Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package java-11-openj9 for openSUSE:Factory checked in at 2025-05-12 16:47:24 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/java-11-openj9 (Old) and /work/SRC/openSUSE:Factory/.java-11-openj9.new.30101 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "java-11-openj9" Mon May 12 16:47:24 2025 rev:29 rq:1276325 version:11.0.27.0 Changes: -------- --- /work/SRC/openSUSE:Factory/java-11-openj9/java-11-openj9.changes 2025-02-18 21:03:14.642543038 +0100 +++ /work/SRC/openSUSE:Factory/.java-11-openj9.new.30101/java-11-openj9.changes 2025-05-12 16:50:37.545066161 +0200 @@ -1,0 +2,25 @@ +Fri May 9 20:01:10 UTC 2025 - Fridrich Strba <fst...@suse.com> + +- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine +- Including Oracle April 2025 CPU changes + * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275), + CVE-2025-30698 (bsc#1241276) + * OpenJ9 changes, see + https://www.eclipse.org/openj9/docs/version0.51/ +- Removed patch: + * openj9-nasm-noexecstack.patch + + chosing a better upstream solution +- Added patch: + * openj9-noexecstack.patch + + better upstream solution to the previous fix +- Modified patch: + * openssl-OSSL_LIB_CTX.patch + + rediff + +------------------------------------------------------------------- +Wed May 7 06:25:42 UTC 2025 - Simon Lees <sfl...@suse.de> + +- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes + minimum version warnings + +------------------------------------------------------------------- Old: ---- 3c3d179854a524d7f95225999169ee09fda46033.zip 674ad23a805ae5fb2e30642c45918dec3eae257a.zip e49875871c2862e0d132e3695d55273bfbac08b6.zip openj9-nasm-noexecstack.patch New: ---- 31cf5538b0a4875a2310e917a80bb16c81065d3c.zip 3e17c0897e96b7b1dbb3a1f55aa437576fc28bd4.zip 9bcff94a2a0f12baeac8f5d098b597e8ea076b67.zip openj9-noexecstack.patch BETA DEBUG BEGIN: Old:- Removed patch: * openj9-nasm-noexecstack.patch + chosing a better upstream solution BETA DEBUG END: BETA DEBUG BEGIN: New:- Added patch: * openj9-noexecstack.patch + better upstream solution to the previous fix BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ java-11-openj9.spec ++++++ --- /var/tmp/diff_new_pack.xug9HD/_old 2025-05-12 16:50:40.025170617 +0200 +++ /var/tmp/diff_new_pack.xug9HD/_new 2025-05-12 16:50:40.025170617 +0200 @@ -30,19 +30,19 @@ # Standard JPackage naming and versioning defines. %global featurever 11 %global interimver 0 -%global updatever 26 +%global updatever 27 %global patchver 0 -%global buildver 4 +%global buildver 6 %global root_repository https://github.com/ibmruntimes/openj9-openjdk-jdk11/archive -%global root_revision 674ad23a805ae5fb2e30642c45918dec3eae257a -%global root_branch v0.49.0-release +%global root_revision 3e17c0897e96b7b1dbb3a1f55aa437576fc28bd4 +%global root_branch v0.51.0-release %global omr_repository https://github.com/eclipse/openj9-omr/archive -%global omr_revision e49875871c2862e0d132e3695d55273bfbac08b6 -%global omr_branch v0.49.0-release +%global omr_revision 9bcff94a2a0f12baeac8f5d098b597e8ea076b67 +%global omr_branch v0.51.0-release %global openj9_repository https://github.com/eclipse/openj9/archive -%global openj9_revision 3c3d179854a524d7f95225999169ee09fda46033 -%global openj9_branch v0.49.0-release -%global openj9_tag openj9-0.49.0 +%global openj9_revision 31cf5538b0a4875a2310e917a80bb16c81065d3c +%global openj9_branch v0.51.0-release +%global openj9_tag openj9-0.51.0 # priority must be 6 digits in total %global priority 2101 %global javaver %{featurever} @@ -104,7 +104,7 @@ # Fix build with older openssl Patch6: openssl-OSSL_LIB_CTX.patch Patch7: openj9-openssl.patch -Patch8: openj9-nasm-noexecstack.patch +Patch8: openj9-noexecstack.patch # Fix: implicit-pointer-decl Patch13: implicit-pointer-decl.patch # @@ -353,7 +353,7 @@ %patch -P 5 -p1 %patch -P 6 -p1 %patch -P 7 -p1 -%patch -P 8 +%patch -P 8 -p1 %patch -P 13 -p1 %if %{with_system_pcsc} @@ -387,6 +387,9 @@ done %build +# Remove cmake4 error due to not setting +# min cmake version - sflees.de +export CMAKE_POLICY_VERSION_MINIMUM=3.5 export ARCH_DATA_MODEL=64 EXTRA_CFLAGS="-Wno-error -Wno-maybe-uninitialized -fno-delete-null-pointer-checks -fno-lifetime-dse" @@ -851,6 +854,7 @@ %{_jvmdir}/%{sdkdir}/lib/options.default %{_jvmdir}/%{sdkdir}/lib/psfontj2d.properties %{_jvmdir}/%{sdkdir}/lib/psfont.properties.ja +%{_jvmdir}/%{sdkdir}/lib/schema.xsd %{_jvmdir}/%{sdkdir}/lib/tzdb.dat %{_jvmdir}/%{sdkdir}/lib/*/libjsig.so %{_jvmdir}/%{sdkdir}/lib/*/libjvm.so ++++++ 3c3d179854a524d7f95225999169ee09fda46033.zip -> 31cf5538b0a4875a2310e917a80bb16c81065d3c.zip ++++++ /work/SRC/openSUSE:Factory/java-11-openj9/3c3d179854a524d7f95225999169ee09fda46033.zip /work/SRC/openSUSE:Factory/.java-11-openj9.new.30101/31cf5538b0a4875a2310e917a80bb16c81065d3c.zip differ: char 11, line 2 ++++++ 3c3d179854a524d7f95225999169ee09fda46033.zip -> 3e17c0897e96b7b1dbb3a1f55aa437576fc28bd4.zip ++++++ /work/SRC/openSUSE:Factory/java-11-openj9/3c3d179854a524d7f95225999169ee09fda46033.zip /work/SRC/openSUSE:Factory/.java-11-openj9.new.30101/3e17c0897e96b7b1dbb3a1f55aa437576fc28bd4.zip differ: char 11, line 2 ++++++ 3c3d179854a524d7f95225999169ee09fda46033.zip -> 9bcff94a2a0f12baeac8f5d098b597e8ea076b67.zip ++++++ /work/SRC/openSUSE:Factory/java-11-openj9/3c3d179854a524d7f95225999169ee09fda46033.zip /work/SRC/openSUSE:Factory/.java-11-openj9.new.30101/9bcff94a2a0f12baeac8f5d098b597e8ea076b67.zip differ: char 11, line 2 ++++++ openj9-nasm-noexecstack.patch -> openj9-noexecstack.patch ++++++ --- /work/SRC/openSUSE:Factory/java-11-openj9/openj9-nasm-noexecstack.patch 2025-02-18 21:03:14.758547881 +0100 +++ /work/SRC/openSUSE:Factory/.java-11-openj9.new.30101/openj9-noexecstack.patch 2025-05-12 16:50:37.865079639 +0200 @@ -1,11 +1,25 @@ ---- openj9/runtime/compiler/CMakeLists.txt -+++ openj9/runtime/compiler/CMakeLists.txt -@@ -391,7 +391,7 @@ set_source_files_properties( +--- a/omr/cmake/modules/platform/toolcfg/gnu.cmake ++++ b/omr/cmake/modules/platform/toolcfg/gnu.cmake +@@ -69,6 +69,11 @@ if(OMR_ARCH_X86) + endif() + endif() + ++if(OMR_OS_LINUX) ++ list(APPEND OMR_PLATFORM_EXE_LINKER_OPTIONS "-Wl,-z,noexecstack") ++ list(APPEND OMR_PLATFORM_SHARED_LINKER_OPTIONS "-Wl,-z,noexecstack") ++endif() ++ + if(OMR_HOST_ARCH STREQUAL "s390") + list(APPEND OMR_PLATFORM_COMPILE_OPTIONS -march=z9-109) + endif() +--- a/openj9/runtime/compiler/CMakeLists.txt ++++ b/openj9/runtime/compiler/CMakeLists.txt +@@ -403,7 +403,7 @@ set_source_files_properties( if(OMR_OS_LINUX) set_property(TARGET j9jit APPEND_STRING PROPERTY -- LINK_FLAGS " -Wl,--version-script=${CMAKE_CURRENT_SOURCE_DIR}/build/scripts/j9jit.linux.exp") -+ LINK_FLAGS " -Wl,-z,noexecstack -Wl,--version-script=${CMAKE_CURRENT_SOURCE_DIR}/build/scripts/j9jit.linux.exp") +- LINK_FLAGS " -Wl,-z,noexecstack -Wl,--version-script=${CMAKE_CURRENT_SOURCE_DIR}/build/scripts/j9jit.linux.exp") ++ LINK_FLAGS " -Wl,--version-script=${CMAKE_CURRENT_SOURCE_DIR}/build/scripts/j9jit.linux.exp") target_link_libraries(j9jit PRIVATE m) elseif(OMR_OS_WINDOWS) target_sources(j9jit PRIVATE build/scripts/j9jit.def) ++++++ openssl-OSSL_LIB_CTX.patch ++++++ --- /var/tmp/diff_new_pack.xug9HD/_old 2025-05-12 16:50:40.261180557 +0200 +++ /var/tmp/diff_new_pack.xug9HD/_new 2025-05-12 16:50:40.265180725 +0200 @@ -1,8 +1,8 @@ diff --git a/closed/src/java.base/share/native/libjncrypto/NativeCrypto.c b/closed/src/java.base/share/native/libjncrypto/NativeCrypto.c -index f37b70f2d9..7f73e1ffa7 100644 +index 2e53d0a8e1e..1226f96f1f8 100644 --- a/closed/src/java.base/share/native/libjncrypto/NativeCrypto.c +++ b/closed/src/java.base/share/native/libjncrypto/NativeCrypto.c -@@ -64,6 +64,10 @@ +@@ -77,6 +77,10 @@ # include <pthread.h> #endif /* defined(WINDOWS) */ @@ -10,7 +10,7 @@ +typedef struct ossl_lib_ctx_st OSSL_LIB_CTX; +#endif + - /* Header for RSA algorithm using 1.0.2 OpenSSL. */ - int OSSL102_RSA_set0_key(RSA *, BIGNUM *, BIGNUM *, BIGNUM *); - int OSSL102_RSA_set0_factors(RSA *, BIGNUM *, BIGNUM *); + /* Header for NativeCrypto loading methods. */ + static void * find_crypto_symbol(void *handle, const char *symname); + static void * find_crypto_library(jboolean traceEnabled, const char *chomepath);