diff --git a/.gitignore b/.gitignore index 61cbc15..7ba9a97 100644 --- a/.gitignore +++ b/.gitignore @@ -101,3 +101,4 @@ /jdk-updates-jdk11u-jdk-11.0.14+9-4curve.tar.xz /jdk-updates-jdk11u-jdk-11.0.14.1+1-4curve.tar.xz /jdk-updates-jdk11u-jdk-11.0.15+1-4curve.tar.xz +/jdk-updates-jdk11u-jdk-11.0.15+8-4curve.tar.xz diff --git a/NEWS b/NEWS index 9dd5d9e..a6364e1 100644 --- a/NEWS +++ b/NEWS @@ -9,10 +9,13 @@ Live versions of these release notes can be found at: * https://bitly.com/openjdk11015 * https://builds.shipilev.net/backports-monitor/release-notes-11.0.15.txt +* New features + - JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port * Other changes - JDK-8065704: Set LC_ALL=C for all relevant commands in the build system - JDK-8177814: jdk/editpad is not in jdk TEST.groups - JDK-8186780: clang fastdebug assertion failure in os_linux_x86:os::verify_stack_alignment() + - JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java and NonGregorianFormatTest fail intermittently - JDK-8193277: SimpleFileObject inconsistency between getName and getShortName - JDK-8199079: Test javax/swing/UIDefaults/6302464/bug6302464.java is unstable - JDK-8202142: jfr/event/io/TestInstrumentation is unstable @@ -22,8 +25,11 @@ Live versions of these release notes can be found at: - JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing initializer for member _jvmtiHeapCallbacks::heap_reference_callback - JDK-8210236: Prepare ciReceiverTypeData::translate_receiver_data_from for concurrent class unloading - JDK-8211170: AArch64: Warnings in C1 and template interpreter + - JDK-8211333: AArch64: Fix another build failure after JDK-8211029 + - JDK-8214004: Missing space between compiler thread name and task info in hs_err - JDK-8214026: Canonicalized archive paths appearing in diagnostics - JDK-8214761: Bug in parallel Kahan summation implementation + - JDK-8216969: ParseException thrown for certain months with russian locale - JDK-8218546: Unable to connect to https://google.com using java.net.HttpClient - JDK-8220634: SymLinkArchiveTest should handle not being able to create symlinks - JDK-8222825: ARM32 SIGILL issue on single core CPU (not supported PLDW instruction) @@ -31,6 +37,7 @@ Live versions of these release notes can be found at: - JDK-8225559: assertion error at TransTypes.visitApply - JDK-8232533: G1 uses only a single thread for pretouching the java heap - JDK-8233827: Enable screenshots in the enhanced failure handler on Linux/macOS + - JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/8001470/bug8001470.java for windows-x64 - JDK-8234930: Use MAP_JIT when allocating pages for code cache on macOS - JDK-8236210: javac generates wrong annotation for fields generated from record components - JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful @@ -38,8 +45,12 @@ Live versions of these release notes can be found at: - JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java - JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/6318524/bug6318524.java never fails - JDK-8240904: Screen flashes on test failures when running tests from make + - JDK-8241004: NMT tests fail on unaligned thread size with debug build - JDK-8241423: NUMA APIs fail to work in dockers due to dependent syscalls are disabled by default + - JDK-8247272: SA ELF file support has never worked for 64-bit causing address to symbol name mapping to fail + - JDK-8247515: OSX pc_to_symbol() lookup does not work with core files - JDK-8249019: clean up FileInstaller $test.src $cwd in vmTestbase_vm_compiler tests + - JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup fails with some symbols - JDK-8251126: nsk.share.GoldChecker should read golden file from ${test.src} - JDK-8251127: clean up FileInstaller $test.src $cwd in remaining vmTestbase_vm_compiler tests - JDK-8251132: make main classes public in vmTestbase/jit tests @@ -47,16 +58,32 @@ Live versions of these release notes can be found at: - JDK-8251998: remove usage of PropertyResolvingWrapper in vmTestbase/jit/t - JDK-8252005: narrow disabling of allowSmartActionArgs in vmTestbase - JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/TestDescription.java fails with "ERROR: DebuggeeSleepingThread: ThreadDeath lost" + - JDK-8253816: Support macOS W^X + - JDK-8253817: Support macOS Aarch64 ABI in Interpreter + - JDK-8253818: Support macOS Aarch64 ABI for compiled wrappers + - JDK-8253819: Implement os/cpu for macOS/AArch64 + - JDK-8253839: Update tests and JDK code for macOS/Aarch64 + - JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors on Windows+ARM64 build + - JDK-8254085: javax/swing/text/Caret/TestCaretPositionJTextPane.java failed with "RuntimeException: Wrong caret position" - JDK-8254827: JVMCI: Enable it for Windows+AArch64 - JDK-8254940: AArch64: Cleanup non-product thread members + - JDK-8254941: Implement Serviceability Agent for macOS/AArch64 - JDK-8255035: Update BCEL to Version 6.5.0 + - JDK-8255239: The timezone of the hs_err_pid log file is corrupted in Japanese locale + - JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11 provider + - JDK-8255776: Change build system for macOS/AArch64 - JDK-8256154: Some TestNG tests require default constructors - JDK-8256321: Some "inactive" color profiles use the wrong profile class - JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not work in a minimized state - JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported at sigset() in exesigtest.c - JDK-8257769: Cipher.getParameters() throws NPE for ChaCha20-Poly1305 - JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails in GTK L&F + - JDK-8261107: ArrayIndexOutOfBoundsException in the ICC_Profile.getInstance(InputStream) + - JDK-8261205: AssertionError: Cannot add metadata to an intersection type - JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed with "guarantee(false) failed: wrong number of expression stack elements during deopt" + - JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2 + - JDK-8262896: [macos_aarch64] Crash in jni_fast_GetLongField + - JDK-8262903: [macos_aarch64] Thread::current() called on detached thread - JDK-8263185: Mallinfo deprecated in glibc 2.33 - JDK-8264650: Cross-compilation to macos/aarch64 - JDK-8265150: AsyncGetCallTrace crashes on ResourceMark @@ -69,6 +96,7 @@ Live versions of these release notes can be found at: - JDK-8266176: -Wmaybe-uninitialized happens in libArrayIndexOutOfBoundsExceptionTest.c - JDK-8266187: Memory leak in appendBootClassPath() - JDK-8266421: Deadlock in Sound System + - JDK-8266889: [macosx-aarch64] Crash with SIGBUS in MarkActivationClosure::do_code_blob during vmTestbase/nsk/jvmti/.../bi04t002 test run - JDK-8268014: Build failure on SUSE Linux Enterprise Server 11.4 (s390x) due to 'SYS_get_mempolicy' was not declared - JDK-8268542: serviceability/logging/TestFullNames.java tests only 1st test case - JDK-8268882: C2: assert(n->outcnt() != 0 || C->top() == n || n->is_Proj()) failed: No dead instructions after post-alloc @@ -76,6 +104,7 @@ Live versions of these release notes can be found at: - JDK-8271202: C1: assert(false) failed: live_in set of first block must be empty - JDK-8272345: macos doesn't check `os::set_boot_path()` result - JDK-8272473: Parsing epoch seconds at a DST transition with a non-UTC parser is wrong + - JDK-8272541: Incorrect overflow test in Toom-Cook branch of BigInteger multiplication - JDK-8273277: C2: Move conditional negation into rc_predicate - JDK-8273341: Update Siphash to version 1.0 - JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/bug6302464.java fails on macOS12 @@ -92,16 +121,20 @@ Live versions of these release notes can be found at: - JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed "assert(m != __null) failed: NULL mirror" - JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/bug6364882.java failures - JDK-8274523: java/lang/management/MemoryMXBean/MemoryTest.java test should handle Shenandoah + - JDK-8274524: SSLSocket.close() hangs if it is called during the ssl handshake - JDK-8274658: ISO 4217 Amendment 170 Update - JDK-8274714: Incorrect verifier protected access error message - JDK-8274736: Concurrent read/close of SSLSockets causes SSLSessions to be invalidated unnecessarily - JDK-8274795: AArch64: avoid spilling and restoring r18 in macro assembler + - JDK-8275082: Update XML Security for Java to 2.3.0 - JDK-8275326: C2: assert(no_dead_loop) failed: dead loop detected - JDK-8275536: Add test to check that File::lastModified returns same time stamp as Files.getLastModifiedTime - JDK-8275610: C2: Object field load floats above its null check resulting in a segfault - JDK-8275650: Problemlist java/io/File/createTempFile/SpecialTempFile.java for Windows 11 + - JDK-8275703: System.loadLibrary fails on Big Sur for libraries hidden from filesystem - JDK-8275811: Incorrect instance to dispose - JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle rounding correctly + - JDK-8276141: XPathFactory set/getProperty method - JDK-8276177: nsk/jvmti/RedefineClasses/StressRedefineWithoutBytecodeCorruption failed with "assert(def_ik->is_being_redefined()) failed: should be being redefined to get here" - JDK-8276314: [JVMCI] check alignment of call displacement during code installation - JDK-8276623: JDK-8275650 accidentally pushed "out" file @@ -110,7 +143,10 @@ Live versions of these release notes can be found at: - JDK-8277385: Zero: Enable CompactStrings support - JDK-8277441: CompileQueue::add fails with assert(_last->next() == __null) failed: not last - JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend fun with loop + - JDK-8277488: Add expiry exception for Digicert (geotrustglobalca) expiring in May 2022 + - JDK-8277795: ldap connection timeout not honoured under contention - JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15 + - JDK-8277992: Add fast jdk_svc subtests to jdk:tier3 - JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java has duplicate -Xmx - JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has duplicate -Xmx - JDK-8278172: java/nio/channels/FileChannel/BlockDeviceSize.java should only run on Linux @@ -119,15 +155,45 @@ Live versions of these release notes can be found at: - JDK-8278384: Bytecodes::result_type() for arraylength returns T_VOID instead of T_INT - JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java fails with release VMs after JDK-8262134 - JDK-8278871: [JVMCI] assert((uint)reason < 2* _trap_hist_limit) failed: oob + - JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0 - JDK-8279077: JFR crashes on Linux ppc due to missing crash protector in signal handler - JDK-8279225: [arm32] C1 longs comparison operation destroys argument registers - JDK-8279300: [arm32] SIGILL when running GetObjectSizeIntrinsicsTest - JDK-8279379: GHA: Print tests that are in error + - JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses wrong condition - JDK-8279702: [macosx] ignore xcodebuild warnings on M1 - JDK-8279833: Loop optimization issue in String.encodeUTF8_UTF16 + - JDK-8279924: [PPC64, s390] implement frame::is_interpreted_frame_valid checks - JDK-8279998: PPC64 debug builds fail with "untested: RangeCheckStub: predicate_failed_trap_id" + - JDK-8280155: [PPC64, s390] frame size checks are not yet correct + - JDK-8280414: Memory leak in DefaultProxySelector + - JDK-8280526: x86_32 Math.sqrt performance regression with -XX:UseSSE={0,1} - JDK-8280786: Build failure on Solaris after 8262392 - JDK-8280999: array_bounds should be array-bounds after 8278507 + - JDK-8281061: [s390] JFR runs into assertions while validating interpreter frames + - JDK-8281520: JFR: A wrong parameter is passed to the constructor of LeakKlassWriter + - JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is redundant since JDK-8268801 + - JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using Xcode 13.1: call to 'log2_intptr' is ambiguous + - JDK-8282761: XPathFactoryImpl remove setProperty and getProperty methods + - JDK-8283018: 11u GHA: Update GCC 9 minor versions + - JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport of JDK-8253795 + - JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names + +Notes on individual issues: +=========================== + +security-libs/javax.crypto:pkcs11: + +JDK-8275737: SunPKCS11 Provider Supports ChaCha20-Poly1305 Cipher and ChaCha20 KeyGenerator if Supported by PKCS11 Library +========================================================================================================================== +SunPKCS11 provider is enhanced to support the following crypto +services and algorithms when the underlying PKCS11 library supports +the corresponding PKCS#11 mechanisms: + +* ChaCha20 KeyGenerator <=> CKM_CHACHA20_KEY_GEN mechanism +* ChaCha20-Poly1305 Cipher <=> CKM_CHACHA20_POLY1305 mechanism +* ChaCha20-Poly1305 AlgorithmParameters <=> CKM_CHACHA20_POLY1305 mechanism +* ChaCha20 SecretKeyFactory <=> CKM_CHACHA20_POLY1305 mechanism New in release OpenJDK 11.0.14.1 (2022-02-08): ============================================= diff --git a/java-11-openjdk.spec b/java-11-openjdk.spec index dd149a9..414e76b 100644 --- a/java-11-openjdk.spec +++ b/java-11-openjdk.spec @@ -366,7 +366,7 @@ %global origin_nice OpenJDK %global top_level_dir_name %{origin} %global top_level_dir_name_backup %{top_level_dir_name}-backup -%global buildver 1 +%global buildver 8 %global rpmrelease 1 #%%global tagsuffix %%{nil} # Priority must be 8 digits in total; up to openjdk 1.8, we were using 18..... so when we moved to 11, we had to add another digit @@ -2621,6 +2621,11 @@ end %endif %changelog +* Tue Apr 12 2022 Andrew Hughes - 1:11.0.15.0.8-0.1.ea +- Update to jdk-11.0.15.0+8 +- Update release notes to 11.0.15.0+8 +- Rebase RH1996182 FIPS patch after JDK-8254410 + * Tue Apr 12 2022 Andrew Hughes - 1:11.0.15.0.1-0.1.ea - Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 diff --git a/rh1996182-login_to_nss_software_token.patch b/rh1996182-login_to_nss_software_token.patch index 10c5666..a443dc8 100644 --- a/rh1996182-login_to_nss_software_token.patch +++ b/rh1996182-login_to_nss_software_token.patch @@ -1,9 +1,3 @@ -commit 53bda6adfacc02b8dddd8f10350c9569bca4eb1e -Author: Martin Balao -Date: Fri Aug 27 19:42:07 2021 +0100 - - RH1996182: Login to the NSS Software Token in FIPS Mode - diff --git openjdk.orig/src/java.base/share/classes/module-info.java openjdk/src/java.base/share/classes/module-info.java index 5460efcf8c..f08dc2fafc 100644 --- openjdk.orig/src/java.base/share/classes/module-info.java @@ -17,11 +11,11 @@ index 5460efcf8c..f08dc2fafc 100644 jdk.attach, jdk.charsets, diff --git openjdk.orig/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/SunPKCS11.java openjdk/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/SunPKCS11.java -index 5e227f4531..164de8ff08 100644 +index 099caac605..ffadb43eb1 100644 --- openjdk.orig/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/SunPKCS11.java +++ openjdk/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/SunPKCS11.java -@@ -41,6 +41,8 @@ import javax.security.auth.callback.CallbackHandler; - import javax.security.auth.callback.PasswordCallback; +@@ -43,6 +43,8 @@ import javax.security.auth.callback.PasswordCallback; + import com.sun.crypto.provider.ChaCha20Poly1305Parameters; import jdk.internal.misc.InnocuousThread; +import jdk.internal.misc.SharedSecrets; @@ -29,7 +23,7 @@ index 5e227f4531..164de8ff08 100644 import sun.security.util.Debug; import sun.security.util.ResourcesMgr; import static sun.security.util.SecurityConstants.PROVIDER_VER; -@@ -58,6 +60,9 @@ import static sun.security.pkcs11.wrapper.PKCS11Constants.*; +@@ -60,6 +62,9 @@ import static sun.security.pkcs11.wrapper.PKCS11Constants.*; */ public final class SunPKCS11 extends AuthProvider { @@ -39,7 +33,7 @@ index 5e227f4531..164de8ff08 100644 private static final long serialVersionUID = -1354835039035306505L; static final Debug debug = Debug.getInstance("sunpkcs11"); -@@ -374,6 +379,24 @@ public final class SunPKCS11 extends AuthProvider { +@@ -376,6 +381,24 @@ public final class SunPKCS11 extends AuthProvider { if (nssModule != null) { nssModule.setProvider(this); } diff --git a/sources b/sources index c8384cd..1e441d0 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ SHA512 (tapsets-icedtea-6.0.0pre00-c848b93a8598.tar.xz) = 97d026212363b3c83f6a04100ad7f6fdde833d16579717f8756e2b8c2eb70e144a41a330cb9ccde9c3badd37a2d54fdf4650a950ec21d8b686d545ecb2a64d30 -SHA512 (jdk-updates-jdk11u-jdk-11.0.15+1-4curve.tar.xz) = 8cc0d974c8c754f31c6f2182f8a96b8479a07a567d7301860405cc97c9518fcdf7cf9ebf83b34cf147e15a387ac32f2a119cac878c8d02f6f9798b01eba49899 +SHA512 (jdk-updates-jdk11u-jdk-11.0.15+8-4curve.tar.xz) = b5857dcbb92ba94786b7f818314a471c2794f6631e8f4041549c40f447892b2dc8bd29745ad43699cc2ed535cebd219984b5b63f3bb3eda08d4664f8b6b91e76