Lucene search

K
oraclelinuxOracleLinuxELSA-2023-0194
HistoryJan 23, 2023 - 12:00 a.m.

java-17-openjdk security and bug fix update

2023-01-2300:00:00
linux.oracle.com
11

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

18.4%

[1:17.0.6.0.10-3.0.1]

  • Replace upstream references [Orabug: 34340155]
    [1:17.0.6.0.10-3]
  • Add missing release note for JDK-8295687
  • Resolves: rhbz#2160111
    [1:17.0.6.0.10-3]
  • Update FIPS support to bring in latest changes
    • OJ1357: Fix issue on FIPS with a SecurityManager in place
  • Related: rhbz#2147476
    [1:17.0.6.0.10-3]
  • Fix flatpak builds by disabling TestTranslations test due to missing tzdb.dat
  • Related: rhbz#2160111
    [1:17.0.6.0.10-2]
  • Update to jdk-17.0.6.0+10
  • Update release notes to 17.0.6.0+10
  • Switch to GA mode for release
  • This tarball is embargoed until 2023-01-17 @ 1pm PT.
  • Related: rhbz#2153097
    [1:17.0.6.0.9-0.2.ea]
  • Update to jdk-17.0.6+9
  • Update release notes to 17.0.6+9
  • Drop local copy of JDK-8293834 now this is upstream
  • Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  • Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  • Resolves: rhbz#2153097
    [1:17.0.6.0.1-0.2.ea]
  • Update to jdk-17.0.6+1
  • Update release notes to 17.0.6+1
  • Switch to EA mode for 17.0.6 pre-release builds.
  • Re-enable EA upstream status check now it is being actively maintained.
  • Drop JDK-8294357 (tzdata2022d) & JDK-8295173 (tzdata2022e) local patches which are now upstream
  • Drop JDK-8275535 local patch now this has been accepted and backported upstream
  • Bump tzdata requirement to 2022e now the package is available in RHEL
  • Related: rhbz#2153097
    [1:17.0.5.0.8-4]
  • Update FIPS support to bring in latest changes
    • Add nss.fips.cfg support to OpenJDK tree
    • RH2117972: Extend the support for NSS DBs (PKCS11) in FIPS mode
    • Remove forgotten dead code from RH2020290 and RH2104724
  • Drop local nss.fips.cfg.in handling now this is handled in the patched OpenJDK build
  • Resolves: rhbz#2147476

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

18.4%