Lucene search

K
oraclelinuxOracleLinuxELSA-2024-4563
HistoryJul 18, 2024 - 12:00 a.m.

java-1.8.0-openjdk security update

2024-07-1800:00:00
linux.oracle.com
28
java security update
oracle vendor bug
embargoed tarball
shenandoah update
rhel-46860
rhel-47011
rhel-47069
rhel-47090
release notes
build dependencies
patch rebase
policy repacking script

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

4.8

Confidence

High

[1.8.0.422.b05-2.0.1]

  • Add Oracle vendor bug URL [Orabug: 34340155]
    [1:1.8.0.422.b05-1.1]
  • Update to shenandoah-jdk8u422-b05 (GA)
  • Update release notes for shenandoah-8u422-b05.
  • Rebase PR2462 patch following patched hunk being removed by JDK-8322106
  • Switch to GA mode.
  • Sync the copy of the portable specfile with the latest update
  • Actually require tzdata 2024a now it is available in the buildroot
  • Add missing build dependencies on zlib-devel and tar
  • Update LCMS version to match JDK-8245400
  • This tarball is embargoed until 2024-07-16 @ 1pm PT.
  • Resolves: RHEL-46866
  • Resolves: RHEL-47001
    [1:1.8.0.422.b01-0.1.ea]
  • Update to shenandoah-jdk8u422-b01 (EA)
  • Update release notes for shenandoah-8u422-b01.
  • Switch to EA mode.
  • Sync the copy of the portable specfile with the latest update
  • Restore NEWS file and rename remove-intree-libraries.sh so portable can be rebuilt
  • Document policy repacking script and rename to correct spelling and style
  • Limit Java only tests to one architecture using jdk_test_arch
  • Related: RHEL-46866
  • Resolves: RHEL-47067
  • Resolves: RHEL-47087

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

4.8

Confidence

High