Update to jdk-21.0.3+9 (GA)

- Update release notes to 21.0.3+9
- Switch to GA mode.

** This tarball is embargoed until 2024-04-16 @ 1pm PT. **

.gitignore

@@ -49,3 +49,4 @@
 /openjdk-21.0.2+13.tar.xz
 /openjdk-21.0.3+1-ea.tar.xz
 /openjdk-21.0.3+7-ea.tar.xz
+/openjdk-21.0.3+9.tar.xz

NEWS

@@ -8,6 +8,15 @@ New in release OpenJDK 21.0.3 (2024-04-16):
 Live versions of these release notes can be found at:
   * https://bit.ly/openjdk2103
 
+* CVEs
+  - CVE-2024-21012
+  - CVE-2024-21011
+  - CVE-2024-21068
+* Security fixes
+  - JDK-8315708: Enhance HTTP/2 client usage
+  - JDK-8318340: Improve RSA key implementations
+  - JDK-8319851: Improve exception logging
+  - JDK-8322122: Enhance generation of addresses
 * Other changes
   - JDK-6928542: Chinese characters in RTF are not decoded
   - JDK-8009550: PlatformPCSC should load versioned so
@@ -272,6 +281,7 @@ Live versions of these release notes can be found at:
   - JDK-8325876: crashes in docker container tests on Linuxppc64le Power8 machines
   - JDK-8326000: Remove obsolete comments for class sun.security.ssl.SunJSSE
   - JDK-8327391: Add SipHash attribution file
+  - JDK-8329838: [21u] Remove designator DEFAULT_PROMOTED_VERSION_PRE=ea for release 21.0.3
 
 Notes on individual issues:
 ===========================

java-21-openjdk.spec

@@ -379,7 +379,7 @@
 %global origin_nice     OpenJDK
 %global top_level_dir_name   %{vcstag}
 %global top_level_dir_name_backup %{top_level_dir_name}-backup
-%global buildver        7
+%global buildver        9
 %global rpmrelease      1
 #%%global tagsuffix     %%{nil}
 # Priority must be 8 digits in total; up to openjdk 1.8, we were using 18..... so when we moved to 11, we had to add another digit
@@ -399,7 +399,7 @@
 # Release will be (where N is usually a number starting at 1):
 # - 0.N%%{?extraver}%%{?dist} for EA releases,
 # - N%%{?extraver}{?dist} for GA releases
-%global is_ga           0
+%global is_ga           1
 %if %{is_ga}
 %global build_type GA
 %global ea_designator ""
@@ -1903,6 +1903,12 @@ done
 %{_jvmdir}/%{miscportablearchive}.sha256sum
 
 %changelog
+* Sat Apr 13 2024 Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.9-1
+- Update to jdk-21.0.3+9 (GA)
+- Update release notes to 21.0.3+9
+- Switch to GA mode.
+- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
+
 * Thu Apr 04 2024 Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.7-0.1.ea
 - Update to jdk-21.0.3+7 (EA)
 - Update release notes to 21.0.3+7

sources

@@ -1,2 +1,2 @@
 SHA512 (tapsets-icedtea-6.0.0pre00-c848b93a8598.tar.xz) = 97d026212363b3c83f6a04100ad7f6fdde833d16579717f8756e2b8c2eb70e144a41a330cb9ccde9c3badd37a2d54fdf4650a950ec21d8b686d545ecb2a64d30
-SHA512 (openjdk-21.0.3+7-ea.tar.xz) = 086e753c6f5139c2123a34ca25b09983b7068d94a47206499d9b03dbb6c6de23609ab15de66d93e9b7ed7282293831885e2be222f6b7f47966d5f8e683386e12
+SHA512 (openjdk-21.0.3+9.tar.xz) = cf6cf06fd3f019106ff9c633788190cbf191d65a539f12ba64768d1fb797a234c72856ac072132463a471da1460207264da78d63271371031cca7774884f3745