ELSA-2020-4347

ELSA-2020-4347 - java-1.8.0-openjdk security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2020-10-27

Description

[1:1.8.0.272.b10-1]
- Add backport of JDK-8215727: 'Restore JFR thread sampler loop to old / previous behaviour'
- Resolves: rhbz#1876665

[1:1.8.0.272.b10-0]
- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665

[1:1.8.0.272.b09-0.1.ea]
- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665

[1:1.8.0.272.b09-0.1.ea]
- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665

[1:1.8.0.272.b09-0.0.ea]
- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Switch to EA mode.
- Add debugging output for build.
- JFR must now be explicitly disabled when unwanted (e.g. x86), following switch of upstream default.
- Remove JDK-8154313 backport now applied upstream.
- Change target from 'zip-docs' to 'docs-zip', which is the naming used upstream.
- Update tarball generation script to use PR3795, following inclusion of JDK-8177334
- Add additional s390 size_t case in g1ConcurrentMarkObjArrayProcessor.cpp introduced by JDK-8057003
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Remove JDK-8165996/PR3506/RH1760437 as now applied upstream.
- Resolves: rhbz#1876665

Related CVEs

CVE-2020-14803

CVE-2020-14782

CVE-2020-14796

CVE-2020-14779

CVE-2020-14792

CVE-2020-14797

CVE-2020-14781

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	java-1.8.0-openjdk-1.8.0.272.b10-1.el8_2.src.rpm	1633b722191b728226711a5928264c4646bd8de4e868ed8be8e1f661411e24e2	-	ol8_aarch64_appstream
	java-1.8.0-openjdk-1.8.0.272.b10-1.el8_2.aarch64.rpm	e6f44ed75aee81cc0ff2dfd1bdeeec42cba1e8a7eb1e01785f15a4914c7e5dc0	-	ol8_aarch64_appstream
	java-1.8.0-openjdk-accessibility-1.8.0.272.b10-1.el8_2.aarch64.rpm	88b180e15df163b205769555bf5d1997dd7ed5d0d8051186c33978b1c0c8e096	-	ol8_aarch64_appstream
	java-1.8.0-openjdk-demo-1.8.0.272.b10-1.el8_2.aarch64.rpm	64bb8c1d452e9a19ed95b37d3c8e3c9be0d6ba7a02c1d689e3335afbdd34bdfe	-	ol8_aarch64_appstream
	java-1.8.0-openjdk-devel-1.8.0.272.b10-1.el8_2.aarch64.rpm	1bdcdad0ae94f32a4b71047df1fe2e5a0a2725a4335c0be3a6e7fc0192efb74b	-	ol8_aarch64_appstream
	java-1.8.0-openjdk-headless-1.8.0.272.b10-1.el8_2.aarch64.rpm	85c6cda3b577464757a5e51a5ad79fb88ac2388a7e63549294ace637e967190c	-	ol8_aarch64_appstream
	java-1.8.0-openjdk-javadoc-1.8.0.272.b10-1.el8_2.noarch.rpm	9602bd22db8bf0d7972bba22941b41dd3bbfb9d19154345f51fc823fd01fdf06	-	ol8_aarch64_appstream
	java-1.8.0-openjdk-javadoc-zip-1.8.0.272.b10-1.el8_2.noarch.rpm	85f46b82a14038b7167f2990aa1b534ceb5f8e34df62ea0876862c4f9b938339	-	ol8_aarch64_appstream
	java-1.8.0-openjdk-src-1.8.0.272.b10-1.el8_2.aarch64.rpm	a942543cddcee77d9d56468a8d14aa41fcb7dffecade308dbdcc44aa43fb4485	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	java-1.8.0-openjdk-1.8.0.272.b10-1.el8_2.src.rpm	1633b722191b728226711a5928264c4646bd8de4e868ed8be8e1f661411e24e2	-	ol8_x86_64_appstream
	java-1.8.0-openjdk-1.8.0.272.b10-1.el8_2.x86_64.rpm	c0aa2337cfedbb2c6f4b46a500bdc336f23ae2253096a7ac53e4665a065465fd	-	ol8_x86_64_appstream
	java-1.8.0-openjdk-accessibility-1.8.0.272.b10-1.el8_2.x86_64.rpm	7eabd082e70d02c72baa42292037cd457bbd48cb24c4d5074351c5af3e1ded90	-	ol8_x86_64_appstream
	java-1.8.0-openjdk-demo-1.8.0.272.b10-1.el8_2.x86_64.rpm	a920ebe167a18c87dba97510f80725f4d88d8e1edc8518b6af1dcf593da31e22	-	ol8_x86_64_appstream
	java-1.8.0-openjdk-devel-1.8.0.272.b10-1.el8_2.x86_64.rpm	64958370025b8ec8b6bb22bbe9681c1f1e186e115aac581efdd7fbc63b3ce3af	-	ol8_x86_64_appstream
	java-1.8.0-openjdk-headless-1.8.0.272.b10-1.el8_2.x86_64.rpm	5a077dd842f35ab89fa8932affaec5eac066e900711115f8b8294b0228ef7ebb	-	ol8_x86_64_appstream
	java-1.8.0-openjdk-javadoc-1.8.0.272.b10-1.el8_2.noarch.rpm	9602bd22db8bf0d7972bba22941b41dd3bbfb9d19154345f51fc823fd01fdf06	-	ol8_x86_64_appstream
	java-1.8.0-openjdk-javadoc-zip-1.8.0.272.b10-1.el8_2.noarch.rpm	85f46b82a14038b7167f2990aa1b534ceb5f8e34df62ea0876862c4f9b938339	-	ol8_x86_64_appstream
	java-1.8.0-openjdk-src-1.8.0.272.b10-1.el8_2.x86_64.rpm	cc63a4e89138ccae23edc1f779941a9fc13aef844e79a7107191890d5f4f4fa4	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team