Lucene search

K
oraclelinuxOracleLinuxELSA-2020-4347
HistoryOct 27, 2020 - 12:00 a.m.

java-1.8.0-openjdk security update

2020-10-2700:00:00
linux.oracle.com
32

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

[1:1.8.0.272.b10-1]

  • Add backport of JDK-8215727: ‘Restore JFR thread sampler loop to old / previous behaviour’
  • Resolves: rhbz#1876665
    [1:1.8.0.272.b10-0]
  • Update to aarch64-shenandoah-jdk8u272-b10.
  • Switch to GA mode for final release.
  • Update release notes for 8u272 release.
  • Add backport of JDK-8254177 to update to tzdata 2020b
  • Require tzdata 2020b due to resource changes in JDK-8254177
  • Delay tzdata 2020b dependency until tzdata update has shipped.
  • Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
  • Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
  • This tarball is embargoed until 2020-10-20 @ 1pm PT.
  • Resolves: rhbz#1876665
    [1:1.8.0.272.b09-0.1.ea]
  • Include a test in the RPM to check the build has the correct vendor information.
  • Use ‘oj_’ prefix on new vendor globals to avoid a conflict with RPM’s vendor value.
  • Improve quoting of vendor name
  • Resolves: rhbz#1876665
    [1:1.8.0.272.b09-0.1.ea]
  • Set vendor property and vendor URLs
  • Made URLs to be preconfigured by OS
  • Resolves: rhbz#1876665
    [1:1.8.0.272.b09-0.0.ea]
  • Update to aarch64-shenandoah-jdk8u272-b09 (EA).
  • Switch to EA mode.
  • Add debugging output for build.
  • JFR must now be explicitly disabled when unwanted (e.g. x86), following switch of upstream default.
  • Remove JDK-8154313 backport now applied upstream.
  • Change target from ‘zip-docs’ to ‘docs-zip’, which is the naming used upstream.
  • Update tarball generation script to use PR3795, following inclusion of JDK-8177334
  • Add additional s390 size_t case in g1ConcurrentMarkObjArrayProcessor.cpp introduced by JDK-8057003
  • Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
  • Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
  • Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
  • Remove JDK-8165996/PR3506/RH1760437 as now applied upstream.
  • Resolves: rhbz#1876665

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N