Draft: openjdk(11-23): security upgrades for oracle CPU october 2024

https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixJAVA

marked this merge request as draft

added 8 commits

• 057ac25b...1d5b8d38 - 3 commits from branch alpine:master
• 87c18383 - community/openjdk11: security upgrade to 11.0.25
• 947e979f - community/openjdk17: security upgrade to 17.0.13
• 34a52e97 - community/openjdk21: security upgrade to 21.0.5
• 09abec0a - testing/openjdk22: upgrade to 22.0.2
• 1f29ef86 - testing/openjdk23: security upgrade to 23.0.1

Compare with previous version

added 106 commits

• 1f29ef86...3c245c8b - 101 commits from branch alpine:master
• d08b5df5 - community/openjdk11: security upgrade to 11.0.25
• 527337fd - community/openjdk17: security upgrade to 17.0.13
• af079f48 - community/openjdk21: security upgrade to 21.0.5
• 7d5d8c38 - testing/openjdk22: upgrade to 22.0.2
• 6deaa700 - testing/openjdk23: security upgrade to 23.0.1

Compare with previous version

riscv64 hangs as always on the gitlab runner, same for ppc64le. They should work fine on the real builders.

As for the loongarch64 errors I have to further investigate why it can't find the libjvm.so

mentioned in merge request !74045 (merged)

mentioned in merge request !74046 (merged)

mentioned in merge request !74047 (merged)

mentioned in merge request !74048 (merged)

mentioned in merge request !74049 (merged)

split into separate MRs

closed

Have you solved the Loongarch issues?

not yet, but I think it's easier to analyse in separate MRs

OpenJDK2X started placing libjvm.so in different subdirectories based on the variant built. Before this it always went into the server dir even when building Zero VM, now it goes into zero instead (for Loongarch).

There is a new abuild 3.14.0 requirement that abuild must always be able to determine the location of such *.so files, so you will need to adjust ldpath= (probably use $_jvm_variant instead of a hardcoded server (only for OpenJDK2X)).

Thank you so much for analyzing this, I'll fix this asap

$_jvm_variants*

or, place both $_java_home/lib/server and $_java_home/lib/zero into ldpath, this will work too.

You're welcome