ELSA-2020-2968

ELSA-2020-2968 - java-1.8.0-openjdk security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2020-07-18

Description

[1:1.8.0.262.b10-0]
- Update to aarch64-shenandoah-jdk8u262-b10.
- Switch to GA mode for final release.
- Update release notes for 8u262 release.
- Fix typo in jfr_arches which leads to ppc64 being wrongly excluded.
- Split JDK-8042159 patch into per-repo patches as upstream.
- Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
- Resolves: rhbz#1838811

[1:1.8.0.262.b09-0.1.ea]
- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03
- Resolves: rhbz#1838811

[1:1.8.0.262.b09-0.0.ea]
- Update to aarch64-shenandoah-jdk8u262-b09.
- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
- Resolves: rhbz#1838811

[1:1.8.0.262.b08-0.0.ea]
- Update to aarch64-shenandoah-jdk8u262-b08.
- Resolves: rhbz#1838811

[1:1.8.0.262.b07-0.2.ea]
- Update to aarch64-shenandoah-jdk8u262-b07-shenandoah-merge-2020-06-18.
- Resolves: rhbz#1838811

[1:1.8.0.262.b07-0.1.ea]
- Sync alt-java support with java-11-openjdk version.
- Resolves: rhbz#1838811

[1:1.8.0.262.b07-0.1.ea]
- Created copy of java as alt-java and adapted alternatives and man pages
- Resolves: rhbz#1838811

[1:1.8.0.262.b07-0.0.ea]
- Update to aarch64-shenandoah-jdk8u262-b07.
- Require tzdata 2020a so system tzdata matches resource updates in b07
- Resolves: rhbz#1838811

[1:1.8.0.262.b06-0.1.ea]
- Sync SystemTap & desktop files with upstream IcedTea release 3.15.0, removing previous workarounds
- Sync stapinstall handling with RHEL 8 implementation
- Need to support noarch for creating source RPMs for non-scratch builds.
- Resolves: rhbz#1838811

[1:1.8.0.262.b06-0.0.ea]
- Update to aarch64-shenandoah-jdk8u262-b06.
- Resolves: rhbz#1838811

[1:1.8.0.262.b05-0.1.ea]
- Update to aarch64-shenandoah-jdk8u262-b05-shenandoah-merge-2020-06-04.
- Resolves: rhbz#1838811

[1:1.8.0.262.b05-0.0.ea]
- Update to aarch64-shenandoah-jdk8u262-b05.
- Resolves: rhbz#1838811

[1:1.8.0.262.b04-0.0.ea]
- Update to aarch64-shenandoah-jdk8u262-b04.
- Resolves: rhbz#1838811

[1:1.8.0.262.b03-0.1.ea]
- Update to aarch64-shenandoah-jdk8u262-b03-shenandoah-merge-2020-05-20.
- Resolves: rhbz#1838811

[1:1.8.0.262.b03-0.0.ea]
- Update to aarch64-shenandoah-jdk8u262-b03.
- Resolves: rhbz#1838811

[1:1.8.0.262.b02-0.1.ea]
- Enable JFR in our builds, ahead of upstream default.
- Only enable JFR for JIT builds, as it is not supported with Zero.
- Turn off JFR on x86 for now due to assert(SerializePageShiftCount == count) crash.
- Introduce jfr_arches for architectures which support JFR.
- Resolves: rhbz#1838811

[1:1.8.0.262.b02-0.0.ea]
- Update to aarch64-shenandoah-jdk8u262-b02.
- Resolves: rhbz#1838811

[1:1.8.0.262.b01-0.0.ea]
- Update to aarch64-shenandoah-jdk8u262-b01.
- Switch to EA mode.
- Adjust JDK-8143245/PR3548 patch following context changes due to JDK-8203287 for JFR
- Adjust RH1648644 following context changes due to introduction of JFR packages
- Add recently added binaries to alternatives set (clhsdb, hsdb, jfr)
- Resolves: rhbz#1838811

Related CVEs

CVE-2020-14577

CVE-2020-14583

CVE-2020-14593

CVE-2020-14556

CVE-2020-14621

CVE-2020-14578

CVE-2020-14579

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	java-1.8.0-openjdk-1.8.0.262.b10-0.el7_8.src.rpm	b7d189a4b71aeed9b44118e3616dbc2e	ELSA-2021-1298
	java-1.8.0-openjdk-1.8.0.262.b10-0.el7_8.aarch64.rpm	d0434e83f08cc49d46eac728e1867715	ELSA-2021-1298
	java-1.8.0-openjdk-accessibility-1.8.0.262.b10-0.el7_8.aarch64.rpm	c95c2498295d05f6160c2ef9a1377977	ELSA-2021-1298
	java-1.8.0-openjdk-demo-1.8.0.262.b10-0.el7_8.aarch64.rpm	95d747a984cce59f34ebd751e61b33bd	ELSA-2021-1298
	java-1.8.0-openjdk-devel-1.8.0.262.b10-0.el7_8.aarch64.rpm	1bbf1b2248f318936283c50e595bed1c	ELSA-2021-1298
	java-1.8.0-openjdk-headless-1.8.0.262.b10-0.el7_8.aarch64.rpm	4d8fa62bf49b8ab7ae848dc792c3d457	ELSA-2021-1298
	java-1.8.0-openjdk-javadoc-1.8.0.262.b10-0.el7_8.noarch.rpm	4a94112f771d9e0f9de078cc4e27255d	ELSA-2021-1298
	java-1.8.0-openjdk-javadoc-zip-1.8.0.262.b10-0.el7_8.noarch.rpm	c1afba3c3f6b9177eda14a4942388c88	ELSA-2021-1298
	java-1.8.0-openjdk-src-1.8.0.262.b10-0.el7_8.aarch64.rpm	50d804a8a517f64c74eadf1cb45e0689	ELSA-2021-1298
Oracle Linux 7 (x86_64)	java-1.8.0-openjdk-1.8.0.262.b10-0.el7_8.src.rpm	b7d189a4b71aeed9b44118e3616dbc2e	ELSA-2021-1298
	java-1.8.0-openjdk-1.8.0.262.b10-0.el7_8.i686.rpm	e9d0249021676a1aaff3f5600f9158e4	ELSA-2021-1298
	java-1.8.0-openjdk-1.8.0.262.b10-0.el7_8.x86_64.rpm	3d1657f30ad36520c1c8d2feee89abd9	ELSA-2021-1298
	java-1.8.0-openjdk-accessibility-1.8.0.262.b10-0.el7_8.i686.rpm	3445191952e4c7bc5cd473988a39d9dd	ELSA-2021-1298
	java-1.8.0-openjdk-accessibility-1.8.0.262.b10-0.el7_8.x86_64.rpm	d1e86f203809307ac01295a57629279b	ELSA-2021-1298
	java-1.8.0-openjdk-demo-1.8.0.262.b10-0.el7_8.i686.rpm	cfbcdea58d11c52ce2c887e1faf38bae	ELSA-2021-1298
	java-1.8.0-openjdk-demo-1.8.0.262.b10-0.el7_8.x86_64.rpm	59e765e382f3fc623ada25e8619e9936	ELSA-2021-1298
	java-1.8.0-openjdk-devel-1.8.0.262.b10-0.el7_8.i686.rpm	ca99150228c08302b48955cfd0e4a194	ELSA-2021-1298
	java-1.8.0-openjdk-devel-1.8.0.262.b10-0.el7_8.x86_64.rpm	bc5d894848821ec8e741809fc0862a8a	ELSA-2021-1298
	java-1.8.0-openjdk-headless-1.8.0.262.b10-0.el7_8.i686.rpm	33934f9e27b14d59a62568fa90836753	ELSA-2021-1298
	java-1.8.0-openjdk-headless-1.8.0.262.b10-0.el7_8.x86_64.rpm	b64428e43209b5188d0bc8e4d491f8ca	ELSA-2021-1298
	java-1.8.0-openjdk-javadoc-1.8.0.262.b10-0.el7_8.noarch.rpm	4a94112f771d9e0f9de078cc4e27255d	ELSA-2021-1298
	java-1.8.0-openjdk-javadoc-zip-1.8.0.262.b10-0.el7_8.noarch.rpm	c1afba3c3f6b9177eda14a4942388c88	ELSA-2021-1298
	java-1.8.0-openjdk-src-1.8.0.262.b10-0.el7_8.i686.rpm	13622f9b1f6a2881d289794328fea98d	ELSA-2021-1298
	java-1.8.0-openjdk-src-1.8.0.262.b10-0.el7_8.x86_64.rpm	f15af33ea0d8c65906f8712b3ce49f14	ELSA-2021-1298

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team