Lucene search

K
oraclelinuxOracleLinuxELSA-2020-2970
HistoryJul 16, 2020 - 12:00 a.m.

java-11-openjdk security and enhancement update

2020-07-1600:00:00
linux.oracle.com
22

8.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

[1:11.0.8.10-0]

  • Update to shenandoah-jdk-11.0.8+10 (GA)
  • Switch to GA mode for final release.
  • Update release notes with last minute fix (JDK-8248505).
  • This tarball is embargoed until 2020-07-14 @ 1pm PT.
  • Resolves: rhbz#1838811
    [1:11.0.8.9-0.0.ea]
  • Update to shenandoah-jdk-11.0.8+9 (EA)
  • Update release notes for 11.0.8 release.
  • This tarball is embargoed until 2020-07-14 @ 1pm PT.
  • Resolves: rhbz#1838811
    [1:11.0.8.8-0.0.ea]
  • Update to shenandoah-jdk-11.0.8+8 (EA)
  • Resolves: rhbz#1838811
    [1:11.0.8.7-0.1.ea]
  • java-11-openjdk doesn’t have a JRE tree, so don’t try and copy alt-java there…
  • Resolves: rhbz#1838811
    [1:11.0.8.7-0.1.ea]
  • Create a copy of java as alt-java with alternatives and man pages
  • Resolves: rhbz#1838811
    [1:11.0.8.7-0.0.ea]
  • Update to shenandoah-jdk-11.0.8+7 (EA)
  • Resolves: rhbz#1838811
    [1:11.0.8.6-0.0.ea]
  • Update to shenandoah-jdk-11.0.8+6 (EA)
  • Resolves: rhbz#1838811
    [1:11.0.8.5-0.1.ea]
  • Disable stripping of debug symbols for static libraries part of
    the -static-libs sub-package.
  • Resolves: rhbz#1848701
    [1:11.0.8.5-0.0.ea]
  • Update to shenandoah-jdk-11.0.8+5 (EA)
  • Resolves: rhbz#1838811
    [1:11.0.8.4-0.0.ea]
  • Update to shenandoah-jdk-11.0.8+4 (EA)
  • Require tzdata 2020a due to resource changes in JDK-8243541
  • Resolves: rhbz#1838811
    [1:11.0.8.3-0.0.ea]
  • Update to shenandoah-jdk-11.0.8+3 (EA)
  • Resolves: rhbz#1838811
    [1:11.0.8.2-0.1.ea]
  • Build static-libs-image and add resulting files via -static-libs
    sub-package.
  • Resolves: rhbz#1848701
    [1:11.0.8.2-0.0.ea]
  • Update to shenandoah-jdk-11.0.8+2 (EA)
  • Resolves: rhbz#1838811
    [1:11.0.8.1-0.0.ea]
  • Update to shenandoah-jdk-11.0.8+1 (EA)
  • Switch to EA mode for 11.0.8 pre-release builds.
  • Drop JDK-8237396 & JDK-8228407 backports now applied upstream.
  • Resolves: rhbz#1838811
    [1:11.0.7.10-2]
  • Add JDK-8228407 backport to resolve crashes during verification.
  • Resolves: rhbz#1810557
    [1:11.0.7.10-2]
  • Amend release notes, removing issue actually fixed in 11.0.6.
  • Resolves: rhbz#1810557
    [1:11.0.7.10-2]
  • Add release notes.
  • Resolves: rhbz#1810557
    [1:11.0.7.10-2]
  • Make use of --with-extra-asflags introduced in jdk-11.0.6+1.
  • Resolves: rhbz#1810557
    [1:11.0.7.10-1]
  • Update to shenandoah-jdk-11.0.7+10 (GA)
  • Switch to GA mode for final release.
  • Resolves: rhbz#1810557
    [1:11.0.7.9-0.1.ea]
  • Update to shenandoah-jdk-11.0.7+9 (EA)
  • Resolves: rhbz#1810557
    [1:11.0.7.8-0.1.ea]
  • Update to shenandoah-jdk-11.0.7+8 (EA)
  • Resolves: rhbz#1810557
    [1:11.0.7.7-0.1.ea]
  • Update to shenandoah-jdk-11.0.7+7 (EA)
  • Resolves: rhbz#1810557
    [1:11.0.7.6-0.1.ea]
  • Update to shenandoah-jdk-11.0.7+6 (EA)
  • Resolves: rhbz#1810557
    [1:11.0.7.5-0.1.ea]
  • Update to shenandoah-jdk-11.0.7+5 (EA)
  • Resolves: rhbz#1810557
    [1:11.0.7.4-0.1.ea]
  • Update to shenandoah-jdk-11.0.7+4 (EA)
  • Resolves: rhbz#1810557
    [1:11.0.7.3-0.1.ea]
  • Update to shenandoah-jdk-11.0.7+3 (EA)
  • Resolves: rhbz#1810557
    [1:11.0.7.2-0.1.ea]
  • Update to shenandoah-jdk-11.0.7+2 (EA)
  • Resolves: rhbz#1810557
    [1:11.0.7.1-0.1.ea]
  • Update to shenandoah-jdk-11.0.7+1 (EA)
  • Switch to EA mode for 11.0.7 pre-release builds.
  • Drop JDK-8236039 backport now applied upstream.
  • Resolves: rhbz#1810557

8.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N