Security bump #517220

Package-Manager: portage-2.2.10/cvs/Linux x86_64
Manifest-Sign-Key: 0x3C5CF75A

3 files changed, 212 insertions, 9 deletions

diff --git a/dev-java/oracle-jre-bin/ChangeLog b/dev-java/oracle-jre-bin/ChangeLog
index 4128ba0a774b..719d79c82c86 100644
--- a/dev-java/oracle-jre-bin/ChangeLog
+++ b/dev-java/oracle-jre-bin/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for dev-java/oracle-jre-bin
 # Copyright 1999-2014 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/dev-java/oracle-jre-bin/ChangeLog,v 1.58 2014/07/20 20:07:15 sera Exp $
+# $Header: /var/cvsroot/gentoo-x86/dev-java/oracle-jre-bin/ChangeLog,v 1.59 2014/07/20 20:36:57 sera Exp $
+
+*oracle-jre-bin-1.8.0.11 (20 Jul 2014)
+
+  20 Jul 2014; Ralph Sennhauser <sera@gentoo.org>
+  +oracle-jre-bin-1.8.0.11.ebuild:
+  Security bump #517220
 
 *oracle-jre-bin-1.7.0.65 (20 Jul 2014)
 
diff --git a/dev-java/oracle-jre-bin/Manifest b/dev-java/oracle-jre-bin/Manifest
index 25250b08b0bf..f7e7572a3fd1 100644
--- a/dev-java/oracle-jre-bin/Manifest
+++ b/dev-java/oracle-jre-bin/Manifest
@@ -12,22 +12,25 @@ DIST jre-7u60-linux-i586.tar.gz 48420952 SHA256 76e9c4f7cdd62025fe7004221cdeceab
 DIST jre-7u60-linux-x64.tar.gz 46984374 SHA256 73d6d759f524320671904447f9436ff0e60aa9379cacc0838001d6259e86216d SHA512 5b788e4f6a3bf70d32206d7b2b435b0a91d94ca364dc8b1546b7a7612240f316278f21b37b7ef7c4b2e4558f887a470985c65b378e2fc0d408a63da5c9c3369a WHIRLPOOL f570253cbe057781a2f420e03088d75b3ee34f3c5d26c1077f0ca3e986401a418c0d9381351c0cb9c51c3ea6288ce1829acedafdd8a4e604fcba250930288684
 DIST jre-7u65-linux-i586.tar.gz 48423426 SHA256 f39d334650464d1084dd6e40fcfa0b6f9fa52fcdc549dc9312d9e13fefc5bdcb SHA512 240fdb36cdca74e7b99a70a0600433f40bf47365c2186a4b1fddc73856898e5fd414b22336787319906e917d37ab58769f948bdbfa3eb271bf6189d86395ce64 WHIRLPOOL 53fbf65d043d970bdec9798c138c2b91c3e4499f7acfea87bda02e94a4aedb9eb07866e63640b27961552a4aea58f34f7255950572ee9888b74561f3e4e1065b
 DIST jre-7u65-linux-x64.tar.gz 47005094 SHA256 132d7770e74dc8d34039f0d452738b427501ba75e0ced8053491d31de0e6ab31 SHA512 20ec4cfe71927b47d931f19568411887015264538650925dd1662932714f051f554f44fc064ce65485579be23af3c69c992553cacfb0440a229ad62f7dfaf697 WHIRLPOOL c60b58e509229961f9be0831ac809f044a40b832bd0740e874a5957dca63e418b8f78545d454d6951be59119038bdacf81eb6efde1cef364e84714f0353625c1
+DIST jre-8u11-linux-i586.tar.gz 58188271 SHA256 b1348b4842cc23862ea9ef69f71674f49fc1197caec0a8d82502009568762442 SHA512 96b2641b95675769eb01d1a07390ed3417c1e46bd618cbf7abdaaef68e9e72050cb2efb67260602e6458d2c4f388cceda2b579262387ed6dfc82afded0a24a36 WHIRLPOOL 42710fa9c8bbcc1dad31047938ee08be7df9e51d7b89aaee2c6d52c88f3f0ed4109f2d24c83399e2a6e6117301c6aa9231176368b34876eea45226a998af2ffc
+DIST jre-8u11-linux-x64.tar.gz 57081154 SHA256 17d0d015c3bd7e535490c6ce869655b6ac4024ba3dc39dc9ed743de4376750a4 SHA512 e8d7aaa89a566e7fdabf12fddfb8eecada98dbece9163bdbfdccc42f6a0a4d52bbf94ad1e5902c194460c653c05066f980fd937d6d8ffa5cced9eeb1f4d8b9ae WHIRLPOOL 54182e5ee3a3aa111eff1314a74db6cb4179359e723782300e2616eb1b930f9e54f5581d3e19d9649da234ce9ec501036e8dd068f619585d5cb43e7041b5e455
 DIST jre-8u5-linux-i586.tar.gz 58156527 SHA256 77a81e63325af682d52875e6699d5edd5f3be668025bcc99f5d9132c46b82053 SHA512 095feaf587e5c24bb1157e9a6bfafbcc11d1e726d4b7573b82e1412932a53a3bf942721877c95f87853b7fbc92e3dca5abe83c13d6fa52eee608c4d41afe7a30 WHIRLPOOL 973ec3d2cd30f271f56c86b0097723d5aeaf7301f9a715af3189f922c767f0d31e8c613554338f8e55c7ecf6d2bb36794c3f1c84d01e22b31829e45b73cddb29
 DIST jre-8u5-linux-x64.tar.gz 57056684 SHA256 de7ba8e27b9e7352c44608969871dc11dedadd26d81865f9a42aabff8dadba2a SHA512 961a3dc49fe8ee3bb51b871c139c65c4c020431b2ff5cbe3532c0af3e2d584a094f2a3b8aee89cf1e803bd0ae2dd3447f31377af3f16c477c0150a281a3f0378 WHIRLPOOL 3503edab4be5d345c0ecb398583420a017e8c33eb6385d7d7844326e77be6962dfb1724867721ff0e96de6cf9b62d6bd0cb6ab34071add1f5e7ff5d01712b02a
 EBUILD oracle-jre-bin-1.7.0.55.ebuild 4956 SHA256 ec5a0c1801bbe6428e757d1eb4a76ab8836f783587cde44ff74a95e4cb9d40d7 SHA512 97073a55620888dd2bb4ecab5c3c5da276832b727e55ca32841cb7ce5026e40c83aca2eb41a2435dfe9016d3b8b75ded0939d4cebb44fb69373cd646d55c23ae WHIRLPOOL f326ac4d59e4a900623a377902269fabc804cc17266120b93739bdd7079b0a4c719d537505a1e2cedd38e941c75117542191bc2e1220b1e20604e2e8872d318c
 EBUILD oracle-jre-bin-1.7.0.60.ebuild 4956 SHA256 903c05cc7a1cb1b68a3da152db20aa05c76923540cd218c008e9d791dd014ec4 SHA512 f57e1058160d38354147ec7c9ee40f394963790b724fe50a358d53dbd41718f0d098d5687753f2c785e8675d8cedc2d155404065a0f2e2e27a08509c4ac052a8 WHIRLPOOL e1edd5bf193ddc8a85d161ec323c5e73f11ac7239f88889da945d0601a5021e2e3080a5bddd0397a2a0160b068eef71823a35980572792129fbaf802717e7061
 EBUILD oracle-jre-bin-1.7.0.65.ebuild 5130 SHA256 3f6944858df32618830bbfcac652e9720b4dca852bc8b0b383b214cc9eaae5f6 SHA512 2875bbb56285eeeb80429c8b680d2d1ce7cd4e861a5fdc8b88c3e5cc0e061e8d17cfe4b2dcd3077a0b6411da79abdf4a39bd5e10b747a42d6ad347e68feb1ba7 WHIRLPOOL 5e33b64d8da04dc2af6b947edc46e05bb124a3b91352e6fff78dda64117660abb0c9dd712df2a2ad22a6579319fcb301404bd593829a93a65e76f33af900622e
+EBUILD oracle-jre-bin-1.8.0.11.ebuild 5554 SHA256 8a98f0b8b25aee0f1d522226ab03a2791619b4c3796b586db472538f64dd5e8b SHA512 a1f4086deaf2891a1b75eaca144c84f95997deff27ff40894c67a8678f2798b406904879af43a7c6e8639e71d7c663c6a4f7133d6a6dfbbd51542ff1189ae800 WHIRLPOOL cb809ae4e8b69d66cd5d8ff14dfa17aef1e86ac181e518afa2d4e56f426913d6a47d7b8ce40f44a697b97a31f7ac47429af07cc3d6f262b44827991244dcb69c
 EBUILD oracle-jre-bin-1.8.0.5.ebuild 5553 SHA256 63d627a6d9368c0a3e0fbb509476ca7f1f375a580bd66209751c36258206076d SHA512 796c98f024fe9799e4ae71381dfca1a8401d8ca5920bf147b00e51f4ecae4d887f35bc84c6d10bc8eb729e6721658a1773e6be0e6f7ec886edd8dd4ea75d3f74 WHIRLPOOL dc39a640546787c7d4bd3a174872f8db526d6d1e5a7e265f20f42a26534af645530532fec50040ea4bb8b27f5eb7160b0d5d809e972ab3c0e338676362295705
-MISC ChangeLog 9956 SHA256 ec2e5d2fb8bfbc436f08a6a1cc2f61db4eb290d87be9a2a025c57e8896c88550 SHA512 35264f1aa44d2eb76754302fd1df46ee0b245cf9dec5fcc2743503bb3ec4322828566094f4686ee1d023fde5469bb45de8d1deed155fb4d9e8ab6e3ae61c63a7 WHIRLPOOL 7d1445aa77d4e2e3862e07a2ae3e7106245ad2f243709fce9f717012efff66621bfc05e83c7e12c5a9daa4feb6ba73100b52e46e7a911993a80db25c7db089e1
+MISC ChangeLog 10106 SHA256 95cbe27d62c7eed6b828bec40ce2976ce1a54dc5cbb9a881e8a6277a04268654 SHA512 ed1cfbe4d29457d91b5a7d0c559b62a1c6ed576565160f0dd703aca9808dbfbb6dda8200936b0458d495398bc0d808109c2a054149f3b1047b9d9bdba58dcbc6 WHIRLPOOL 492e8b38b92f91526d0a375e97a3c6426176571ea6f2b3094035dde48d46ea3eae49ad7c4617fc14dd15a2b112ce71fa0a69a6ad666679411cf9c1cd22c21dae
 MISC metadata.xml 446 SHA256 6c1b5ea55c7570c8ebdc2c59ebdd09a50fd3704202ba4d0210e07161d0be2d0f SHA512 4443bb556d293a8a7cc98f5956203b355255820c1d7b3650c75adc04c0c0e10fffd7751f22f2111a2f43c8dc451ba35719a94c25223fad5559d88d9701673ffe WHIRLPOOL 7a6430e9039f2a8d03f5874eea63e980998ee0756a1df4d15cb85f8afafcacc67ccd33b34f3cfe186586ebf7245b5b1760317e2a3cfe0dadd6da693a7e39203e
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2
 
-iQEcBAEBCAAGBQJTzCF+AAoJELjwI6Q8XPdapm4H/jlCUKPqpKKwLAicFLeGePEs
-W49HTDcgx48FfZ6ggBWMd219YQq15ZnoYa2yoCd05R5rVgSIZJlORWhxgJdKHvgN
-PpuBbNU8pG39axo/6H4dj1gksjMidpZ6gGwPBo+W6hm6kycidPV8ghk0A7ySjvJi
-5nPKuKiDi3mjSXw1dVlPV6Ja8qoEeF6BTiSgH24FtdbwM6iUGamJzmfKq2zcz9O/
-Ut7mkAbcJa9FW5i8VM7jLgnxeOrbopvINR5qKrc35kxP60c4I4K603h3xUYnhW3Q
-I6ZbGsp8u9gHlDeqXAMv9A4zJVNmPD0ewNwi0MbBVhvxFT00UkHoW/4F35Rvf1w=
-=X2p0
+iQEcBAEBCAAGBQJTzChzAAoJELjwI6Q8XPdaKb8IAKP7XMm03gylVuhKuhnJkkbo
+uZ9Q2l6Z+FiPAWFHLB/zWAGSrENEWtX5eW+FxTZ3o0CI+LIfGMbyy9bE3k+MDR79
+VYsn7I0vM43SxNzd7pZJfu/5UmFfRMQUZdDiAYWN6gMdBkCh3kEDOtpWZopxEBth
+vJAIOQvUDFL1UjoJRT/m6k7oyyLCJdVRqYzBzn9Xlg9+b2QZs0LFKT+L5zsFEUeD
+chnpuBgOopjlAkn5UHlin/2GuRwDshZWPU2ybtzsGIIR5ZOr3ooX+vJ0256G7Bh6
+fLEvED7UwTFeGvzs3IBWVA/kctgroJj6NFc5Js1xIBikYw8ezA8WbLzoruwDjeA=
+=YzPP
 -----END PGP SIGNATURE-----
diff --git a/dev-java/oracle-jre-bin/oracle-jre-bin-1.8.0.11.ebuild b/dev-java/oracle-jre-bin/oracle-jre-bin-1.8.0.11.ebuild
new file mode 100644
index 000000000000..9f3bd4e9f021
--- /dev/null
+++ b/dev-java/oracle-jre-bin/oracle-jre-bin-1.8.0.11.ebuild
@@ -0,0 +1,194 @@
+# Copyright 1999-2014 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/dev-java/oracle-jre-bin/oracle-jre-bin-1.8.0.11.ebuild,v 1.1 2014/07/20 20:36:57 sera Exp $
+
+EAPI="5"
+
+inherit java-vm-2 eutils prefix versionator
+
+if [[ "$(get_version_component_range 4)" == 0 ]] ; then
+	S_PV="$(get_version_component_range 1-3)"
+else
+	MY_PV_EXT="u$(get_version_component_range 4)"
+	S_PV="$(get_version_component_range 1-4)"
+fi
+
+MY_PV="$(get_version_component_range 2)${MY_PV_EXT}"
+
+X86_AT="jre-${MY_PV}-linux-i586.tar.gz"
+AMD64_AT="jre-${MY_PV}-linux-x64.tar.gz"
+
+# This URIs need updating when bumping!
+JRE_URI="http://www.oracle.com/technetwork/java/javase/downloads/jre8-downloads-2133155.html"
+JCE_URI="http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html"
+
+JCE_DIR="UnlimitedJCEPolicyJDK8"
+JCE_FILE="jce_policy-8.zip"
+
+DESCRIPTION="Oracle's Java SE Runtime Environment"
+HOMEPAGE="http://www.oracle.com/technetwork/java/javase/"
+SRC_URI="
+	x86? ( ${X86_AT} )
+	amd64? ( ${AMD64_AT} )
+	jce? ( ${JCE_FILE} )"
+
+LICENSE="Oracle-BCLA-JavaSE"
+SLOT="1.8"
+KEYWORDS="~amd64 ~x86"
+IUSE="X alsa fontconfig jce nsplugin pax_kernel"
+
+RESTRICT="fetch strip"
+QA_PREBUILT="*"
+
+RDEPEND="
+	X? (
+		x11-libs/libXext
+		x11-libs/libXi
+		x11-libs/libXrender
+		x11-libs/libXtst
+		x11-libs/libX11
+	)
+	alsa? ( media-libs/alsa-lib )
+	fontconfig? ( media-libs/fontconfig )
+	!prefix? ( sys-libs/glibc )"
+# scanelf won't create a PaX header, so depend on paxctl to avoid fallback
+# marking. #427642
+DEPEND="
+	jce? ( app-arch/unzip )
+	pax_kernel? ( sys-apps/paxctl )"
+
+S="${WORKDIR}/jre"
+
+pkg_nofetch() {
+	if use x86; then
+		AT=${X86_AT}
+	elif use amd64; then
+		AT=${AMD64_AT}
+	fi
+
+	einfo "Please download '${AT}' from:"
+	einfo "'${JRE_URI}'"
+	einfo "and move it to '${DISTDIR}'"
+
+	if use jce; then
+		einfo "Also download '${JCE_FILE}' from:"
+		einfo "'${JCE_URI}'"
+		einfo "and move it to '${DISTDIR}'"
+	fi
+}
+
+src_unpack() {
+	default
+
+	# Upstream is changing their versioning scheme every release around 1.8.0.*;
+	# to stop having to change it over and over again, just wildcard match and
+	# live a happy life instead of trying to get this new jre1.8.0_05 to work.
+	mv "${WORKDIR}"/jre* "${S}" || die
+}
+
+src_prepare() {
+	if use jce; then
+		mv "${WORKDIR}"/${JCE_DIR} lib/security/ || die
+	fi
+}
+
+src_compile() {
+	# This needs to be done before CDS - #215225
+	java-vm_set-pax-markings "${S}"
+
+	# see bug #207282
+	einfo "Creating the Class Data Sharing archives"
+	case ${ARCH} in
+		arm|ia64)
+			bin/java -client -Xshare:dump || die
+			;;
+		x86)
+			bin/java -client -Xshare:dump || die
+			# limit heap size for large memory on x86 #467518
+			# this is a workaround and shouldn't be needed.
+			bin/java -server -Xms64m -Xmx64m -Xshare:dump || die
+			;;
+		*)
+			bin/java -server -Xshare:dump || die
+			;;
+	esac
+
+	# Create files used as storage for system preferences.
+	mkdir .systemPrefs || die
+	touch .systemPrefs/.system.lock || die
+	touch .systemPrefs/.systemRootModFile || die
+}
+
+src_install() {
+	local dest="/opt/${P}"
+	local ddest="${ED}${dest}"
+
+	# We should not need the ancient plugin for Firefox 2 anymore, plus it has
+	# writable executable segments
+	if use x86; then
+		rm -vf lib/i386/libjavaplugin_oji.so \
+			lib/i386/libjavaplugin_nscp*.so
+		rm -vrf plugin/i386
+	fi
+	# Without nsplugin flag, also remove the new plugin
+	local arch=${ARCH};
+	use x86 && arch=i386;
+	if ! use nsplugin; then
+		rm -vf lib/${arch}/libnpjp2.so \
+			lib/${arch}/libjavaplugin_jni.so
+	fi
+
+	dodir "${dest}"
+	cp -R --preserve=links,mode,ownership,timestamps,xattr \
+		bin lib man "${ddest}" || die
+
+	# Remove empty dirs we might have copied
+	find "${D}" -type d -empty -exec rmdir -v {} + || die
+
+	dodoc COPYRIGHT README
+
+	if use jce; then
+		dodir ${dest}/lib/security/strong-jce
+		mv "${ddest}"/lib/security/US_export_policy.jar \
+			"${ddest}"/lib/security/strong-jce || die
+		mv "${ddest}"/lib/security/local_policy.jar \
+			"${ddest}"/lib/security/strong-jce || die
+		dosym "${dest}"/lib/security/${JCE_DIR}/US_export_policy.jar \
+			"${dest}"/lib/security/US_export_policy.jar
+		dosym "${dest}"/lib/security/${JCE_DIR}/local_policy.jar \
+			"${dest}"/lib/security/local_policy.jar
+	fi
+
+	if use nsplugin; then
+		install_mozilla_plugin "${dest}"/lib/${arch}/libnpjp2.so
+	fi
+
+	# Install desktop file for the Java Control Panel.
+	# Using ${PN}-${SLOT} to prevent file collision with jre and or other slots.
+	# make_desktop_entry can't be used as ${P} would end up in filename.
+	newicon lib/desktop/icons/hicolor/48x48/apps/sun-jcontrol.png \
+		sun-jcontrol-${PN}-${SLOT}.png || die
+	sed -e "s#Name=.*#Name=Java Control Panel for Oracle JRE ${SLOT}#" \
+		-e "s#Exec=.*#Exec=/opt/${P}/bin/jcontrol#" \
+		-e "s#Icon=.*#Icon=sun-jcontrol-${PN}-${SLOT}#" \
+		-e "s#Application;##" \
+		-e "/Encoding/d" \
+		lib/desktop/applications/sun_java.desktop > \
+		"${T}"/jcontrol-${PN}-${SLOT}.desktop || die
+	domenu "${T}"/jcontrol-${PN}-${SLOT}.desktop
+
+	# Prune all fontconfig files so libfontconfig will be used and only install
+	# a Gentoo specific one if fontconfig is disabled.
+	# http://docs.oracle.com/javase/7/docs/technotes/guides/intl/fontconfig.html
+	rm "${ddest}"/lib/fontconfig.* || die
+	if ! use fontconfig; then
+		cp "${FILESDIR}"/fontconfig.Gentoo.properties "${T}"/fontconfig.properties || die
+		eprefixify "${T}"/fontconfig.properties
+		insinto "${dest}"/lib/
+		doins "${T}"/fontconfig.properties
+	fi
+
+	set_java_env
+	java-vm_revdep-mask
+	java-vm_sandbox-predict /dev/random /proc/self/coredump_filter
+}