ELSA-2023-5761

ELSA-2023-5761 - java-1.8.0-openjdk security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2023-10-19

Description

[1:1.8.0.392.b08-2]
- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577

[1:1.8.0.392.b08-1]
- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577

[1:1.8.0.392.b08-1]
- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319

Related CVEs

CVE-2023-22067

CVE-2023-22081

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	java-1.8.0-openjdk-1.8.0.392.b08-2.el7_9.src.rpm	305ecc90998f73128a4a81dbf0fba971	-	ol7_aarch64_latest
	java-1.8.0-openjdk-1.8.0.392.b08-2.el7_9.src.rpm	305ecc90998f73128a4a81dbf0fba971	-	ol7_aarch64_optional_latest
	java-1.8.0-openjdk-1.8.0.392.b08-2.el7_9.src.rpm	305ecc90998f73128a4a81dbf0fba971	-	ol7_aarch64_u9_patch
	java-1.8.0-openjdk-1.8.0.392.b08-2.el7_9.aarch64.rpm	9ceb131b05de6dc18df68387b3270afb	-	ol7_aarch64_latest
	java-1.8.0-openjdk-1.8.0.392.b08-2.el7_9.aarch64.rpm	9ceb131b05de6dc18df68387b3270afb	-	ol7_aarch64_u9_patch
	java-1.8.0-openjdk-accessibility-1.8.0.392.b08-2.el7_9.aarch64.rpm	492d04c47b8f5636d07d5b0e26531bb8	-	ol7_aarch64_optional_latest
	java-1.8.0-openjdk-demo-1.8.0.392.b08-2.el7_9.aarch64.rpm	0becca84c94ebd464612becc8df304a4	-	ol7_aarch64_optional_latest
	java-1.8.0-openjdk-devel-1.8.0.392.b08-2.el7_9.aarch64.rpm	5d362e3ee9e5cc2981ec3da3eeafa29e	-	ol7_aarch64_latest
	java-1.8.0-openjdk-devel-1.8.0.392.b08-2.el7_9.aarch64.rpm	5d362e3ee9e5cc2981ec3da3eeafa29e	-	ol7_aarch64_u9_patch
	java-1.8.0-openjdk-headless-1.8.0.392.b08-2.el7_9.aarch64.rpm	bd9780c030fa7c508dcdbe44ab9b0936	-	ol7_aarch64_latest
	java-1.8.0-openjdk-headless-1.8.0.392.b08-2.el7_9.aarch64.rpm	bd9780c030fa7c508dcdbe44ab9b0936	-	ol7_aarch64_u9_patch
	java-1.8.0-openjdk-javadoc-1.8.0.392.b08-2.el7_9.noarch.rpm	5443f197355f573074745e3e6d47749d	-	ol7_aarch64_optional_latest
	java-1.8.0-openjdk-javadoc-zip-1.8.0.392.b08-2.el7_9.noarch.rpm	c4caa3a9b37dd3398ece2496177bae26	-	ol7_aarch64_optional_latest
	java-1.8.0-openjdk-src-1.8.0.392.b08-2.el7_9.aarch64.rpm	9dfd1f3726dbf32e6dc322582e957c0d	-	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	java-1.8.0-openjdk-1.8.0.392.b08-2.el7_9.src.rpm	305ecc90998f73128a4a81dbf0fba971	-	ol7_x86_64_latest
	java-1.8.0-openjdk-1.8.0.392.b08-2.el7_9.src.rpm	305ecc90998f73128a4a81dbf0fba971	-	ol7_x86_64_optional_latest
	java-1.8.0-openjdk-1.8.0.392.b08-2.el7_9.src.rpm	305ecc90998f73128a4a81dbf0fba971	-	ol7_x86_64_u9_patch
	java-1.8.0-openjdk-1.8.0.392.b08-2.el7_9.i686.rpm	008d26ec85f66e3f371e7ef903077f33	-	ol7_x86_64_latest
	java-1.8.0-openjdk-1.8.0.392.b08-2.el7_9.i686.rpm	008d26ec85f66e3f371e7ef903077f33	-	ol7_x86_64_u9_patch
	java-1.8.0-openjdk-1.8.0.392.b08-2.el7_9.x86_64.rpm	6597dee6a888766044a0542a3316b3f8	-	ol7_x86_64_latest
	java-1.8.0-openjdk-1.8.0.392.b08-2.el7_9.x86_64.rpm	6597dee6a888766044a0542a3316b3f8	-	ol7_x86_64_u9_patch
	java-1.8.0-openjdk-accessibility-1.8.0.392.b08-2.el7_9.i686.rpm	0b13ff5d46eededb93971017f5b0c883	-	ol7_x86_64_optional_latest
	java-1.8.0-openjdk-accessibility-1.8.0.392.b08-2.el7_9.x86_64.rpm	1f7695dbd2e799a577bc86136f399f50	-	ol7_x86_64_optional_latest
	java-1.8.0-openjdk-demo-1.8.0.392.b08-2.el7_9.i686.rpm	0fd3003b14916a175f121ff1066bc42b	-	ol7_x86_64_optional_latest
	java-1.8.0-openjdk-demo-1.8.0.392.b08-2.el7_9.x86_64.rpm	f9454e253c6095e500bb1fb1bda21a30	-	ol7_x86_64_optional_latest
	java-1.8.0-openjdk-devel-1.8.0.392.b08-2.el7_9.i686.rpm	6a7d77297e8fb6a80ad4cc27573e587a	-	ol7_x86_64_latest
	java-1.8.0-openjdk-devel-1.8.0.392.b08-2.el7_9.i686.rpm	6a7d77297e8fb6a80ad4cc27573e587a	-	ol7_x86_64_u9_patch
	java-1.8.0-openjdk-devel-1.8.0.392.b08-2.el7_9.x86_64.rpm	f8962b9f01e02e7befa4f8b44d8de071	-	ol7_x86_64_latest
	java-1.8.0-openjdk-devel-1.8.0.392.b08-2.el7_9.x86_64.rpm	f8962b9f01e02e7befa4f8b44d8de071	-	ol7_x86_64_u9_patch
	java-1.8.0-openjdk-headless-1.8.0.392.b08-2.el7_9.i686.rpm	60e8aa5035247fa1f970041295a6354a	-	ol7_x86_64_latest
	java-1.8.0-openjdk-headless-1.8.0.392.b08-2.el7_9.i686.rpm	60e8aa5035247fa1f970041295a6354a	-	ol7_x86_64_u9_patch
	java-1.8.0-openjdk-headless-1.8.0.392.b08-2.el7_9.x86_64.rpm	9fd040b839d4f66447e437d7535575a6	-	ol7_x86_64_latest
	java-1.8.0-openjdk-headless-1.8.0.392.b08-2.el7_9.x86_64.rpm	9fd040b839d4f66447e437d7535575a6	-	ol7_x86_64_u9_patch
	java-1.8.0-openjdk-javadoc-1.8.0.392.b08-2.el7_9.noarch.rpm	5443f197355f573074745e3e6d47749d	-	ol7_x86_64_optional_latest
	java-1.8.0-openjdk-javadoc-zip-1.8.0.392.b08-2.el7_9.noarch.rpm	c4caa3a9b37dd3398ece2496177bae26	-	ol7_x86_64_optional_latest
	java-1.8.0-openjdk-src-1.8.0.392.b08-2.el7_9.i686.rpm	eb3e43456dfa16a0fca27fb38c72a73b	-	ol7_x86_64_optional_latest
	java-1.8.0-openjdk-src-1.8.0.392.b08-2.el7_9.x86_64.rpm	09ca09fcea1d732b145d93baf0d19e02	-	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team