ELSA-2023-0203

ELSA-2023-0203 - java-1.8.0-openjdk security and bug fix update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2023-01-24

Description

[1:1.8.0.362.b08-1]
- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
- Patch was broken by inclusion of 'JDK-8293554: Enhanced DH Key Exchanges'
- Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
- Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111

[1:1.8.0.362.b07-0.1.ea]
- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191

Related CVEs

CVE-2023-21843

CVE-2023-21830

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	java-1.8.0-openjdk-1.8.0.362.b08-1.el7_9.src.rpm	a0a2d0aac3c65ecb5502767e1022bc50	-
	java-1.8.0-openjdk-1.8.0.362.b08-1.el7_9.aarch64.rpm	55ffb862170761a73df0e2a0c5621c78	-
	java-1.8.0-openjdk-accessibility-1.8.0.362.b08-1.el7_9.aarch64.rpm	24f8c8a62fcc75e4c74a6dab66421293	-
	java-1.8.0-openjdk-demo-1.8.0.362.b08-1.el7_9.aarch64.rpm	1bab8a1bedeaee44ce31833ad8abd3c5	-
	java-1.8.0-openjdk-devel-1.8.0.362.b08-1.el7_9.aarch64.rpm	7cf1c8b959cef844d1b7daf655141c17	-
	java-1.8.0-openjdk-headless-1.8.0.362.b08-1.el7_9.aarch64.rpm	86425b93ce949bb3ce433061edd9de1a	-
	java-1.8.0-openjdk-javadoc-1.8.0.362.b08-1.el7_9.noarch.rpm	b5c605b3dff670dfc195161e20d4df65	-
	java-1.8.0-openjdk-javadoc-zip-1.8.0.362.b08-1.el7_9.noarch.rpm	2cf3648d14851bd1bbec3cc5ecb71c10	-
	java-1.8.0-openjdk-src-1.8.0.362.b08-1.el7_9.aarch64.rpm	a6c0a3bc83abe7529ecf8f5c7e0ddaad	-
Oracle Linux 7 (x86_64)	java-1.8.0-openjdk-1.8.0.362.b08-1.el7_9.src.rpm	a0a2d0aac3c65ecb5502767e1022bc50	-
	java-1.8.0-openjdk-1.8.0.362.b08-1.el7_9.i686.rpm	a8eae14004656c8b41a6fadc6edd7108	-
	java-1.8.0-openjdk-1.8.0.362.b08-1.el7_9.x86_64.rpm	05a54376d0f521f95f31f8c4fb6274fb	-
	java-1.8.0-openjdk-accessibility-1.8.0.362.b08-1.el7_9.i686.rpm	db5c5907613cadc6a0f61446d4b3f876	-
	java-1.8.0-openjdk-accessibility-1.8.0.362.b08-1.el7_9.x86_64.rpm	688f17c276ed0509eda0db0f277569b2	-
	java-1.8.0-openjdk-demo-1.8.0.362.b08-1.el7_9.i686.rpm	a5a7041afec63b7314da0b0802e85b3b	-
	java-1.8.0-openjdk-demo-1.8.0.362.b08-1.el7_9.x86_64.rpm	b8250eaeccb59458922d9fdd8ab752a1	-
	java-1.8.0-openjdk-devel-1.8.0.362.b08-1.el7_9.i686.rpm	e7be5a5c7100ab14c9317bd72f7b5a91	-
	java-1.8.0-openjdk-devel-1.8.0.362.b08-1.el7_9.x86_64.rpm	c3f50c1df83e399e476eb4fccb6c488c	-
	java-1.8.0-openjdk-headless-1.8.0.362.b08-1.el7_9.i686.rpm	24696244bc1cd3af27eef259ee3b1168	-
	java-1.8.0-openjdk-headless-1.8.0.362.b08-1.el7_9.x86_64.rpm	e4efc9425f11a84ce77abcd6cd1a7b46	-
	java-1.8.0-openjdk-javadoc-1.8.0.362.b08-1.el7_9.noarch.rpm	b5c605b3dff670dfc195161e20d4df65	-
	java-1.8.0-openjdk-javadoc-zip-1.8.0.362.b08-1.el7_9.noarch.rpm	2cf3648d14851bd1bbec3cc5ecb71c10	-
	java-1.8.0-openjdk-src-1.8.0.362.b08-1.el7_9.i686.rpm	cb6f200966ab9ada7451d29cf16e01d7	-
	java-1.8.0-openjdk-src-1.8.0.362.b08-1.el7_9.x86_64.rpm	09e5c8fa5cc33963b5f235ee9176f6e8	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team