Lucene search

K
oraclelinuxOracleLinuxELSA-2024-1825
HistoryApr 22, 2024 - 12:00 a.m.

java-17-openjdk security update

2024-04-2200:00:00
linux.oracle.com
12
java security update
oracle bug url
openjdk update
build version
ga mode
tzdata update
resolves rhel-30939
embargoed tarball
ea version update
fips patch
2023d tzdata requires
grep -e change

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

4.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.4%

[17.0.11.0.9-2.0.1]

  • Add Oracle vendor bug URL
    [1:17.0.11.0.9-2]
  • Update to jdk-17.0.11+9 (GA)
  • Add openjdk-17.0.11+9.tar.xz to .gitignore
  • Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  • Update buildver from 7 to 9
  • Update portablerelease from 1 to 3
  • Change is_ga from 0 to 1 to enable GA mode for release
  • Update tzdata Requires comment to mention that 2024a is not yet in the buildroot
  • Update tzdata BuildRequires comment to mention that 2024a is not yet in the buildroot
  • Update tzdata BuildRequires fro 2023c to 2023d
  • Update sources from openjdk-17.0.11+7-ea.tar.xz to openjdk-17.0.11+9.tar.xz
  • Resolves: RHEL-27137
  • This tarball is embargoed until 2024-04-16 @ 1pm PT.
    [1:17.0.11.0.7-0.2.ea]
  • Update to jdk-17.0.11+7 (EA)
  • Sync java-17-openjdk-portable.specfile
  • Sync java-17-openjdk-portable.specfile again to mention OPENJDK-2730
  • Related: RHEL-27137
    [1:17.0.11.0.6-0.2.ea]
  • Update to jdk-17.0.11+6 (EA)
  • Sync java-17-openjdk-portable.specfile
  • Update buildjdkver to match the featurever
  • Use featurever macro to specify fips patch
  • Explain patchN syntax situation in a comment
  • generate_source_tarball.sh: Fix whitespace
  • generate_source_tarball.sh: Skip -ga tags
  • generate_source_tarball.sh: Get -ea suffix from version-numbers.conf
  • generate_source_tarball.sh: Use git archive to generate tarball
  • generate_source_tarball.sh: Update version in comment
  • generate_source_tarball.sh: Remove trailing period in echo
  • generate_source_tarball.sh: Add indentation instructions for Emacs
  • Require tzdata 2023d (JDK-8322725)
  • generate_source_tarball.sh: Add license
  • openjdk_news.sh: Use grep -E instead of egrep
  • Remove RH1649512 patch for libjpeg-turbo FAR macro
  • Move pcsc-lite-libs patch to in-need-of-upstreaming section
  • Related: RHEL-27137

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

4.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.4%