Lucene search

K
oraclelinuxOracleLinuxELSA-2022-0307
HistoryJan 27, 2022 - 12:00 a.m.

java-1.8.0-openjdk security and bug fix update

2022-01-2700:00:00
linux.oracle.com
52

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

[1:1.8.0.322.b06-2]

  • Fix FIPS issues in native code and with initialisation of java.security.Security
  • Related: rhbz#2039366
    [1:1.8.0.322.b06-1]
  • Update to aarch64-shenandoah-jdk8u322-b06 (EA)
  • Update release notes for 8u322-b06.
  • Switch to GA mode for final release.
  • Require tzdata 2021e as of JDK-8275766.
  • Update tarball generation script to use git following shenandoah-jdk8u’s move to github
  • Resolves: rhbz#2039366
    [1:1.8.0.322.b04-0.2.ea]
  • Add backport of JDK-8279077 to fix crash on ppc64
  • Resolves: rhbz#2030399
    [1:1.8.0.322.b04-0.1.ea]
  • Update to aarch64-shenandoah-jdk8u322-b04 (EA)
  • Update release notes for 8u322-b04.
  • Require tzdata 2021c as of JDK-8274407.
  • Switch to EA mode.
  • Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
  • Related: rhbz#2039366

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N