Feb 06 2024 Thomas Fitzsimmons - 1:17.0.11.0.1-0.2.ea- Use RHEL-7 tar-1.26-compatible invocations for reproducible tarballs- On RHEL-7 default to building without a fresh libjvm.so
* Mon Feb 05 2024 Andrew Hughes - 1:17.0.11.0.1-0.2.ea- Require tzdata 2023d due to local inclusion of JDK-8322725
* Mon Feb 05 2024 Thomas Fitzsimmons - 1:17.0.11.0.1-0.2.ea- Bump rpmrelease to 2- Move _lto_cflags setting to match its java-21-openjdk location- Remove ExcludeArch to match java-21-openjdk- Update comment and whitespace to match java-21-openjdk- Update NEWS- Remove -T0 argument from systemtap tar invocation- Indent a line in buildjdk- Remove extra stripjdk from merge
* Fri Feb 02 2024 Thomas Fitzsimmons - 1:17.0.11.0.1-0.1.ea- Use --with-source-date=version (OPENJDK-2583, OPENJDK-2730)- Update freetype bundled provides version from 2.13.0 to 2.13.2- Update harfbuzz bundled provides version from 7.2.0 to 8.2.2- Update libpng bundled provides version from 1.6.39 to 1.6.40- Related: OPENJDK-2730
* Thu Feb 01 2024 Jiri Vanek - 1:17.0.11.0.1-0.1.ea- generate_source_tarball.sh: Update version in comment- generate_source_tarball.sh: Remove trailing period in echo
* Thu Feb 01 2024 Andrew Hughes - 1:17.0.11.0.1-0.1.ea- BuildRequires javapackages-filesystem for _jvmdir macro- Automatically turn off building a fresh HotSpot first, if the bootstrap JDK is not the same major version as that being built- Update buildjdkver to match the featurever- Use featurever macro to specify fips patch- Check debug symbols in libnet.a static library as a smoke test- Introduce vm_variant global for consistency with future JDK builds- Related: rhbz#2203412- Introduce tar_opts to shorten tarball creation lines
* Thu Feb 01 2024 Thomas Fitzsimmons - 1:17.0.11.0.1-0.1.ea- NEWS: Add initial changes for 17.0.11- Sync whitespace and comments from java-21-openjdk.spec- Sync macro definition ordering from java-21-openjdk.spec- Correct rh1649512 patch name- Fix comment to match RHEL 9.2.0 branch- Fix icedteaver macro reference syntax- Remove extra slash in use_shenandoah_hotspot JAVA_HOME expansion- Explain patchN syntax situation in a comment- generate_source_tarball.sh: Fix whitespace- generate_source_tarball.sh: Skip -ga tags- generate_source_tarball.sh: Get -ea suffix from version-numbers.conf- generate_source_tarball.sh: Use git archive to generate tarball- generate_source_tarball.sh: Add indentation instructions for Emacs- Default to without fresh_libjvm now that 17.0.9.0.9-1 is staged- double-build.bash: New file- Parallelize xz across all available cores- Remove ppc64le --with-jobs=1 workaround- Make JAR file and portable tarball modification times reproducible
* Wed Jan 31 2024 Thomas Fitzsimmons - 1:17.0.11.0.1-0.1.ea- Update to jdk-17.0.11+1 (EA)
* Thu Jan 11 2024 Andrew Hughes - 1:17.0.10.0.7-1- Update to jdk-17.0.10+7 (GA)- Update release notes to 17.0.10+7- Move to -P usage for patch macro which works on all RPM versions- Re-enable DEFAULT_PROMOTED_VERSION_PRE check disabled for the July 2023 release- Switch to GA mode for release-
*
* This tarball is embargoed until 2024-01-16 AATT 1pm PT.
*
*
* Thu Jan 11 2024 Thomas Fitzsimmons - 1:17.0.10.0.6-0.1.ea- generate_source_tarball.sh: Add note on network usage of OPENJDK_LATEST- generate_source_tarball.sh: Remove unneeded fix-me
* Thu Jan 11 2024 Andrew Hughes - 1:17.0.10.0.6-0.1.ea- Update release notes to 17.0.10+6- Revert change to patch macro due to failure on RHEL 8- generate_source_tarball.sh: Add --sort=name to tar invocation for reproducibility
* Tue Jan 09 2024 Thomas Fitzsimmons - 1:17.0.10.0.6-0.1.ea- Update to jdk-17.0.10+6 (EA)- fips-17u-d63771ea660.patch: Regenerate from gnu-andrew branch- generate_source_tarball.sh: Add WITH_TEMP environment variable- generate_source_tarball.sh: Multithread xz on all available cores- generate_source_tarball.sh: Add OPENJDK_LATEST environment variable- generate_source_tarball.sh: Update comment about tarball naming- generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT- generate_source_tarball.sh: Set compile-command in Emacs- generate_source_tarball.sh: Reformat comment header- generate_source_tarball.sh: Reformat and update help output- generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks- generate_source_tarball.sh: Do a shallow clone, for speed- generate_source_tarball.sh: Append -ea designator when required- generate_source_tarball.sh: Eliminate some removal prompting- generate_source_tarball.sh: Make tarball reproducible- generate_source_tarball.sh: Prefix temporary directory with temp-- generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash- generate_source_tarball.sh: shellcheck: Double-quote variable references- generate_source_tarball.sh: shellcheck: Do not use -a- generate_source_tarball.sh: shellcheck: Do not use $ in expression- generate_source_tarball.sh: Remove temporary directory exit conditions
* Sat Oct 28 2023 Andrew Hughes - 1:17.0.9.0.9-2- Add missing CVE and release note to sync local NEWS with upstream release announcements
* Thu Oct 12 2023 Andrew Hughes - 1:17.0.9.0.9-1- Update to jdk-17.0.9+9 (GA)- Update release notes to 17.0.9+9- Re-generate FIPS patch against 17.0.9+1 following backport of JDK-8209398- Bump libpng version to 1.6.39 following JDK-8305815- Bump HarfBuzz version to 7.2.0 following JDK-8307301- Bump freetype version to 2.13.0 following JDK-8306881- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal- Sync generate_tarball.sh with 11u version- Update bug URL for RHEL to point to the Red Hat customer portal- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball- Use upstream release URL for OpenJDK source- Apply all patches using -p1- Temporarily turn off \'fresh_libjvm\' due to removal of JVM_IsThreadAlive (JDK-8305425)-
*
* This tarball is embargoed until 2023-10-17 AATT 1pm PT.
*
*
* Sat Sep 02 2023 Andrew Hughes - 1:17.0.8.1.1-1- Update to jdk-17.0.8.1+1 (GA)- Update release notes to 17.0.8.1+1- Add backport of JDK-8312489 already upstream in 17.0.10 (see OPENJDK-2095)- Update openjdk_news script to specify subdirectory last- Add missing discover_trees script required by openjdk_news
* Fri Jul 14 2023 Andrew Hughes - 1:17.0.8.0.7-1- Update to jdk-17.0.8+7 (GA)- Update release notes to 17.0.8+7- Switch to GA mode for final release.-
* This tarball is embargoed until 2023-07-18 AATT 1pm PT.
*
* Thu Jul 13 2023 Andrew Hughes - 1:17.0.8.0.6-0.1.ea- Update to jdk-17.0.8+6 (EA)- Update release notes to 17.0.8+6
* Thu Jul 13 2023 Andrew Hughes - 1:17.0.8.0.1-0.3.ea- Make sure the unstripped JDK is customised by the installjdk function
* Wed Jul 12 2023 Andrew Hughes - 1:17.0.8.0.1-0.2.ea- Rebuild jmods using the stripped binaries in release builds- Resolves: OPENJDK-1974
* Tue Jul 04 2023 Andrew Hughes - 1:17.0.8.0.1-0.1.ea- Use absolute path to tapset directory- Drop unused globals for tapset installation
* Tue Jul 04 2023 Andrew Hughes - 1:17.0.8.0.1-0.1.ea- Re-enable SystemTap support and perform only substitutions possible without final NVR available- Depend on graphviz & pandoc for full documentation support- Fix typo which stops the EA designator being included in the build- Include tapsets in the miscellaneous tarball
* Mon Jul 03 2023 Andrew Hughes - 1:17.0.8.0.1-0.1.ea- Update to jdk-17.0.8+1 (EA)- Update release notes to 17.0.8+1- Switch to EA mode- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 17.0.8+1- Bump bundled LCMS version to 2.15 as in jdk-17.0.8+1.- Bump bundled HarfBuzz version to 7.0.1 as in jdk-17.0.8+1
* Tue Apr 25 2023 Andrew Hughes - 1:17.0.7.0.7-2- Update to jdk-17.0.7.0+7- Update release notes to 17.0.7.0+7- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113- Reintroduce generate_source_tarball.sh from RHEL 9- Update generate_tarball.sh to add support for passing a boot JDK to the configure run- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs- Update FIPS support against 17.0.7+6 and bring in latest changes:-
* RH2134669: Add missing attributes when registering services in FIPS mode.-
* test/jdk/sun/security/pkcs11/fips/VerifyMissingAttributes.java: fixed jtreg main class-
* RH1940064: Enable XML Signature provider in FIPS mode-
* RH2173781: Avoid calling C_GetInfo() too early, before cryptoki is initialized- Fix trailing \'.\' in tarball name- Use rpmrelease in vendor version to avoid inclusion of dist tag-
*
* This tarball is embargoed until 2023-04-18 AATT 1pm PT.
*
*- Resolves: rhbz#2185182- Resolves: rhbz#2134669- Resolves: rhbz#1940064- Resolves: rhbz#2173781
* Thu Apr 20 2023 Andrew Hughes - 1:17.0.6.0.10-7- Sync with existing RHEL 8 build, in order to start building portables on RHEL 8- Restore system bootstrap JDK (RHEL 8 has java-17-openjdk)- Remove use of devtoolset (RHEL 8 native compilers should be sufficient)- Explicitly exclude x86, as on RHEL RPMs
* Tue Feb 21 2023 Andrew Hughes - 1:17.0.6.0.10-6- Add docs, icons and samples to the portable output- Make sure generated checksums work and don\'t include full path- The docs directory is a subdirectory of images, so remove confusing separate copying
* Wed Feb 15 2023 Andrew Hughes - 1:17.0.6.0.10-5- Build with internal debuginfo as in RHEL and then create a stripped variant ourselves for the portable release build- Restore compiler flags to those used in RHEL- Drop unused static library patch- Drop syslookup workaround which was fixed by JDK-8276572 over a year ago
* Tue Feb 14 2023 Andrew Hughes - 1:17.0.6.0.10-4- Separate JDK packaging into a separate function- Use variables to make it clearer what is going on- Use a package output directory as we do for building and installing- Workaround missing manpage directory in the JRE image
* Sun Feb 12 2023 Andrew Hughes - 1:17.0.6.0.10-3- Adapt the portable build to use the same system library handling as RHEL builds
* Sat Jan 14 2023 Andrew Hughes - 1:17.0.6.0.10-3- Add missing release note for JDK-8295687- Resolves: rhbz#2160111
* Fri Jan 13 2023 Andrew Hughes - 1:17.0.6.0.10-2- Update FIPS support to bring in latest changes-
* Add nss.fips.cfg support to OpenJDK tree-
* RH2117972: Extend the support for NSS DBs (PKCS11) in FIPS mode-
* Remove forgotten dead code from RH2020290 and RH2104724-
* OJ1357: Fix issue on FIPS with a SecurityManager in place- Drop local nss.fips.cfg.in handling now this is handled in the patched OpenJDK build- Resolves: rhbz#2118493
* Fri Jan 13 2023 Stephan Bergmann - 1:17.0.6.0.10-2- Fix flatpak builds by disabling TestTranslations test due to missing tzdb.dat- Related: rhbz#2160111
* Wed Jan 11 2023 Andrew Hughes - 1:17.0.6.0.10-1- Update to jdk-17.0.6.0+10- Update release notes to 17.0.6.0+10- Re-enable EA upstream status check now it is being actively maintained.- Drop JDK-8294357 (tzdata2022d) & JDK-8295173 (tzdata2022e) local patches which are now upstream- Drop JDK-8275535 local patch now this has been accepted and backported upstream- Drop local copy of JDK-8293834 now this is upstream- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804- Update TestTranslations.java to test the new America/Ciudad_Juarez zone-
*
* This tarball is embargoed until 2023-01-17 AATT 1pm PT.
*
*- Resolves: rhbz#2160111
* Sat Oct 15 2022 Andrew Hughes - 1:17.0.5.0.8-2- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173- Update CLDR data with Europe/Kyiv (JDK-8293834)- Drop JDK-8292223 patch which we found to be unnecessary- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream- Related: rhbz#2160111
* Thu Oct 13 2022 Andrew Hughes - 1:17.0.5.0.8-1- Update to jdk-17.0.5+8 (GA)- Update release notes to 17.0.5+8 (GA)- Switch to GA mode for final release.-
* This tarball is embargoed until 2022-10-18 AATT 1pm PT.
*- Resolves: rhbz#2133695
* Fri Sep 02 2022 Andrew Hughes - 1:17.0.4.1.1-2- Update FIPS support to bring in latest changes-
* RH2023467: Enable FIPS keys export-
* RH2104724: Avoid import/export of DH private keys-
* RH2092507: P11Key.getEncoded does not work for DH keys in FIPS mode-
* Build the systemconf library on all platforms-
* RH2048582: Support PKCS#12 keystores-
* RH2020290: Support TLS 1.3 in FIPS mode- Resolves: rhbz#2123579- Resolves: rhbz#2123580- Resolves: rhbz#2123581- Resolves: rhbz#2123583- Resolves: rhbz#2123584
* Sun Aug 21 2022 Jayashree Huttanagoudar - 1:17.0.4.1.1-1- Added a missing change to portable NEWS file from upstream.
* Sun Aug 21 2022 Andrew Hughes - 1:17.0.4.1.1-1- Update to jdk-17.0.4.1+1- Update release notes to 17.0.4.1+1- Add patch to provide translations for Europe/Kyiv added in tzdata2022b- Add test to ensure timezones can be translated- Resolves: rhbz#2119532
* Mon Jul 18 2022 Jayashree Huttanagoudar - 1:17.0.4.0.8-1- Commented out: fipsver f8142a23d0a which was from rhel-9-main- Picked 17.0.4+8 GA tag from rhel-9.0.0- For Jul 2022 CPU fipsver is 765f970aef1 on rhel-9.0.0
* Mon Jul 18 2022 Andrew Hughes - 1:17.0.4.0.8-1- Update to jdk-17.0.4.0+8 (GA)- Update release notes to 17.0.4.0+8- Need to include the \'.S\' suffix in debuginfo checks after JDK-8284661- Switch to GA mode for release-
*
* This tarball is embargoed until 2022-07-19 AATT 1pm PT.
*
*
* Thu Jul 14 2022 Jayashree Huttanagoudar - 1:17.0.4.0.1-0.2.ea- Fix issue where CheckVendor.java test erroneously passes when it should fail.- Add proper quoting so \'&\' is not treated as a special character by the shell.- Related: rhbz#2084779
* Tue Jul 12 2022 Jayashree Huttanagoudar - 1:17.0.4.0.1-0.1.ea- Tweaked line to print release information for portable
* Tue Jul 12 2022 Andrew Hughes - 1:17.0.4.0.1-0.1.ea- Update to jdk-17.0.4.0+1- Update release notes to 17.0.4.0+1- Switch to EA mode for 17.0.4 pre-release builds.- Print release file during build, which should now include a correct SOURCE value from .src-rev- Update tarball script with IcedTea GitHub URL and .src-rev generation- Include script to generate bug list for release notes- Update tzdata requirement to 2022a to match JDK-8283350- Move EA designator check to prep so failures can be caught earlier- Make EA designator check non-fatal while upstream is not maintaining it- Related: rhbz#2084218
* Thu Jun 30 2022 Jayashree Huttanagoudar - 1:17.0.3.0.7-8- Comment line for portable: System security properties to be off by default
* Thu Jun 30 2022 Francisco Ferrari Bihurriet - 1:17.0.3.0.7-8- RH2007331: SecretKey generate/import operations don\'t add the CKA_SIGN attribute in FIPS mode- Resolves: rhbz#2102433
* Wed Jun 29 2022 Jayashree Huttanagoudar - 1:17.0.3.0.7-7- System security properties are disabled by default on portable.- Commented out lines which are not applicable for portable.
* Wed Jun 29 2022 Andrew Hughes - 1:17.0.3.0.7-7- Update FIPS support to bring in latest changes-
* RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage-
* RH2090378: Revert to disabling system security properties and FIPS mode support together- Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch- Enable system security properties in the RPM (now disabled by default in the FIPS repo)- Improve security properties test to check both enabled and disabled behaviour- Run security properties test with property debugging on- Resolves: rhbz#2099844- Resolves: rhbz#2100677
* Tue Jun 28 2022 Jayashree Huttanagoudar - 1:17.0.3.0.7-6- Removed upstreamed patch2001: aqaCheckSecurityAndProviderFileSocketPermissions.patch
* Sun Jun 12 2022 Andrew Hughes - 1:17.0.3.0.7-6- Rebase FIPS patches from fips-17u branch and simplify by using a single patch from that repository- Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch- RH2023467: Enable FIPS keys export- RH2094027: SunEC runtime permission for FIPS- Resolves: rhbz#2029657- Resolves: rhbz#2096117
* Wed May 25 2022 Andrew Hughes - 1:17.0.3.0.7-5- Exclude s390x from the gdb test on RHEL 7 where we see failures with the portable build
* Tue May 24 2022 Jiri Vanek - 1:17.0.3.0.7-4- to pass aqa, fixing genuie failure in :- java/lang/SecurityManager/CheckAccessClassInPackagePermissions.java#CheckAccessClassInPackagePermissions- javax/xml/crypto/dsig/FileSocketPermissions.java#FileSocketPermissions- added and applied patch2001: aqaCheckSecurityAndProviderFileSocketPermissions.patch- this, properly named, patch must go to all our jdk17 builds, and to the fips repo
* Thu May 19 2022 Jiri Vanek - 1:17.0.3.0.7-3- to pass aqa:- removed copy system tzdb in favour of in-tree- removed Patch2: rh1648644-java_access_bridge_privileged_security.patch- This is not intended to release untill we decide proper steps
* Thu May 19 2022 Jayashree Huttanagoudar - 1:17.0.3.0.7-2- Include BOOT_JDK for s390x for portable- BOOT_JDK downlaoded form hydra as java-17-temurin-17.0.3.7-0.private.ojdk17~upstream.hotspot.release.sdk.el7.s390x.tarxz and renamed- Added cosmetic changes to bypass a failure for s390x
* Wed Apr 20 2022 Andrew Hughes - 1:17.0.3.0.7-1- April 2022 security update to jdk 17.0.3+7- Remove JDK-8284548 and JDK-8284920 they are upstreamed now- Resolves: rhbz#2073579
* Sat Apr 16 2022 Andrew Hughes - 1:17.0.3.0.6-3- Add JDK-8284920 fix for XPath regression- Related: rhbz#2073575
* Fri Apr 15 2022 Andrew Hughes - 1:17.0.3.0.6-2- Remove the patch jdk8283911-default_promoted_version_pre.patch which missed in previous commit- JDK-8275082 should be listed as also resolving JDK-8278008 & CVE-2022-21476- Related: rhbz#2073575
* Mon Apr 11 2022 Andrew Hughes - 1:17.0.3.0.6-1- April 2022 security update to jdk 17.0.3+6- Update to jdk-17.0.3.0+6 pre-release tarball (17usec.17.0.3+5-220408)- Add JDK-8284548 regression fix missing from pre-release tarball but in jdk-17.0.3+6/jdk-17.0.3-ga- Update release notes to 17.0.3.0+6- Add missing README.md and generate_source_tarball.sh- Introduce tests/tests.yml, based on the one in java-11-openjdk- JDK-8283911 patch no longer needed now we\'re GA...- Switch to GA mode for release-
*
* This tarball is embargoed until 2022-04-19 AATT 1pm PT.
*
*- Resolves: rhbz#2073575
* Wed Apr 06 2022 Andrew Hughes - 1:17.0.3.0.5-0.1.ea- Update to jdk-17.0.3.0+5- Update release notes to 17.0.3.0+5- Resolves: rhbz#2050460
* Tue Mar 29 2022 Andrew Hughes - 1:17.0.3.0.1-0.1.ea- Update to jdk-17.0.3.0+1- Update release notes to 17.0.3.0+1- Switch to EA mode for 17.0.3 pre-release builds.- Add JDK-8283911 to fix bad DEFAULT_PROMOTED_VERSION_PRE value- Related: rhbz#2050456
* Mon Feb 28 2022 Jayashree Huttanagoudar - 1:17.0.2.0.8-10- Update icedtea_sync.sh with suitable message for portable
* Mon Feb 28 2022 Andrew Hughes - 1:17.0.2.0.8-10- Restructure the build so a minimal initial build is then used for the final build (with docs)- This reduces pressure on the system JDK and ensures the JDK being built can do a full build- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.- Handle Fedora in distro conditionals that currently only pertain to RHEL.- Run OpenJDK normalizer script on the spec file to fix further rogue whitespace- Sync gdb test with java-1.8.0-openjdk and improve architecture restrictions.- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)- Need to support noarch for creating source RPMs for non-scratch builds.- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment- Support a HotSpot-only build so a freshly built libjvm.so can then be used in the bootstrap JDK.- Explicitly list JIT architectures rather than relying on those with slowdebug builds- Disable the serviceability agent on Zero architectures even when the architecture itself is supported- Resolves: rhbz#2022822
* Mon Feb 28 2022 Andrew Hughes - 1:17.0.2.0.8-9- Enable AlgorithmParameters and AlgorithmParameterGenerator services in FIPS mode- Correction to previous changelog entry- Resolves: rhbz#2052070
* Sun Feb 27 2022 Andrew Hughes - 1:17.0.2.0.8-8- Detect NSS at runtime for FIPS detection- Resolves: rhbz#2051605
* Wed Feb 23 2022 Andrew Hughes - 1:17.0.2.0.8-7- Add JDK-8275535 patch to fix LDAP authentication issue.- Resolves: rhbz#2053521
* Tue Feb 08 2022 Andrew Hughes - 1:17.0.2.0.8-6- Minor cosmetic improvements to make spec more comparable between variants- Related: rhbz#2022822
* Thu Feb 03 2022 Andrew Hughes - 1:17.0.2.0.8-5- Update tapsets from IcedTea 6.x repository with fix for JDK-8015774 changes (_heap->_heaps) and AATTJAVA_SPEC_VERAATT- Related: rhbz#2022822
* Thu Feb 03 2022 Andrew Hughes - 1:17.0.2.0.8-4- Extend LTS check to exclude EPEL.- Related: rhbz#2022822
* Tue Jan 18 2022 Andrew Hughes - 1:17.0.2.0.8-3- Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent
* Mon Jan 17 2022 Andrew Hughes - 1:17.0.2.0.8-2- Fix FIPS issues in native code and with initialisation of java.security.Security- Related: rhbz#2039366
* Wed Jan 12 2022 Andrew Hughes - 1:17.0.2.0.8-1- January 2022 security update to jdk 17.0.2+8- Rebase RH1995150 & RH1996182 patches following JDK-8275863 addition to module-info.java- Resolves: rhbz#2039366- Minor change to the OUTPUT_FILE value to separate the name from the version with \'-\'
* Mon Nov 29 2021 Severin Gehwolf - 1:17.0.1.0.12-3- Use \'sql:\' prefix in nss.fips.cfg as F35+ no longer ship the legacy secmod.db file as part of nss- Resolves: rhbz#2023537
* Tue Oct 26 2021 Andrew Hughes - 1:17.0.1.0.12-2- Drop JDK-8272332/RH2004078 patch which is upstream in 17.0.1- October CPU update to jdk 17.0.1+12- Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false- Add patch to allow plain key import.
* Mon Oct 25 2021 Jiri Vanek - 1:17.0.0.0.35-5- cacerts symlink is resolved before passed to configure- https://issues.redhat.com/browse/OPENJDK-487- Disable FIPS mode detection using NSS in favour of using /proc/sys/crypto/fips_enabled for now, so we don\'t link against NSS-- effectively disabled Patch1008: rh1929465-improve_system_FIPS_detection.patch by settng --enable-sysconf-nss to --disable-sysconf-nss-- the enable-sysconf-nss was bringing in hard depndence on nss. Without nss, even in non fips, jvm had not even started
* Thu Sep 30 2021 Jiri Vanek - 1:17.0.0.0.35-4- initial import, based on jdk11 portbale, merged with jdk17 rpms and java-latest-openjdk for epel7
|
|
|
