Lucene search

K
oraclelinuxOracleLinuxELSA-2020-2972
HistoryJul 16, 2020 - 12:00 a.m.

java-1.8.0-openjdk security update

2020-07-1600:00:00
linux.oracle.com
21

8.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

[1:1.8.0.262.b10-0.1]

  • Update to aarch64-shenandoah-jdk8u262-b10.
  • Switch to GA mode for final release.
  • Update release notes for 8u262 release.
  • Fix typo in jfr_arches which leads to ppc64 being wrongly excluded.
  • Split JDK-8042159 patch into per-repo patches as upstream.
  • Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
  • Resolves: rhbz#1838811
    [1:1.8.0.262.b09-0.1.ea]
  • Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03
  • Resolves: rhbz#1838811
    [1:1.8.0.262.b09-0.0.ea]
  • With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
  • Resolves: rhbz#1838811
    [1:1.8.0.262.b09-0.0.ea]
  • Update to aarch64-shenandoah-jdk8u262-b09.
  • Resolves: rhbz#1838811
    [1:1.8.0.262.b08-0.0.ea]
  • Update to aarch64-shenandoah-jdk8u262-b08.
  • Resolves: rhbz#1838811
    [1:1.8.0.262.b07-0.2.ea]
  • Update to aarch64-shenandoah-jdk8u262-b07-shenandoah-merge-2020-06-18.
  • Resolves: rhbz#1838811
    [1:1.8.0.262.b07-0.1.ea]
  • Sync alt-java support with java-11-openjdk version.
  • Resolves: rhbz#1838811
    [1:1.8.0.262.b07-0.1.ea]
  • Created copy of java as alt-java and adapted alternatives and man pages
  • Resolves: rhbz#1838811
    [1:1.8.0.262.b07-0.0.ea]
  • Update to aarch64-shenandoah-jdk8u262-b07.
  • Require tzdata 2020a so system tzdata matches resource updates in b07
  • Resolves: rhbz#1838811
    [1:1.8.0.262.b06-0.0.ea]
  • Update to aarch64-shenandoah-jdk8u262-b06.
  • Resolves: rhbz#1838811
    [1:1.8.0.262.b05-0.1.ea]
  • Update to aarch64-shenandoah-jdk8u262-b05-shenandoah-merge-2020-06-04.
  • Resolves: rhbz#1838811
    [1:1.8.0.262.b05-0.0.ea]
  • Update to aarch64-shenandoah-jdk8u262-b05.
  • Resolves: rhbz#1838811
    [1:1.8.0.262.b04-0.0.ea]
  • Update to aarch64-shenandoah-jdk8u262-b04.
  • Resolves: rhbz#1838811
    [1:1.8.0.262.b03-0.1.ea]
  • Update to aarch64-shenandoah-jdk8u262-b03-shenandoah-merge-2020-05-20.
  • Resolves: rhbz#1838811
    [1:1.8.0.262.b03-0.0.ea]
  • Update to aarch64-shenandoah-jdk8u262-b03.
  • Resolves: rhbz#1838811
    [1:1.8.0.262.b02-0.1.ea]
  • Enable JFR in our builds, ahead of upstream default.
  • Only enable JFR for JIT builds, as it is not supported with Zero.
  • Turn off JFR on x86 for now due to assert(SerializePageShiftCount == count) crash.
  • Explicitly list jfr.jar, default.jfc & profile.jfc in the spec file.
  • Introduce jfr_arches for architectures which support JFR.
  • Use sa_arches for libsaproc.so inclusion.
  • Resolves: rhbz#1838811
    [1:1.8.0.262.b02-0.0.ea]
  • Update to aarch64-shenandoah-jdk8u262-b02.
  • Resolves: rhbz#1838811
    [1:1.8.0.262.b01-0.0.ea]
  • Update to aarch64-shenandoah-jdk8u262-b01.
  • Switch to EA mode.
  • Adjust JDK-8143245/PR3548 patch following context changes due to JDK-8203287 for JFR
  • Adjust RH1648644 following context changes due to introduction of JFR packages
  • Add jfr binary to devel package and alternatives set
  • Resolves: rhbz#1838811

8.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N