Commit 51235b6d authored by Timo Teräs's avatar Timo Teräs
Browse files

community/openjdk8: security upgrade to 3.3.0 (java 8 u121)

enable sunec (ref #6809)

S8138725: Add options for Javadoc generation
S8140353: Improve signature checking
S8151934, CVE-2017-3231: Resolve class resolution
S8156804, CVE-2017-3241: Better constraint checking
S8158406: Limited Parameter Processing
S8158997: JNDI Protocols Switch
S8159507: RuntimeVisibleAnnotation validation
S8161218: Better bytecode loading
S8161743, CVE-2017-3252: Provide proper login context
S8162577: Standardize logging levels
S8162973: Better component components
S8164143, CVE-2017-3260: Improve components for menu items
S8164147, CVE-2017-3261: Improve streaming socket output
S8165071, CVE-2016-2183: Expand TLS support
S8165344, CVE-2017-3272: Update concurrency support
S8166988, CVE-2017-3253: Improve image processing performance
S8167104, CVE-2017-3289: Additional class construction refinements
S8167223, CVE-2016-5552: URL handling improvements
S8168705, CVE-2016-5547: Better ObjectIdentifier validation
S8168714, CVE-2016-5546: Tighten ECDSA validation
S8168728, CVE-2016-5548: DSA signing improvments
S8168724, CVE-2016-5549: ECDSA signing improvments
parent 8e7189a1
......@@ -2,11 +2,11 @@
# Contributor: Jakub Jirutka <jakub@jirutka.cz>
# Maintainer: Timo Teras <timo.teras@iki.fi>
pkgname=openjdk8
_icedteaver=3.2.0
_icedteaver=3.3.0
# pkgver is <JDK version>.<JDK update>.<JDK build>
# Check http://icedtea.classpath.org/wiki/Main_Page when updating!
pkgver=8.111.14
pkgrel=1
pkgver=8.121.13
pkgrel=0
pkgdesc="OpenJDK 8 provided by IcedTea"
url="http://icedtea.classpath.org/"
arch="all"
......@@ -139,6 +139,9 @@ build() {
--with-pax=paxmark \
--with-jdk-home="$_bootstrap_java_home" \
--with-pkgversion="Alpine ${pkgver}-r${pkgrel}" \
--enable-nss \
--enable-sunec \
--enable-non-nss-curves \
|| return 1
make || return 1
}
......@@ -246,57 +249,57 @@ demos() {
"$subpkgdir"/$_java_home/
}
md5sums="c25ceec95f8df5066c617b14f2735227 icedtea-3.2.0.tar.gz
c7a7681fff0afda6a897b135820a1440 openjdk-3.2.0.tar.xz
19a12dc608da61a6878f4614a91156af corba-3.2.0.tar.xz
8b1171ec1060517fc1c4eee162c78b33 jaxp-3.2.0.tar.xz
ca6bbcdb0f87399bd0a5481ad55939c8 jaxws-3.2.0.tar.xz
5f5d90b7036f1e8561f6943308528e80 jdk-3.2.0.tar.xz
9d105ca8e4de3936fe1a4916ec30ad7f langtools-3.2.0.tar.xz
cc5f423ed2949ee8a7e25d43f0cb425f hotspot-3.2.0.tar.xz
05fa4f0110a5c9c18828a3e359b1adde nashorn-3.2.0.tar.xz
md5sums="eb6fc764df734e284cb485de909d7a31 icedtea-3.3.0.tar.gz
2d1c5467d3c7818ee7ec81d37c1bbbd4 openjdk-3.3.0.tar.xz
1bc8c5b63eca3918f1c4c934bf66b233 corba-3.3.0.tar.xz
2b3559177fead9ccb56db07191102870 jaxp-3.3.0.tar.xz
92612fa7cfecf27357743c932a091b9b jaxws-3.3.0.tar.xz
2a732b3f46453fb45b1a37b7c1ab3db8 jdk-3.3.0.tar.xz
b10431e5823ac859de631e183b1d0b67 langtools-3.3.0.tar.xz
e600f285d00ee367b4129450c35f113a hotspot-3.3.0.tar.xz
9cc3887801b7ad6c290c4adf4a742130 nashorn-3.3.0.tar.xz
2f4a5b0ec7a2bf7ab609da10b86dca4c icedtea-hotspot-musl.patch
bd148291e75d536972cb2b1b68e5cb05 icedtea-hotspot-noagent-musl.patch
43023861c5f6efc3139a834aa3ec0476 icedtea-hotspot-uclibc-fixes.patch
bdea7060a067faf1c2de5f4eb6e8525d icedtea-jdk-execinfo.patch
250b0807b59762670954b132e8f8dfba icedtea-jdk-fix-ipv6-init.patch
4dcba8ae18346298c0d0b817f6922415 icedtea-jdk-fix-libjvm-load.patch
b708c7630efb0b0fe7bb3eca58cb1629 icedtea-jdk-musl.patch
ae8b8d44db2ef9a1ee112823957d0ebd icedtea-jdk-musl.patch
da4b0b67d9b5c7f742bcea70722acd94 icedtea-jdk-includes.patch
d13bf1213635a702611af295d3977fe1 icedtea-autoconf-config.patch"
sha256sums="88cc563d5cf4d7d0e8a394800ba580c922c5703dded4922551eb1a2425010b86 icedtea-3.2.0.tar.gz
6c1040b4044efdd0c413d15865304f1ac46230d91435a31347a7b755e91e7924 openjdk-3.2.0.tar.xz
902607987e26c67489f01fe8cf693fbbbd5850f3b9b06ff12af5486b75822387 corba-3.2.0.tar.xz
61d6c7a44746ace38812582474b66c2c96f1ce9c7bd5b9ad251b4d5982bee6d6 jaxp-3.2.0.tar.xz
1285b9cb273b6fa97f985ace4cb6b5dc1963b1d5e0ae06ad4802f5ff678465b9 jaxws-3.2.0.tar.xz
92557d8fbf826a643c730bbb4081e87140eb45e40e5662fd3d75829b5f61c9c5 jdk-3.2.0.tar.xz
94d1754bba9020b2ee658c7adc2388ac38208e71e55650dc0393d24b20816a4d langtools-3.2.0.tar.xz
9dd74ff7ac16b6104410c7c331f39e96fe50940e4023201b1a2898a8314e1fbf hotspot-3.2.0.tar.xz
5f72fedfa82415fdf98a0a9bf01d2c171b060810b314bf5bb1c69b57123dc910 nashorn-3.2.0.tar.xz
sha256sums="ce74a343759bfe6a7332301835e7c6e77d01db588a1dab672816c9ce338474b1 icedtea-3.3.0.tar.gz
887c5bc24b068efced7d5209367149ca27d8fea330cd5a5fff7767c353b00921 openjdk-3.3.0.tar.xz
19492bdd85166ce55d0f85f96e1d3d0b21e61f4604349ea0b94f6a0aa1388b61 corba-3.3.0.tar.xz
ba5933a2bbf04b0786fd5f046d43314f1b1b2bf2888c586521b37410783bccef jaxp-3.3.0.tar.xz
a443f3243978a87a055ab103468878e5e072706ab0c82d1949ba869fc63571b6 jaxws-3.3.0.tar.xz
688e962ab13055eb6b8668bb48b50eecc7f02f5120b541cfa58f516f875f9f9d jdk-3.3.0.tar.xz
1b0b0fb49c81955573ce509e1801530faa6477e606192fec4b0f951904fb8ac0 langtools-3.3.0.tar.xz
280f706bb0aaada0903e9e907811ea12bc1c216fdaeb2694910f3a99217f6e89 hotspot-3.3.0.tar.xz
0ec045c9c4506f63602d86e72b0c3fdccd75fa95c47ee6a1238639274dc8e92d nashorn-3.3.0.tar.xz
ed114e8d00d6ed1295f5995df02ad13d3d0cd242f7a904600d93b6564856f8df icedtea-hotspot-musl.patch
c14529a29bfdfb51bf5b4a41c977039073f470758e31235d043d373b48d46a11 icedtea-hotspot-noagent-musl.patch
0ef7592b8f2c954eda0a6cf4dc4a4010942f35ea426f44e34412be6c9a949745 icedtea-hotspot-uclibc-fixes.patch
a35d40f24098747cdb73d9c3742cfb4aecafa0f72c9dfdfe2cb460f9706ff665 icedtea-jdk-execinfo.patch
632683ec88a6fb250ef043aae9cace605d0c669b7058f8c47b62b09b03ecc6c5 icedtea-jdk-fix-ipv6-init.patch
c0f7e07293883142d7d7776c9e43a3bba7d45e4abbce6dc0fb531d25ed836ed4 icedtea-jdk-fix-libjvm-load.patch
749f9a5644253caaa0dc5b1d3ee31ed61e1392fdd127d6c68eef367902fe834c icedtea-jdk-musl.patch
f6965fb31ec44389acec74c98b438a43ee2349c18586b66c71baf6a0b5ccdc50 icedtea-jdk-musl.patch
8f4edc784fd70b27f91a0acf05a1de19fc300a35852b74668332ed747ec52073 icedtea-jdk-includes.patch
51ced4c77b97744fd0ecfbeca3f94e2da1fc5072dac7830c141f70887c503c33 icedtea-autoconf-config.patch"
sha512sums="e0be02d37f76586616b68fa4f1a93f3d098d2f1fa3dcd8a1294579ce4c79e0002e7673c90a328e153869996392e6ad8a208379f42c05d225e489d8f838601abb icedtea-3.2.0.tar.gz
89a3d39afcd6a7a1c8c55d0b7aa1a4c3d87878cf97ffe96fe13fe014edb28588cd8505281ba127eb6275b3639bbdc28593cdbf8cd56e4b033fa83c75c48b0029 openjdk-3.2.0.tar.xz
b66f13f3f65085857bbdfb37d4d05a872a4cdb115394787365c8b4f67a70b95df4c66702b930fb6ec637e9f5065e21283df344127d618477d3e1beca7b9d047a corba-3.2.0.tar.xz
44c0c43509a5c7e7f95ff319a857019acfc1645cadc584e5a20bbc4df2ba154f1d6ed85f9e6154f5526800dcc997971b53762040c2392f4edafe85c55e05721a jaxp-3.2.0.tar.xz
5768d2dcee308e4060f797b30176959ea1295fd448a1525ecd40fc8a5bd1e97daa81813c19d1aed370f063e81a33bed4a6cb6bbebaa55de11f6173c7eda86574 jaxws-3.2.0.tar.xz
c52136ce97db6a77fd878f4af8182aa1232a02f6010ac9cf570c99ef9576af6427f703b10efc6546bb4a72f91e2f2c39a891b54b9b34ecfc997713ed2a74025f jdk-3.2.0.tar.xz
b799f21be6bab4cec51a3b4b8e3b578aa91501449bfd336c0fedb04df109644a41e57e847eda65bf4cee54b3f55bb8785a4c0df5fb5ff9021870883c77fe3898 langtools-3.2.0.tar.xz
69df8dc706900d07eca71982de27c55c9cde18c41061752e91108c30cd85d0d9b37f8b9e041aab0622746510900173bb635cdc4cc3c4fd0f795898fc15158441 hotspot-3.2.0.tar.xz
c526678a0c406300e92e8290617518bf326e6992f0cf8b305aa28b45e52b92cbd5a5fa54ea9ef93862a0acbf1a14a1f15986bc64ffb55a6f769a5be068e0e5e2 nashorn-3.2.0.tar.xz
sha512sums="a419e71ff68d89dafc8ab4f98f81f01f199aa835a64ff9c34777fc3dcb9c0ba72bc3ab55ca39995e06c20d1e63df885f6bfc3dc7e6dff6f6efc24c6834fb51ab icedtea-3.3.0.tar.gz
d98790823408e09f3fa9946ceeeda48187dddd3302625fc546d64a4ecc89967235c550af23c05368a90d8dd2ceb38c092cd3130958132d18d30692342bd1151e openjdk-3.3.0.tar.xz
b1f44e1e41b3565bd45176f726e4d1c2999c5ff25a5f2e973f0e5836b7fd2cf6540eae83d3944b303677797e052abd950bb9748fb3e218e4c71b1ea059bf1209 corba-3.3.0.tar.xz
3addabc7478c8a443de5db5606b9eb71778484ed68943d3aa2b61c02bff993d3cb446333be7a5bfc90f8757d0125eb1f53f2483c60c79bb0f19e642e1696ddcd jaxp-3.3.0.tar.xz
1b83b0a90cf0c11220cae034d2f86ad51ff8f6d153dc22e8e9f65b8ec4de8f7148fd37356aa19098e6545967da3c53e87edac747adfa76e254c1fc9d31e4ec1b jaxws-3.3.0.tar.xz
60c932a057dc1869bec52ea73af2a21af9e622a196510d074c5d17c01bf7d98babd651f5577bafe96a832e6a54ded8704c4f7d964f0874edaf2222bdbe3c0c46 jdk-3.3.0.tar.xz
13065b54ca036ad11b8879d9ebaa725a823c25cda5b28f0092902bda2b8879cfd000d132916302f2661b63b03c0bec90d1adfe4863d38c201cfbdf74f1f942c6 langtools-3.3.0.tar.xz
8a593b1c9f022e7a3efa834c5547c59f1a2143f946edae2647a3368f9d4d39b9d473f36575d395e627e5bfac1f9cdef0efe607e0a81b40c46dca44ad6d59a65b hotspot-3.3.0.tar.xz
c0aec36e921288b6ad11e71daa32111a4ee45302a2bbe407229cc143f05869372993f7b0dd366c07ecb31fac47e1d3cdb0c59cc1a48375d3719656c2159fee95 nashorn-3.3.0.tar.xz
ada3bc4024682bfb86ebf3850d3a36cf4c0f0677a6d56eac2e0959b92bfe759010d5b9c801b043cae3ca8418d7819546ae245ac163df83e48c5d4b34478daeb0 icedtea-hotspot-musl.patch
3c592a14f1806a431290a96a8c1413ca1cc621e73a87ed778fa98878c82809bd924072210d4e4127a6c0c32ff557d749f6c9b3ce31cbca083b013240b618b224 icedtea-hotspot-noagent-musl.patch
822eee0dc4d3ba677a289dfeb3668b536d2d626708390a9d9702fb4144a481fd443a215a0d2041c6026113837aafa4ba0b5e9ead8589d2da6717a238bbc95a5a icedtea-hotspot-uclibc-fixes.patch
f6365cfafafa008bd6c1bf0ccec01a63f8a39bd1a8bc87baa492a27234d47793ba02d455e5667a873ef50148df3baaf6a8421e2da0b15faac675867da714dd5f icedtea-jdk-execinfo.patch
48533f87fc2cf29d26b259be0df51087d2fe5b252e72d00c6ea2f4add7b0fb113141718c116279c5905e03f64a1118082e719393786811367cf4d472b5d36774 icedtea-jdk-fix-ipv6-init.patch
b135991c76b0db8fa7c363e0903624668e11eda7b54a943035c214aa4d7fc8c3e8110ed200edcec82792f3c9393150a9bd628625ddf7f3e55720ff163fbbb471 icedtea-jdk-fix-libjvm-load.patch
dc41a132e310101dfdd0d3e17eba8a53acb67392ab0d16cf09d24084ab467921a9ebfa33cde0e4e63e65c55ce7edcaf12edee10eea66e37b12ac9dba0419ac61 icedtea-jdk-musl.patch
cdebe2c59657e7fd317a4841b2fbe95d9e8d7ee9d1593edf352ed7f49a92a42cbce82cbaa404d3f02c6d273eae03222a79559c09bf6cf439396c5ec5434f5458 icedtea-jdk-musl.patch
c6caaa69a75dfcf922f7a700a4c780568ead18e8774b9df2c1d86d1ab9f5a21c239952c4053f0f839b4255c0da69d2f42cdd87637db7cf5333076872f63580e0 icedtea-jdk-includes.patch
662d662d0a7a84be2978e921317589f212f3ba3b7629527ba0f1140b5ac4c1024893e0ed176211688ed1a4505968c4befc841ed57ffcdbb9d355c2cb0571b167 icedtea-autoconf-config.patch"
--- openjdk.orig/jdk/src/share/native/com/sun/java/util/jar/pack/zip.cpp
+++ openjdk/jdk/src/share/native/com/sun/java/util/jar/pack/zip.cpp
diff -ru openjdk.orig/jdk/src/share/native/com/sun/java/util/jar/pack/zip.cpp openjdk/jdk/src/share/native/com/sun/java/util/jar/pack/zip.cpp
--- openjdk.orig/jdk/src/share/native/com/sun/java/util/jar/pack/zip.cpp 2017-01-25 04:22:03.000000000 +0000
+++ openjdk/jdk/src/share/native/com/sun/java/util/jar/pack/zip.cpp 2017-02-06 11:23:47.041165210 +0000
@@ -46,6 +46,8 @@
#include "zip.h"
......@@ -9,8 +10,9 @@
#ifdef NO_ZLIB
inline bool jar::deflate_bytes(bytes& head, bytes& tail) {
--- openjdk.orig/jdk/src/share/native/com/sun/java/util/jar/pack/zip.h
+++ openjdk/jdk/src/share/native/com/sun/java/util/jar/pack/zip.h
diff -ru openjdk.orig/jdk/src/share/native/com/sun/java/util/jar/pack/zip.h openjdk/jdk/src/share/native/com/sun/java/util/jar/pack/zip.h
--- openjdk.orig/jdk/src/share/native/com/sun/java/util/jar/pack/zip.h 2017-01-25 04:22:03.000000000 +0000
+++ openjdk/jdk/src/share/native/com/sun/java/util/jar/pack/zip.h 2017-02-06 11:23:47.047832009 +0000
@@ -23,9 +23,7 @@
* questions.
*/
......@@ -22,8 +24,9 @@
struct unpacker;
--- openjdk.orig/jdk/src/share/native/sun/awt/medialib/mlib_types.h
+++ openjdk/jdk/src/share/native/sun/awt/medialib/mlib_types.h
diff -ru openjdk.orig/jdk/src/share/native/sun/awt/medialib/mlib_types.h openjdk/jdk/src/share/native/sun/awt/medialib/mlib_types.h
--- openjdk.orig/jdk/src/share/native/sun/awt/medialib/mlib_types.h 2017-01-25 04:22:03.000000000 +0000
+++ openjdk/jdk/src/share/native/sun/awt/medialib/mlib_types.h 2017-02-06 11:23:47.047832009 +0000
@@ -27,6 +27,7 @@
#ifndef MLIB_TYPES_H
#define MLIB_TYPES_H
......@@ -32,8 +35,9 @@
#include <limits.h>
#if defined(_MSC_VER)
#include <float.h> /* for FLT_MAX and DBL_MAX */
--- openjdk.orig/jdk/src/solaris/native/java/net/Inet4AddressImpl.c
+++ openjdk/jdk/src/solaris/native/java/net/Inet4AddressImpl.c
diff -ru openjdk.orig/jdk/src/solaris/native/java/net/Inet4AddressImpl.c openjdk/jdk/src/solaris/native/java/net/Inet4AddressImpl.c
--- openjdk.orig/jdk/src/solaris/native/java/net/Inet4AddressImpl.c 2017-01-25 04:22:03.000000000 +0000
+++ openjdk/jdk/src/solaris/native/java/net/Inet4AddressImpl.c 2017-02-06 11:23:47.047832009 +0000
@@ -47,7 +47,7 @@
#include "java_net_Inet4AddressImpl.h"
......@@ -43,19 +47,22 @@
#define HAS_GLIBC_GETHOSTBY_R 1
#endif
--- openjdk.orig/jdk/src/solaris/native/java/net/NetworkInterface.c
+++ openjdk/jdk/src/solaris/native/java/net/NetworkInterface.c
@@ -47,7 +47,6 @@
diff -ru openjdk.orig/jdk/src/solaris/native/java/net/NetworkInterface.c openjdk/jdk/src/solaris/native/java/net/NetworkInterface.c
--- openjdk.orig/jdk/src/solaris/native/java/net/NetworkInterface.c 2017-01-25 04:22:03.000000000 +0000
+++ openjdk/jdk/src/solaris/native/java/net/NetworkInterface.c 2017-02-06 11:23:47.047832009 +0000
@@ -46,7 +46,6 @@
#ifdef __linux__
#if defined(__linux__)
#include <sys/ioctl.h>
-#include <bits/ioctls.h>
#include <sys/utsname.h>
#include <stdio.h>
#endif
--- openjdk.orig/jdk/src/solaris/native/java/net/PlainDatagramSocketImpl.c
+++ openjdk/jdk/src/solaris/native/java/net/PlainDatagramSocketImpl.c
@@ -35,7 +35,6 @@
Only in openjdk/jdk/src/solaris/native/java/net: NetworkInterface.c.orig
diff -ru openjdk.orig/jdk/src/solaris/native/java/net/PlainDatagramSocketImpl.c openjdk/jdk/src/solaris/native/java/net/PlainDatagramSocketImpl.c
--- openjdk.orig/jdk/src/solaris/native/java/net/PlainDatagramSocketImpl.c 2017-01-25 04:22:03.000000000 +0000
+++ openjdk/jdk/src/solaris/native/java/net/PlainDatagramSocketImpl.c 2017-02-06 11:23:47.047832009 +0000
@@ -41,7 +41,6 @@
#endif
#ifdef __linux__
#include <unistd.h>
......@@ -63,8 +70,10 @@
#include <sys/utsname.h>
#include <netinet/ip.h>
--- openjdk.orig/jdk/src/solaris/native/java/net/PlainSocketImpl.c
+++ openjdk/jdk/src/solaris/native/java/net/PlainSocketImpl.c
Only in openjdk/jdk/src/solaris/native/java/net: PlainDatagramSocketImpl.c.orig
diff -ru openjdk.orig/jdk/src/solaris/native/java/net/PlainSocketImpl.c openjdk/jdk/src/solaris/native/java/net/PlainSocketImpl.c
--- openjdk.orig/jdk/src/solaris/native/java/net/PlainSocketImpl.c 2017-01-25 04:22:03.000000000 +0000
+++ openjdk/jdk/src/solaris/native/java/net/PlainSocketImpl.c 2017-02-06 11:23:47.047832009 +0000
@@ -43,7 +43,6 @@
#endif
#ifdef __linux__
......@@ -73,8 +82,9 @@
#endif
#include "jvm.h"
--- openjdk.orig/jdk/src/solaris/native/java/net/linux_close.c
+++ openjdk/jdk/src/solaris/native/java/net/linux_close.c
diff -ru openjdk.orig/jdk/src/solaris/native/java/net/linux_close.c openjdk/jdk/src/solaris/native/java/net/linux_close.c
--- openjdk.orig/jdk/src/solaris/native/java/net/linux_close.c 2017-01-25 04:22:03.000000000 +0000
+++ openjdk/jdk/src/solaris/native/java/net/linux_close.c 2017-02-06 11:23:47.047832009 +0000
@@ -56,7 +56,7 @@
/*
* Signal to unblock thread
......@@ -94,8 +104,9 @@
sa.sa_handler = sig_wakeup;
sa.sa_flags = 0;
sigemptyset(&sa.sa_mask);
--- openjdk.orig/jdk/src/solaris/native/sun/nio/ch/NativeThread.c
+++ openjdk/jdk/src/solaris/native/sun/nio/ch/NativeThread.c
diff -ru openjdk.orig/jdk/src/solaris/native/sun/nio/ch/NativeThread.c openjdk/jdk/src/solaris/native/sun/nio/ch/NativeThread.c
--- openjdk.orig/jdk/src/solaris/native/sun/nio/ch/NativeThread.c 2017-01-25 04:22:03.000000000 +0000
+++ openjdk/jdk/src/solaris/native/sun/nio/ch/NativeThread.c 2017-02-06 11:23:47.051165409 +0000
@@ -36,7 +36,7 @@
#include <pthread.h>
#include <sys/signal.h>
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment