| n | | n | * 三 10月 26 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.8-2 |
| | | - Update to jdk-17.0.5+8 (GA) |
| | | - Update release notes to 17.0.5+8 (GA) |
| | | - Switch to GA mode for final release. |
| | | - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 |
| | | - Update CLDR data with Europe/Kyiv (JDK-8293834) |
| | | - Drop JDK-8292223 patch which we found to be unnecessary |
| | | - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream |
| | | - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds |
| | | - Remove freetype sources along with zlib sources |
| | | - Resolves: rhbz#2133695 |
| | | |
| | | * 二 10月 04 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.7-0.2.ea |
| | | - Update to jdk-17.0.5+7 |
| | | - Update release notes to 17.0.5+7 |
| | | - Resolves: rhbz#2130622 |
| | | |
| | | * 一 10月 03 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.1-0.2.ea |
| | | - Update to jdk-17.0.5+1 |
| | | - Update release notes to 17.0.5+1 |
| | | - Switch to EA mode for 17.0.5 pre-release builds. |
| | | - Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853 |
| | | - Bump FreeType bundled version to 2.12.1 following JDK-8290334 |
| | | - Related: rhbz#2130622 |
| | | |
| | | * 二 8月 30 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-5 |
| | | - Switch to static builds, reducing system dependencies and making build more portable |
| | | - Resolves: rhbz#2121268 |
| | | |
| | | * 一 8月 29 2022 Stephan Bergmann <sbergman@redhat.com> - 1:17.0.4.1.1-4 |
| | | - Fix flatpak builds (catering for their uncompressed manual pages) |
| | | - Fix flatpak builds by exempting them from bootstrap |
| | | - Resolves: rhbz#2102726 |
| | | |
| | | * 一 8月 29 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-3 |
| | | - Update FIPS support to bring in latest changes |
| | | - * RH2104724: Avoid import/export of DH private keys |
| | | - * RH2092507: P11Key.getEncoded does not work for DH keys in FIPS mode |
| | | - * Build the systemconf library on all platforms |
| | | - * RH2048582: Support PKCS#12 keystores |
| | | - * RH2020290: Support TLS 1.3 in FIPS mode |
| | | - Resolves: rhbz#2104725 |
| | | - Resolves: rhbz#2117758 |
| | | - Resolves: rhbz#2115164 |
| | | - Resolves: rhbz#2029665 |
| | | |
| | | * 日 8月 21 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-2 |
| | | - Update to jdk-17.0.4.1+1 |
| | | - Update release notes to 17.0.4.1+1 |
| | | - Add patch to provide translations for Europe/Kyiv added in tzdata2022b |
| | | - Add test to ensure timezones can be translated |
| | | - Resolves: rhbz#2119532 |
| | | |
| | | * 五 7月 22 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.8-3 |
| | | - Update to jdk-17.0.4.0+8 |
| | | - Update release notes to 17.0.4.0+8 |
| | | - Switch to GA mode for release |
| | | - Resolves: rhbz#2106524 |
| | | |
| | | * 三 7月 20 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.7-0.2.ea |
| | | - Revert the following changes until copy-java-configs has adapted to relative symlinks: |
| | | - * Move cacerts replacement to install section and retain original of this and tzdb.dat |
| | | - * Run tests on the installed image, rather than the build image |
| | | - * Introduce variables to refer to the static library installation directories |
| | | - * Use relative symlinks so they work within the image |
| | | - * Run debug symbols check during build stage, before the install strips them |
| | | - The move of turning on system security properties is retained so we don't ship with them off |
| | | - Related: rhbz#2084218 |
| | | |
| | | * 六 7月 16 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.7-0.1.ea |
| | | - Update to jdk-17.0.3.0+7 |
| | | - Update release notes to 17.0.3.0+7 |
| | | - Need to include the '.S' suffix in debuginfo checks after JDK-8284661 |
| | | - Explicitly require crypto-policies during build and runtime for system security properties |
| | | - Make use of the vendor version string to store our version & release rather than an upstream release date |
| | | - Include a test in the RPM to check the build has the correct vendor information. |
| | | - Resolves: rhbz#2084218 |
| | | |
| | | * 四 7月 14 2022 Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:17.0.4.0.1-0.2.ea |
| | | - Fix issue where CheckVendor.java test erroneously passes when it should fail. |
| | | - Add proper quoting so '&' is not treated as a special character by the shell. |
| | | - Related: rhbz#2084218 |
| | | |
| | | * 二 7月 12 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.1-0.1.ea |
| | | - Update to jdk-17.0.4.0+1 |
| | | - Update release notes to 17.0.4.0+1 |
| | | - Switch to EA mode for 17.0.4 pre-release builds. |
| | | - Print release file during build, which should now include a correct SOURCE value from .src-rev |
| | | - Update tarball script with IcedTea GitHub URL and .src-rev generation |
| | | - Include script to generate bug list for release notes |
| | | - Update tzdata requirement to 2022a to match JDK-8283350 |
| | | - Move EA designator check to prep so failures can be caught earlier |
| | | - Make EA designator check non-fatal while upstream is not maintaining it |
| | | - Related: rhbz#2084218 |
| | | |
| | | * 五 7月 08 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.7-5 |
| | | - Fix whitespace in spec file |
| | | - Related: rhbz#2100677 |
| | | |
| | | * 五 7月 08 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.7-5 |
| | | - Sequence spec file sections as they are run by rpmbuild (build, install then test) |
| | | - Related: rhbz#2100677 |
| | | |
| | | * 五 7月 08 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.7-5 |
| | | - Turn on system security properties as part of the build's install section |
| | | - Move cacerts replacement to install section and retain original of this and tzdb.dat |
| | | - Run tests on the installed image, rather than the build image |
| | | - Introduce variables to refer to the static library installation directories |
| | | - Use relative symlinks so they work within the image |
| | | - Run debug symbols check during build stage, before the install strips them |
| | | - Related: rhbz#2100677 |
| | | |
| | | * 四 6月 30 2022 Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:17.0.3.0.7-4 |
| | | - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode |
| | | - Resolves: rhbz#2102433 |
| | | |
| | | * 三 6月 22 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.7-3 |
| | | - Update FIPS support to bring in latest changes |
| | | - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage |
| | | - * RH2090378: Revert to disabling system security properties and FIPS mode support together |
| | | - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch |
| | | - Enable system security properties in the RPM (now disabled by default in the FIPS repo) |
| | | - Improve security properties test to check both enabled and disabled behaviour |
| | | - Run security properties test with property debugging on |
| | | - Resolves: rhbz#2099844 |
| | | - Resolves: rhbz#2100677 |
| | | |
| | | * 日 6月 12 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.7-2 |
| | | - Rebase FIPS patches from fips-17u branch and simplify by using a single patch from that repository |
| | | - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch |
| | | - RH2023467: Enable FIPS keys export |
| | | - RH2094027: SunEC runtime permission for FIPS |
| | | - Resolves: rhbz#2029657 |
| | | - Resolves: rhbz#2096117 |
| | | |
| | | * 三 4月 20 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.7-1 |
| | | - April 2022 security update to jdk 17.0.3+6 |
| | | - Update to jdk-17.0.3.0+6 pre-release tarball (17usec.17.0.3+5-220408) |
| | | - Add JDK-8284548 regression fix missing from pre-release tarball but in jdk-17.0.3+6/jdk-17.0.3-ga |
| | | - Update release notes to 17.0.3.0+6 |
| | | - Add missing README.md and generate_source_tarball.sh |
| | | - Switch to GA mode for release |
| | | - JDK-8283911 patch no longer needed now we're GA... |
| | | - Resolves: rhbz#2073579 |
| | | |
| | | * 三 4月 06 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.5-0.1.ea |
| | | - Update to jdk-17.0.3.0+5 |
| | | - Update release notes to 17.0.3.0+5 |
| | | - Resolves: rhbz#2050460 |
| | | |
| | | * 二 3月 29 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.1-0.1.ea |
| | | - Update to jdk-17.0.3.0+1 |
| | | - Update release notes to 17.0.3.0+1 |
| | | - Switch to EA mode for 17.0.3 pre-release builds. |
| | | - Add JDK-8283911 to fix bad DEFAULT_PROMOTED_VERSION_PRE value |
| | | - Related: rhbz#2050460 |
| | | |
| * 一 2月 28 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-15 | | * 一 2月 28 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-13 |
| - Enable AlgorithmParameters and AlgorithmParameterGenerator services in FIPS mode | | - Enable AlgorithmParameters and AlgorithmParameterGenerator services in FIPS mode |
| n | | n | - Resolves: rhbz#2055383 |
| | | |
| | | * 一 2月 28 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-12 |
| | | - Add rpminspect.yaml to turn off Java bytecode inspections |
| | | - java-17-openjdk deliberately produces Java 17 bytecode, not the default Java 11 bytecode |
| - Resolves: rhbz#2052070 | | - Resolves: rhbz#2023540 |
| | | |
| n | * 日 2月 27 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-14 | n | * 日 2月 27 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-11 |
| - Introduce tests/tests.yml, based on the one in java-11-openjdk | | - Introduce tests/tests.yml, based on the one in java-11-openjdk |
| n | - Resolves: rhbz#2058493 | n | - Resolves: rhbz#2058490 |
| | | |
| * 日 2月 27 2022 Severin Gehwolf <sgehwolf@redhat.com> - 1:17.0.2.0.8-13 | | |
| - Use 'sql:' prefix in nss.fips.cfg as F35+ no longer ship the legacy | | |
| secmod.db file as part of nss | | |
| - Resolves: rhbz#2023536 | | |
| | | |
| * 日 2月 27 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-12 | | |
| - Detect NSS at runtime for FIPS detection | | |
| - Turn off build-time NSS linking and go back to an explicit Requires on NSS | | |
| - Resolves: rhbz#2051605 | | |
| | | |
| * 五 2月 25 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-11 | | |
| - Add JDK-8275535 patch to fix LDAP authentication issue. | | |
| - Resolves: rhbz#2053256 | | |
| | | |
| * 五 2月 25 2022 Jiri Vanek <jvanek@redhat.com> - 1:17.0.2.0.8-10 | | * 五 2月 25 2022 Jiri Vanek <jvanek@redhat.com> - 1:17.0.2.0.8-10 |
| - Storing and restoring alterntives during update manually | | - Storing and restoring alterntives during update manually |
| - Fixing Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE | | - Fixing Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE |
| -- The move of alternatives creation to posttrans to fix: | | -- The move of alternatives creation to posttrans to fix: |
| -- Had caused the alternatives to be removed, and then created again, | | -- Had caused the alternatives to be removed, and then created again, |
| -- instead of being added, and then removing the old, and thus persisting | | -- instead of being added, and then removing the old, and thus persisting |
| -- the selection in family | | -- the selection in family |
| -- Thus this fix, is storing the family of manually selected master, and if | | -- Thus this fix, is storing the family of manually selected master, and if |
| -- stored, then it is restoring the family of the master | | -- stored, then it is restoring the family of the master |
| n | - Resolves: rhbz#2008200 | n | - Resolves: rhbz#2008206 |
| | | |
| * 五 2月 25 2022 Jiri Vanek <jvanek@redhat.com> - 1:17.0.2.0.8-9 | | * 五 2月 25 2022 Jiri Vanek <jvanek@redhat.com> - 1:17.0.2.0.8-9 |
| - Family extracted to globals | | - Family extracted to globals |
| n | | n | - Related: rhbz#2008206 |
| | | |
| | | * 三 2月 23 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-8 |
| | | - Detect NSS at runtime for FIPS detection |
| | | - Turn off build-time NSS linking and go back to an explicit Requires on NSS |
| - Resolves: rhbz#2008200 | | - Resolves: rhbz#2052829 |
| | | |
| n | * 五 2月 25 2022 Jiri Vanek <jvanek@redhat.com> - 1:17.0.2.0.8-8 | n | * 三 2月 23 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-7 |
| - alternatives creation moved to posttrans | | - Add JDK-8275535 patch to fix LDAP authentication issue. |
| - Thus fixing the old reisntall issue: | | |
| - https://bugzilla.redhat.com/show_bug.cgi?id=1200302 | | |
| - https://bugzilla.redhat.com/show_bug.cgi?id=1976053 | | |
| - Resolves: rhbz#2008200 | | - Resolves: rhbz#2053521 |
| | | |
| n | * 一 2月 21 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-7 | n | * 一 2月 21 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-6 |
| - Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent | | - Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent |
| n | - Resolves: rhbz#2051590 | n | - Resolves: rhbz#2052819 |
| | | |
| n | * 五 2月 18 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-6 | n | * 五 2月 18 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-5 |
| - Fix FIPS issues in native code and with initialisation of java.security.Security | | - Fix FIPS issues in native code and with initialisation of java.security.Security |
| n | - Resolves: rhbz#2023378 | n | - Resolves: rhbz#2023531 |
| | | |
| n | * 四 2月 17 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-5 | n | * 四 2月 17 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-4 |
| - Restructure the build so a minimal initial build is then used for the final build (with docs) | | - Restructure the build so a minimal initial build is then used for the final build (with docs) |
| - This reduces pressure on the system JDK and ensures the JDK being built can do a full build | | - This reduces pressure on the system JDK and ensures the JDK being built can do a full build |
| - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. | | - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. |
| - Handle Fedora in distro conditionals that currently only pertain to RHEL. | | - Handle Fedora in distro conditionals that currently only pertain to RHEL. |
| - Run OpenJDK normalizer script on the spec file to fix further rogue whitespace | | - Run OpenJDK normalizer script on the spec file to fix further rogue whitespace |
| - Need to support noarch for creating source RPMs for non-scratch builds. | | - Need to support noarch for creating source RPMs for non-scratch builds. |
| - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment | | - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment |
| - Support a HotSpot-only build so a freshly built libjvm.so can then be used in the bootstrap JDK. | | - Support a HotSpot-only build so a freshly built libjvm.so can then be used in the bootstrap JDK. |
| - Explicitly list JIT architectures rather than relying on those with slowdebug builds | | - Explicitly list JIT architectures rather than relying on those with slowdebug builds |
| - Disable the serviceability agent on Zero architectures even when the architecture itself is supported | | - Disable the serviceability agent on Zero architectures even when the architecture itself is supported |
| n | - Resolves: rhbz#2022822 | n | - Resolves: rhbz#2022826 |
| | | |
| n | * 四 2月 17 2022 Jiri Vanek <jvanek@redhat.com> - 1:17.0.2.0.8-5 | n | * 四 2月 17 2022 Jiri Vanek <jvanek@redhat.com> - 1:17.0.2.0.8-4 |
| - Replaced tabs by sets of spaces to make rpmlint happy | | - Replaced tabs by sets of spaces to make rpmlint happy |
| - javadoc-zip gets its own provides next to plain javadoc ones | | - javadoc-zip gets its own provides next to plain javadoc ones |
| n | - Resolves: rhbz#2022822 | n | - Resolves: rhbz#2022826 |
| | | |
| n | * 二 2月 08 2022 Jiri Vanek <jvanek@redhat.com> - 1:17.0.2.0.8-4 | n | * 三 2月 16 2022 Jiri Vanek <jvanek@redhat.com> - 1:17.0.2.0.8-3 |
| - Minor cosmetic improvements to make spec more comparable between variants | | - Minor cosmetic improvements to make spec more comparable between variants |
| n | - Related: rhbz#2022822 | n | - Related: rhbz#2022826 |
| | | |
| n | * 四 2月 03 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-3 | n | * 三 2月 16 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-2 |
| - Update tapsets from IcedTea 6.x repository with fix for JDK-8015774 changes (_heap->_heaps) and @JAVA_SPEC_VER@ | | - Update tapsets from IcedTea 6.x repository with fix for JDK-8015774 changes (_heap->_heaps) and @JAVA_SPEC_VER@ |
| - Update icedtea_sync.sh with a VCS mode that retrieves sources from a Mercurial repository | | - Update icedtea_sync.sh with a VCS mode that retrieves sources from a Mercurial repository |
| n | - Related: rhbz#2022822 | n | - Related: rhbz#2022826 |
| | | |
| n | * 四 2月 03 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-2 | n | * 五 2月 11 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-1 |
| - Extend LTS check to exclude EPEL. | | |
| - Related: rhbz#2022822 | | |
| | | |
| * 四 2月 03 2022 Severin Gehwolf <sgehwolf@redhat.com> - 1:17.0.2.0.8-2 | | |
| - Set LTS designator. | | |
| - Related: rhbz#2022822 | | |
| | | |
| * 三 1月 12 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-1 | | |
| - January 2022 security update to jdk 17.0.2+8 | | - January 2022 security update to jdk 17.0.2+8 |
| - Rebase RH1995150 & RH1996182 patches following JDK-8275863 addition to module-info.java | | - Rebase RH1995150 & RH1996182 patches following JDK-8275863 addition to module-info.java |
| - Rename libsvml.so to libjsvml.so following JDK-8276025 | | - Rename libsvml.so to libjsvml.so following JDK-8276025 |
| n | | n | - Drop JDK-8276572 patch which is now upstream |
| - Resolves: rhbz#2039366 | | - Resolves: rhbz#2039392 |
| | | |
| n | * 四 10月 28 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.1.0.12-3 | n | * 四 2月 10 2022 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.1.0.12-3 |
| - Sync desktop files with upstream IcedTea release 3.15.0 using new script | | - Sync desktop files with upstream IcedTea release 3.15.0 using new script |
| n | - Related: rhbz#2013842 | n | - Related: rhbz#2022826 |
| | | |
| n | | n | * 一 11月 29 2021 Severin Gehwolf <sgehwolf@redhat.com> - 1:17.0.1.0.12-2 |
| | | - Use 'sql:' prefix in nss.fips.cfg as F35+ no longer ship the legacy |
| | | secmod.db file as part of nss |
| | | - Resolves: rhbz#2023537 |
| | | |
| * 二 10月 26 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.1.0.12-2 | | * 二 11月 16 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.1.0.12-1 |
| - Drop JDK-8272332/RH2004078 patch which is upstream in 17.0.1 | | - Drop JDK-8272332 patch now included upstream. |
| - Resolves: rhbz#2013842 | | - Resolves: rhbz#2013846 |
| | | |
| n | * 三 10月 20 2021 Petra Alice Mikova <pmikova@redhat.com> - 1:17.0.1.0.12-2 | n | * 二 11月 16 2021 Petra Alice Mikova <pmikova@redhat.com> - 1:17.0.1.0.12-1 |
| - October CPU update to jdk 17.0.1+12 | | - October CPU update to jdk 17.0.1+12 |
| - Dropped commented-out source line | | - Dropped commented-out source line |
| n | - Resolves: rhbz#2013842 | n | - Resolves: rhbz#2013846 |
| | | |
| n | | n | * 二 11月 09 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.35-8 |
| | | - Extend LTS check to exclude EPEL. |
| | | - Related: rhbz#2013846 |
| | | |
| | | * 二 11月 09 2021 Severin Gehwolf <sgehwolf@redhat.com> - 1:17.0.0.0.35-8 |
| | | - Set LTS designator. |
| | | - Related: rhbz#2013846 |
| | | |
| | | * 一 11月 08 2021 Jiri Vanek <jvanek@redhat.com> - 1:17.0.0.0.35-7 |
| | | - alternatives creation moved to posttrans |
| | | - Thus fixing the old reinstall issue: |
| | | - https://bugzilla.redhat.com/show_bug.cgi?id=1200302 |
| | | - https://bugzilla.redhat.com/show_bug.cgi?id=1976053 |
| | | - Resolves: rhbz#2008206 |
| | | |
| | | * 五 11月 05 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.35-6 |
| | | - Patch syslookup.c so it actually has some code to be compiled into libsyslookup |
| | | - Related: rhbz#2013846 |
| | | |
| * 日 10月 10 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.35-6 | | * 日 10月 10 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.35-5 |
| - Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false | | - Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false |
| n | - Resolves: rhbz#1994661 | n | - Resolves: rhbz#1994682 |
| | | |
| n | * 日 10月 10 2021 Martin Balao <mbalao@redhat.com> - 1:17.0.0.0.35-6 | n | * 日 10月 10 2021 Martin Balao <mbalao@redhat.com> - 1:17.0.0.0.35-5 |
| - Add patch to allow plain key import. | | - Add patch to allow plain key import. |
| n | - Resolves: rhbz#1994661 | n | - Resolves: rhbz#1994682 |
| | | |
| n | * 一 9月 27 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.35-5 | n | * 一 9月 27 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.35-4 |
| - Update release notes to document the major changes between OpenJDK 11 & 17. | | - Update release notes to document the major changes between OpenJDK 11 & 17. |
| n | - Resolves: rhbz#2003072 | n | - Resolves: rhbz#2000925 |
| | | |
| * 四 9月 16 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.35-3 | | * 四 9月 16 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.35-3 |
| - Update to jdk-17+35, also known as jdk-17-ga. | | - Update to jdk-17+35, also known as jdk-17-ga. |
| - Switch to GA mode. | | - Switch to GA mode. |
| - Add JDK-8272332 fix so we actually link against HarfBuzz. | | - Add JDK-8272332 fix so we actually link against HarfBuzz. |
| n | - Resolves: rhbz#2003072 | n | - Resolves: rhbz#2000925 |
| - Resolves: rhbz#2004078 | | |
| | | |
| * 一 8月 30 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.33-0.5.ea | | * 一 8月 30 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.33-0.5.ea |
| - Extend the default security policy to accomodate PKCS11 accessing jdk.internal.access. | | - Extend the default security policy to accomodate PKCS11 accessing jdk.internal.access. |
| n | - Resolves: rhbz#1996182 | n | - Resolves: rhbz#1997359 |
| | | |
| * 六 8月 28 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.33-0.4.ea | | * 六 8月 28 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.33-0.4.ea |
| - Fix unused function compiler warning found in systemconf.c | | - Fix unused function compiler warning found in systemconf.c |
| n | - Related: rhbz#1995150 | n | - Related: rhbz#1995889 |
| | | |
| * 六 8月 28 2021 Martin Balao <mbalao@redhat.com> - 1:17.0.0.0.33-0.4.ea | | * 六 8月 28 2021 Martin Balao <mbalao@redhat.com> - 1:17.0.0.0.33-0.4.ea |
| - Add patch to login to the NSS software token when in FIPS mode. | | - Add patch to login to the NSS software token when in FIPS mode. |
| n | - Resolves: rhbz#1996182 | n | - Resolves: rhbz#1997359 |
| | | |
| * 五 8月 27 2021 Martin Balao <mbalao@redhat.com> - 1:17.0.0.0.33-0.3.ea | | * 五 8月 27 2021 Martin Balao <mbalao@redhat.com> - 1:17.0.0.0.33-0.3.ea |
| - Add patch to disable non-FIPS crypto in the SUN and SunEC security providers. | | - Add patch to disable non-FIPS crypto in the SUN and SunEC security providers. |
| n | - Resolves: rhbz#1995150 | n | - Resolves: rhbz#1995889 |
| | | |
| * 五 8月 27 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.33-0.2.ea | | * 五 8月 27 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.33-0.2.ea |
| - Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure. | | - Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure. |
| - Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM. | | - Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM. |
| n | - Related: rhbz#1995150 | n | - Related: rhbz#1995889 |
| | | |
| * 五 8月 27 2021 Martin Balao <mbalao@redhat.com> - 1:17.0.0.0.33-0.2.ea | | * 五 8月 27 2021 Martin Balao <mbalao@redhat.com> - 1:17.0.0.0.33-0.2.ea |
| - Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library. | | - Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library. |
| n | - Related: rhbz#1995150 | n | - Related: rhbz#1995889 |
| | | |
| * 四 8月 26 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.33-0.1.ea | | * 四 8月 26 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.33-0.1.ea |
| - Update RH1655466 FIPS patch with changes in OpenJDK 8 version. | | - Update RH1655466 FIPS patch with changes in OpenJDK 8 version. |
| - SunPKCS11 runtime provider name is a concatenation of "SunPKCS11-" and the name in the config file. | | - SunPKCS11 runtime provider name is a concatenation of "SunPKCS11-" and the name in the config file. |
| - Change nss.fips.cfg config name to "NSS-FIPS" to avoid confusion with nss.cfg. | | - Change nss.fips.cfg config name to "NSS-FIPS" to avoid confusion with nss.cfg. |
| - No need to substitute path to nss.fips.cfg as java.security file supports a java.home variable. | | - No need to substitute path to nss.fips.cfg as java.security file supports a java.home variable. |
| - Disable FIPS mode support unless com.redhat.fips is set to "true". | | - Disable FIPS mode support unless com.redhat.fips is set to "true". |
| - Enable alignment with FIPS crypto policy by default (-Dcom.redhat.fips=false to disable). | | - Enable alignment with FIPS crypto policy by default (-Dcom.redhat.fips=false to disable). |
| - Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode | | - Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode |
| - Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs (RH1915071) | | - Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs (RH1915071) |
| n | - Related: rhbz#1995150 | n | - Related: rhbz#1995889 |
| | | |
| * 四 8月 26 2021 Martin Balao <mbalao@redhat.com> - 1:17.0.0.0.33-0.1.ea | | * 四 8月 26 2021 Martin Balao <mbalao@redhat.com> - 1:17.0.0.0.33-0.1.ea |
| - Support the FIPS mode crypto policy (RH1655466) | | - Support the FIPS mode crypto policy (RH1655466) |
| - Use appropriate keystore types when in FIPS mode (RH1818909) | | - Use appropriate keystore types when in FIPS mode (RH1818909) |
| - Disable TLSv1.3 when the FIPS crypto policy and the NSS-FIPS provider are in use (RH1860986) | | - Disable TLSv1.3 when the FIPS crypto policy and the NSS-FIPS provider are in use (RH1860986) |
| n | - Related: rhbz#1995150 | n | - Related: rhbz#1995889 |
| | | |
| * 四 8月 26 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.33-0.0.ea | | * 四 8月 26 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.33-0.0.ea |
| - Update to jdk-17+33, including JDWP fix and July 2021 CPU | | - Update to jdk-17+33, including JDWP fix and July 2021 CPU |
| n | - Resolves: rhbz#1959487 | n | - Resolves: rhbz#1870625 |
| | | |
| * 四 8月 26 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.26-0.5.ea | | * 四 8月 26 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.26-0.5.ea |
| - Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics. | | - Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics. |
| - Remove restriction on disabling product build, as debug packages no longer have javadoc packages. | | - Remove restriction on disabling product build, as debug packages no longer have javadoc packages. |
| n | - Resolves: rhbz#1959487 | n | - Resolves: rhbz#1870625 |
| | | |
| n | | n | * 一 8月 09 2021 Mohan Boddu <mboddu@redhat.com> - 1:17.0.0.0.26-0.4.ea.1 |
| | | - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags |
| | | Related: rhbz#1991688 |
| | | |
| * 三 8月 25 2021 Petra Alice Mikova <pmikova@redhat.com> - 1:17.0.0.0.26-0.4.ea | | * 三 7月 14 2021 Petra Alice Mikova <pmikova@redhat.com> - 1:17.0.0.0.26-0.4.ea |
| - Fix patch rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch which made the SunPKCS provider show up again | | - Fix patch rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch which made the SunPKCS provider show up again |
| n | - Resolves: rhbz#1959487 | n | - Resolves: rhbz#1870625 |
| | | |
| n | | n | * 二 7月 13 2021 Jiri Vanek <pmikova@redhat.com> - 1:17.0.0.0.26-0.3.ea |
| | | - Add gating support |
| | | - Resolves: rhbz#1870625 |
| | | |
| * 三 8月 25 2021 Severin Gehwolf <sgehwolf@redhat.com> - 1:17.0.0.0.26-0.3.ea | | * 五 6月 25 2021 Severin Gehwolf <sgehwolf@redhat.com> - 1:17.0.0.0.26-0.2.ea |
| - Re-enable TestSecurityProperties after inclusion of PR3695 | | - Re-enable TestSecurityProperties after inclusion of PR3695 |
| n | - Resolves: rhbz#1959487 | n | - Resolves: rhbz#1870625 |
| | | |
| n | * 三 8月 25 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.26-0.3.ea | n | * 五 6月 25 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.26-0.2.ea |
| - Add PR3695 to allow the system crypto policy to be turned off | | - Add PR3695 to allow the system crypto policy to be turned off |
| n | - Resolves: rhbz#1959487 | n | - Resolves: rhbz#1870625 |
| | | |
| n | * 三 7月 14 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.26-0.2.ea | n | * 五 6月 25 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.26-0.1.ea |
| - Remove boot JDKs in favour of OpenJDK 17 build now in the buildroot. | | - Remove boot JDKs in favour of OpenJDK 17 build now in the buildroot. |
| n | - Resolves: rhbz#1959487 | n | - Resolves: rhbz#1870625 |
| | | |
| n | * 三 7月 14 2021 Severin Gehwolf <sgehwolf@redhat.com> - 1:17.0.0.0.26-0.2.ea | n | * 四 6月 24 2021 Severin Gehwolf <sgehwolf@redhat.com> - 1:17.0.0.0.26-0.1.ea |
| - Update buildjdkver to 17 so as to build with itself | | - Update buildjdkver to 17 so as to build with itself |
| n | - Resolves: rhbz#1959487 | n | - Resolves: rhbz#1870625 |
| | | |
| * 二 7月 13 2021 Jiri Vanek <jvanek@redhat.com> - 1:17.0.0.0.26-0.1.ea | | |
| - Add gating support | | |
| - Resolves: rhbz#1959487 | | |
| | | |
| * 一 6月 21 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.26-0.0.ea | | * 一 6月 21 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.26-0.0.ea |
| n | - Rename as java-17-openjdk and bootstrap using boot JDK in local sources | n | - Rename to java-17-openjdk and bootstrap using boot JDK in local sources |
| - Exclude x86 as this is not supported by OpenJDK 17 | | - Exclude x86 as this is not supported by OpenJDK 17 |
| n | | n | - Use unzip to test src.zip to avoid looking for jar on path |
| - Resolves: rhbz#1959487 | | - Resolves: rhbz#1870625 |
| | | |
| * 五 6月 11 2021 Petra Alice Mikova <pmikova@redhat.com> - 1:17.0.0.0.26-0.0.ea.rolling | | * 五 6月 11 2021 Petra Alice Mikova <pmikova@redhat.com> - 1:17.0.0.0.26-0.0.ea.rolling |
| - update sources to jdk 17.0.0+26 | | - update sources to jdk 17.0.0+26 |
| - set is_ga to 0, as this is early access build | | - set is_ga to 0, as this is early access build |
| - change vendor_version_string | | - change vendor_version_string |