Lucene search

K
oraclelinuxOracleLinuxELSA-2023-5761
HistoryOct 19, 2023 - 12:00 a.m.

java-1.8.0-openjdk security update

2023-10-1900:00:00
linux.oracle.com
32

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

5.6 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

27.8%

[1:1.8.0.392.b08-2]

  • Revert jcmd move as jcmd will not operate without tools.jar
  • Related: RHEL-13577
    [1:1.8.0.392.b08-1]
  • Update to shenandoah-jdk8u392-b08 (GA)
  • Update release notes for shenandoah-8u392-b08.
  • Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  • Update bug URL for RHEL to point to the Red Hat customer portal
  • Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  • Regenerate PR2462 patch following JDK-8315135
  • Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
  • Add missing JFR alternative ghost
  • Move jcmd to the headless package
  • This tarball is embargoed until 2023-10-17 @ 1pm PT.
  • Resolves: RHEL-12212
  • Resolves: RHEL-13574
  • Resolves: RHEL-13575
  • Resolves: RHEL-13576
  • Resolves: RHEL-11319
  • Resolves: RHEL-13577
    [1:1.8.0.392.b08-1]
  • For non debug subpackages, ghosted all alternatives (rhbz1649776)
  • For non system JDKs, if-outed versionless provides.
  • Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
  • Related: RHEL-11319

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

5.6 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

27.8%