Lucene search

K
oraclelinuxOracleLinuxELSA-2022-0161
HistoryJan 19, 2022 - 12:00 a.m.

java-17-openjdk security update

2022-01-1900:00:00
linux.oracle.com
33

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

[1:17.0.2.0.8-4]

  • Fix FIPS issues in native code and with initialisation of java.security.Security
  • Related: rhbz#2039366
    [1:17.0.2.0.8-3]
  • Update tapsets from IcedTea 6.x repository with fix for JDK-8015774 changes (_heap->_heaps) and @JAVA_SPEC_VER@
  • Update icedtea_sync.sh with a VCS mode that retrieves sources from a Mercurial repository
  • Related: rhbz#2039366
    [1:17.0.2.0.8-2]
  • Sync desktop files with upstream IcedTea release 3.15.0 using new script
  • Related: rhbz#2039366
    [1:17.0.2.0.8-1]
  • January 2022 security update to jdk 17.0.2+8
  • Rebase RH1995150 & RH1996182 patches following JDK-8275863 addition to module-info.java
  • Rename libsvml.so to libjsvml.so following JDK-8276025
  • This tarball is embargoed until 2022-01-18 @ 1pm PT.
  • Resolves: rhbz#2039366

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P