ELSA-2020-2970

ELSA-2020-2970 - java-11-openjdk security and enhancement update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2020-07-16

Description

[1:11.0.8.10-0]
- Update to shenandoah-jdk-11.0.8+10 (GA)
- Switch to GA mode for final release.
- Update release notes with last minute fix (JDK-8248505).
- This tarball is embargoed until 2020-07-14 @ 1pm PT.
- Resolves: rhbz#1838811

[1:11.0.8.9-0.0.ea]
- Update to shenandoah-jdk-11.0.8+9 (EA)
- Update release notes for 11.0.8 release.
- This tarball is embargoed until 2020-07-14 @ 1pm PT.
- Resolves: rhbz#1838811

[1:11.0.8.8-0.0.ea]
- Update to shenandoah-jdk-11.0.8+8 (EA)
- Resolves: rhbz#1838811

[1:11.0.8.7-0.1.ea]
- java-11-openjdk doesn't have a JRE tree, so don't try and copy alt-java there...
- Resolves: rhbz#1838811

[1:11.0.8.7-0.1.ea]
- Create a copy of java as alt-java with alternatives and man pages
- Resolves: rhbz#1838811

[1:11.0.8.7-0.0.ea]
- Update to shenandoah-jdk-11.0.8+7 (EA)
- Resolves: rhbz#1838811

[1:11.0.8.6-0.0.ea]
- Update to shenandoah-jdk-11.0.8+6 (EA)
- Resolves: rhbz#1838811

[1:11.0.8.5-0.1.ea]
- Disable stripping of debug symbols for static libraries part of
the -static-libs sub-package.
- Resolves: rhbz#1848701

[1:11.0.8.5-0.0.ea]
- Update to shenandoah-jdk-11.0.8+5 (EA)
- Resolves: rhbz#1838811

[1:11.0.8.4-0.0.ea]
- Update to shenandoah-jdk-11.0.8+4 (EA)
- Require tzdata 2020a due to resource changes in JDK-8243541
- Resolves: rhbz#1838811

[1:11.0.8.3-0.0.ea]
- Update to shenandoah-jdk-11.0.8+3 (EA)
- Resolves: rhbz#1838811

[1:11.0.8.2-0.1.ea]
- Build static-libs-image and add resulting files via -static-libs
sub-package.
- Resolves: rhbz#1848701

[1:11.0.8.2-0.0.ea]
- Update to shenandoah-jdk-11.0.8+2 (EA)
- Resolves: rhbz#1838811

[1:11.0.8.1-0.0.ea]
- Update to shenandoah-jdk-11.0.8+1 (EA)
- Switch to EA mode for 11.0.8 pre-release builds.
- Drop JDK-8237396 & JDK-8228407 backports now applied upstream.
- Resolves: rhbz#1838811

[1:11.0.7.10-2]
- Add JDK-8228407 backport to resolve crashes during verification.
- Resolves: rhbz#1810557

[1:11.0.7.10-2]
- Amend release notes, removing issue actually fixed in 11.0.6.
- Resolves: rhbz#1810557

[1:11.0.7.10-2]
- Add release notes.
- Resolves: rhbz#1810557

[1:11.0.7.10-2]
- Make use of --with-extra-asflags introduced in jdk-11.0.6+1.
- Resolves: rhbz#1810557

[1:11.0.7.10-1]
- Update to shenandoah-jdk-11.0.7+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1810557

[1:11.0.7.9-0.1.ea]
- Update to shenandoah-jdk-11.0.7+9 (EA)
- Resolves: rhbz#1810557

[1:11.0.7.8-0.1.ea]
- Update to shenandoah-jdk-11.0.7+8 (EA)
- Resolves: rhbz#1810557

[1:11.0.7.7-0.1.ea]
- Update to shenandoah-jdk-11.0.7+7 (EA)
- Resolves: rhbz#1810557

[1:11.0.7.6-0.1.ea]
- Update to shenandoah-jdk-11.0.7+6 (EA)
- Resolves: rhbz#1810557

[1:11.0.7.5-0.1.ea]
- Update to shenandoah-jdk-11.0.7+5 (EA)
- Resolves: rhbz#1810557

[1:11.0.7.4-0.1.ea]
- Update to shenandoah-jdk-11.0.7+4 (EA)
- Resolves: rhbz#1810557

[1:11.0.7.3-0.1.ea]
- Update to shenandoah-jdk-11.0.7+3 (EA)
- Resolves: rhbz#1810557

[1:11.0.7.2-0.1.ea]
- Update to shenandoah-jdk-11.0.7+2 (EA)
- Resolves: rhbz#1810557

[1:11.0.7.1-0.1.ea]
- Update to shenandoah-jdk-11.0.7+1 (EA)
- Switch to EA mode for 11.0.7 pre-release builds.
- Drop JDK-8236039 backport now applied upstream.
- Resolves: rhbz#1810557

Related CVEs

CVE-2020-14577

CVE-2020-14583

CVE-2020-14593

CVE-2020-14556

CVE-2020-14562

CVE-2020-14573

CVE-2020-14621

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	java-11-openjdk-11.0.8.10-0.el8_2.src.rpm	7ea0d06ce09e48c73dcd2d2213c3b8d2	-
	java-11-openjdk-11.0.8.10-0.el8_2.aarch64.rpm	11536e82863d4332f19a8780985681f6	-
	java-11-openjdk-demo-11.0.8.10-0.el8_2.aarch64.rpm	3b7c70fd87433086e596d41808f1745f	-
	java-11-openjdk-devel-11.0.8.10-0.el8_2.aarch64.rpm	8aa01c2a01506b8ea12c6fa5c4f8be7a	-
	java-11-openjdk-headless-11.0.8.10-0.el8_2.aarch64.rpm	b77a79b6abb30b741d4a246889d5d694	-
	java-11-openjdk-javadoc-11.0.8.10-0.el8_2.aarch64.rpm	6ae9e74a9520ebafe3f5bb58b6df4ed7	-
	java-11-openjdk-javadoc-zip-11.0.8.10-0.el8_2.aarch64.rpm	46cf26a5e79b2aca8dbc583e922e4011	-
	java-11-openjdk-jmods-11.0.8.10-0.el8_2.aarch64.rpm	96335acafb632e5b67e60006b2ca5a3c	-
	java-11-openjdk-src-11.0.8.10-0.el8_2.aarch64.rpm	25c7fd7cb7b995d9ca9b7c8df6a625d7	-
	java-11-openjdk-static-libs-11.0.8.10-0.el8_2.aarch64.rpm	70a9c02b8b614a74604d3de713f8f0cb	-
Oracle Linux 8 (x86_64)	java-11-openjdk-11.0.8.10-0.el8_2.src.rpm	7ea0d06ce09e48c73dcd2d2213c3b8d2	-
	java-11-openjdk-11.0.8.10-0.el8_2.x86_64.rpm	51a474e5b08635bb75c6fdeba95becc6	-
	java-11-openjdk-demo-11.0.8.10-0.el8_2.x86_64.rpm	cd4a272542fdd496c1a1e6b1ae4b573e	-
	java-11-openjdk-devel-11.0.8.10-0.el8_2.x86_64.rpm	4ac965e2ef8b958128f72e92c6da64e6	-
	java-11-openjdk-headless-11.0.8.10-0.el8_2.x86_64.rpm	a9dee1656239f9b2c515bfd493f331e2	-
	java-11-openjdk-javadoc-11.0.8.10-0.el8_2.x86_64.rpm	2af2922241a9872b49f47b1b8362bbe3	-
	java-11-openjdk-javadoc-zip-11.0.8.10-0.el8_2.x86_64.rpm	156762fb9795d331f1e6f7282b2496d8	-
	java-11-openjdk-jmods-11.0.8.10-0.el8_2.x86_64.rpm	7aab6f44234c13252b5df314c1ec05fe	-
	java-11-openjdk-src-11.0.8.10-0.el8_2.x86_64.rpm	b310f3ea14eab7153fcd18420f3b3c37	-
	java-11-openjdk-static-libs-11.0.8.10-0.el8_2.x86_64.rpm	c4784da1fc601c5f40b66199398884f4	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team