Lucene search

K
oraclelinuxOracleLinuxELSA-2021-1298
HistoryApr 21, 2021 - 12:00 a.m.

java-1.8.0-openjdk security update

2021-04-2100:00:00
linux.oracle.com
92

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

[1:1.8.0.292.b10-1]

  • Add CVE numbers.
  • Require tzdata 2021a due to JDK-8260356
  • Resolves: rhbz#1938201
    [1:1.8.0.292.b10-0]
  • Update to aarch64-shenandoah-jdk8u292-b10 (GA)
  • Update release notes for 8u292-b10.
  • This tarball is embargoed until 2021-04-20 @ 1pm PT.
  • Resolves: rhbz#1938201
    [1:1.8.0.292.b09-0.0.ea]
  • Update to aarch64-shenandoah-jdk8u292-b09 (EA)
  • Update release notes for 8u292-b09.
  • Resolves: rhbz#1938081
    [1:1.8.0.292.b08-0.0.ea]
  • Update to aarch64-shenandoah-jdk8u292-b08 (EA)
  • Update release notes for 8u292-b08.
  • Resolves: rhbz#1938081
    [1:1.8.0.292.b07-0.0.ea]
  • Update to aarch64-shenandoah-jdk8u292-b07 (EA)
  • Update release notes for 8u292-b07.
  • Resolves: rhbz#1938081
    [1:1.8.0.292.b06-0.0.ea]
  • Update to aarch64-shenandoah-jdk8u292-b06 (EA)
  • Update release notes for 8u292-b06.
  • Require tzdata 2020f due to JDK-8259048
  • Resolves: rhbz#1938081
    [1:1.8.0.292.b05-0.2.ea]
  • Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
  • Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
  • Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
  • Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
  • Resolves: rhbz#1938081
    [1:1.8.0.292.b05-0.1.ea]
  • Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
  • Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
  • Resolves: rhbz#1938081
    [1:1.8.0.292.b05-0.0.ea]
  • Update to aarch64-shenandoah-jdk8u292-b05 (EA)
  • Update release notes for 8u292-b05.
  • Resolves: rhbz#1938081
    [1:1.8.0.292.b04-0.0.ea]
  • Update to aarch64-shenandoah-jdk8u292-b04 (EA)
  • Update release notes for 8u292-b04.
  • Resolves: rhbz#1938081
    [1:1.8.0.292.b03-0.0.ea]
  • Update to aarch64-shenandoah-jdk8u292-b03 (EA)
  • Update release notes for 8u292-b03.
  • Resolves: rhbz#1938081
    [1:1.8.0.292.b02-0.0.ea]
  • Update to aarch64-shenandoah-jdk8u292-b02 (EA)
  • Update release notes for 8u292-b02.
  • Resolves: rhbz#1938081
    [1:1.8.0.292.b01-0.0.ea]
  • Update to aarch64-shenandoah-jdk8u292-b01 (EA)
  • Update release notes for 8u292-b01.
  • Switch to EA mode.
  • Update tarball generation script to use PR3822 which handles
    JDK-8233228 & JDK-8035166 changes
  • Resolves: rhbz#1938081

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N