ELSA-2024-1825

ELSA-2024-1825 - java-17-openjdk security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2024-04-22

Description

[17.0.11.0.9-2.0.1]
- Add Oracle vendor bug URL

[1:17.0.11.0.9-2]
- Update to jdk-17.0.11+9 (GA)
- Add openjdk-17.0.11+9.tar.xz to .gitignore
- Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
- Update buildver from 7 to 9
- Update portablerelease from 1 to 3
- Change is_ga from 0 to 1 to enable GA mode for release
- Update tzdata Requires comment to mention that 2024a is not yet in the buildroot
- Update tzdata BuildRequires comment to mention that 2024a is not yet in the buildroot
- Update tzdata BuildRequires fro 2023c to 2023d
- Update sources from openjdk-17.0.11+7-ea.tar.xz to openjdk-17.0.11+9.tar.xz
- Resolves: RHEL-27137
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **

[1:17.0.11.0.7-0.2.ea]
- Update to jdk-17.0.11+7 (EA)
- Sync java-17-openjdk-portable.specfile
- Sync java-17-openjdk-portable.specfile again to mention OPENJDK-2730
- Related: RHEL-27137

[1:17.0.11.0.6-0.2.ea]
- Update to jdk-17.0.11+6 (EA)
- Sync java-17-openjdk-portable.specfile
- Update buildjdkver to match the featurever
- Use featurever macro to specify fips patch
- Explain patchN syntax situation in a comment
- generate_source_tarball.sh: Fix whitespace
- generate_source_tarball.sh: Skip -ga tags
- generate_source_tarball.sh: Get -ea suffix from version-numbers.conf
- generate_source_tarball.sh: Use git archive to generate tarball
- generate_source_tarball.sh: Update version in comment
- generate_source_tarball.sh: Remove trailing period in echo
- generate_source_tarball.sh: Add indentation instructions for Emacs
- Require tzdata 2023d (JDK-8322725)
- generate_source_tarball.sh: Add license
- openjdk_news.sh: Use grep -E instead of egrep
- Remove RH1649512 patch for libjpeg-turbo FAR macro
- Move pcsc-lite-libs patch to in-need-of-upstreaming section
- Related: RHEL-27137

Related CVEs

CVE-2024-21011

CVE-2024-21012

CVE-2024-21068

CVE-2024-21094

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	java-17-openjdk-17.0.11.0.9-2.0.1.el8.src.rpm	4b6d2b3bcfe39a552a977e7c90ebfa8e	-	ol8_aarch64_appstream
	java-17-openjdk-17.0.11.0.9-2.0.1.el8.src.rpm	4b6d2b3bcfe39a552a977e7c90ebfa8e	-	ol8_aarch64_codeready_builder
	java-17-openjdk-17.0.11.0.9-2.0.1.el8.aarch64.rpm	a8db9b8284ad8926ead397e1f4e2d6fe	-	ol8_aarch64_appstream
	java-17-openjdk-demo-17.0.11.0.9-2.0.1.el8.aarch64.rpm	6a3a62ff5dc3e351219401ebaf09bdd9	-	ol8_aarch64_appstream
	java-17-openjdk-demo-fastdebug-17.0.11.0.9-2.0.1.el8.aarch64.rpm	b4affdfd31859c309ec9e7eff04d4442	-	ol8_aarch64_codeready_builder
	java-17-openjdk-demo-slowdebug-17.0.11.0.9-2.0.1.el8.aarch64.rpm	6e06502f685695a684d6683f9a7f4502	-	ol8_aarch64_codeready_builder
	java-17-openjdk-devel-17.0.11.0.9-2.0.1.el8.aarch64.rpm	66b10f6b4da1e582cd7f53159db39d06	-	ol8_aarch64_appstream
	java-17-openjdk-devel-fastdebug-17.0.11.0.9-2.0.1.el8.aarch64.rpm	e94f621fad5f6e2221d9c2800ef595b1	-	ol8_aarch64_codeready_builder
	java-17-openjdk-devel-slowdebug-17.0.11.0.9-2.0.1.el8.aarch64.rpm	94aef99a762dbf03ee6313e5153d7bea	-	ol8_aarch64_codeready_builder
	java-17-openjdk-fastdebug-17.0.11.0.9-2.0.1.el8.aarch64.rpm	7b6c2f134683f54ca46457c9f6ac3154	-	ol8_aarch64_codeready_builder
	java-17-openjdk-headless-17.0.11.0.9-2.0.1.el8.aarch64.rpm	bda4fac376dddfaa4fabd5b54e28d4ea	-	ol8_aarch64_appstream
	java-17-openjdk-headless-fastdebug-17.0.11.0.9-2.0.1.el8.aarch64.rpm	a18c25eca4e22c7e6083a339c14a6079	-	ol8_aarch64_codeready_builder
	java-17-openjdk-headless-slowdebug-17.0.11.0.9-2.0.1.el8.aarch64.rpm	ec3a317de4fc8d7a46e7c048085311d2	-	ol8_aarch64_codeready_builder
	java-17-openjdk-javadoc-17.0.11.0.9-2.0.1.el8.aarch64.rpm	2c62a6c388089447fba2128d5e8bc9f6	-	ol8_aarch64_appstream
	java-17-openjdk-javadoc-zip-17.0.11.0.9-2.0.1.el8.aarch64.rpm	124143b67ffd057a299955bedc2f9273	-	ol8_aarch64_appstream
	java-17-openjdk-jmods-17.0.11.0.9-2.0.1.el8.aarch64.rpm	32d9322d860e6a0bed517a765a83b2c6	-	ol8_aarch64_appstream
	java-17-openjdk-jmods-fastdebug-17.0.11.0.9-2.0.1.el8.aarch64.rpm	0b4aa558c69af79b54ff201c6c607d86	-	ol8_aarch64_codeready_builder
	java-17-openjdk-jmods-slowdebug-17.0.11.0.9-2.0.1.el8.aarch64.rpm	2b2755045b6abc305fee7ea9a2f9b4ef	-	ol8_aarch64_codeready_builder
	java-17-openjdk-slowdebug-17.0.11.0.9-2.0.1.el8.aarch64.rpm	c8369007855306ca5c71ae7190728b92	-	ol8_aarch64_codeready_builder
	java-17-openjdk-src-17.0.11.0.9-2.0.1.el8.aarch64.rpm	4d96ad3121bd890bd52323559f281156	-	ol8_aarch64_appstream
	java-17-openjdk-src-fastdebug-17.0.11.0.9-2.0.1.el8.aarch64.rpm	34360518fc1991aeec76e6b1b3e8b9a0	-	ol8_aarch64_codeready_builder
	java-17-openjdk-src-slowdebug-17.0.11.0.9-2.0.1.el8.aarch64.rpm	a303d2938153ca806c0093b7cfdb6a37	-	ol8_aarch64_codeready_builder
	java-17-openjdk-static-libs-17.0.11.0.9-2.0.1.el8.aarch64.rpm	286e6d95f0b0a86612f297572d00a092	-	ol8_aarch64_appstream
	java-17-openjdk-static-libs-fastdebug-17.0.11.0.9-2.0.1.el8.aarch64.rpm	13cfeff9009d258b354d19a3431c0400	-	ol8_aarch64_codeready_builder
	java-17-openjdk-static-libs-slowdebug-17.0.11.0.9-2.0.1.el8.aarch64.rpm	09d7addaa278b7ce45fcd1bac118eceb	-	ol8_aarch64_codeready_builder
Oracle Linux 8 (x86_64)	java-17-openjdk-17.0.11.0.9-2.0.1.el8.src.rpm	4b6d2b3bcfe39a552a977e7c90ebfa8e	-	ol8_x86_64_appstream
	java-17-openjdk-17.0.11.0.9-2.0.1.el8.src.rpm	4b6d2b3bcfe39a552a977e7c90ebfa8e	-	ol8_x86_64_codeready_builder
	java-17-openjdk-17.0.11.0.9-2.0.1.el8.x86_64.rpm	01ff7c5339f9b504a47de8992c0b166a	-	ol8_x86_64_appstream
	java-17-openjdk-demo-17.0.11.0.9-2.0.1.el8.x86_64.rpm	8c3b10c95c2bd8d65bd3986d3090649b	-	ol8_x86_64_appstream
	java-17-openjdk-demo-fastdebug-17.0.11.0.9-2.0.1.el8.x86_64.rpm	0ffd3002e34622f867a89adf4012973c	-	ol8_x86_64_codeready_builder
	java-17-openjdk-demo-slowdebug-17.0.11.0.9-2.0.1.el8.x86_64.rpm	9a5a6ee702ca1233335d3614cc75aaee	-	ol8_x86_64_codeready_builder
	java-17-openjdk-devel-17.0.11.0.9-2.0.1.el8.x86_64.rpm	f6f1bee27f467938122be51a1a4ff9f5	-	ol8_x86_64_appstream
	java-17-openjdk-devel-fastdebug-17.0.11.0.9-2.0.1.el8.x86_64.rpm	b5db1bd0e8cb73a2517b4adf50290b83	-	ol8_x86_64_codeready_builder
	java-17-openjdk-devel-slowdebug-17.0.11.0.9-2.0.1.el8.x86_64.rpm	38bcbe13d06243c92e7d54116ba1db16	-	ol8_x86_64_codeready_builder
	java-17-openjdk-fastdebug-17.0.11.0.9-2.0.1.el8.x86_64.rpm	65987d3951fd66315fe9e00e8cde850a	-	ol8_x86_64_codeready_builder
	java-17-openjdk-headless-17.0.11.0.9-2.0.1.el8.x86_64.rpm	d319df240ec9d17af2409483dac99a3e	-	ol8_x86_64_appstream
	java-17-openjdk-headless-fastdebug-17.0.11.0.9-2.0.1.el8.x86_64.rpm	5ae0a9e824741229492df64473e29cea	-	ol8_x86_64_codeready_builder
	java-17-openjdk-headless-slowdebug-17.0.11.0.9-2.0.1.el8.x86_64.rpm	a59561d8d39b95da56a931d0effe2dfe	-	ol8_x86_64_codeready_builder
	java-17-openjdk-javadoc-17.0.11.0.9-2.0.1.el8.x86_64.rpm	b8ce84dc2efffcd86c953f7dfc3a44ea	-	ol8_x86_64_appstream
	java-17-openjdk-javadoc-zip-17.0.11.0.9-2.0.1.el8.x86_64.rpm	a3427e70a23f9d9b4c4aeb589b8093ab	-	ol8_x86_64_appstream
	java-17-openjdk-jmods-17.0.11.0.9-2.0.1.el8.x86_64.rpm	3b83ba0332c09300400c9624bf0936f8	-	ol8_x86_64_appstream
	java-17-openjdk-jmods-fastdebug-17.0.11.0.9-2.0.1.el8.x86_64.rpm	7fac78adb0437d7d6fb7c0ba2fc4ed7b	-	ol8_x86_64_codeready_builder
	java-17-openjdk-jmods-slowdebug-17.0.11.0.9-2.0.1.el8.x86_64.rpm	7f5b0df35af9470e00e5087d906a4976	-	ol8_x86_64_codeready_builder
	java-17-openjdk-slowdebug-17.0.11.0.9-2.0.1.el8.x86_64.rpm	ab7253df80a1904b7ecdf0d5065dd3d6	-	ol8_x86_64_codeready_builder
	java-17-openjdk-src-17.0.11.0.9-2.0.1.el8.x86_64.rpm	f992457767e106cdd6bdd389a6c9b606	-	ol8_x86_64_appstream
	java-17-openjdk-src-fastdebug-17.0.11.0.9-2.0.1.el8.x86_64.rpm	a2fc6feeab9bdb2a5460e80f9a647bec	-	ol8_x86_64_codeready_builder
	java-17-openjdk-src-slowdebug-17.0.11.0.9-2.0.1.el8.x86_64.rpm	98f7ee90460ed9d746d74566f267d9f4	-	ol8_x86_64_codeready_builder
	java-17-openjdk-static-libs-17.0.11.0.9-2.0.1.el8.x86_64.rpm	6afa07beb77ef41e8d9a9eddf8bf5a7f	-	ol8_x86_64_appstream
	java-17-openjdk-static-libs-fastdebug-17.0.11.0.9-2.0.1.el8.x86_64.rpm	29b10e8a8fe742f80b9c0afbec0ba7ff	-	ol8_x86_64_codeready_builder
	java-17-openjdk-static-libs-slowdebug-17.0.11.0.9-2.0.1.el8.x86_64.rpm	7c22f0b1aa6c9f49fcc024005855591b	-	ol8_x86_64_codeready_builder
Oracle Linux 9 (aarch64)	java-17-openjdk-17.0.11.0.9-2.0.1.el9.src.rpm	899ae007b2fb09144b039bd11631544f	-	ol9_aarch64_appstream
	java-17-openjdk-17.0.11.0.9-2.0.1.el9.src.rpm	899ae007b2fb09144b039bd11631544f	-	ol9_aarch64_codeready_builder
	java-17-openjdk-17.0.11.0.9-2.0.1.el9.aarch64.rpm	499d2349e88814286fb0181b6e8b9b99	-	ol9_aarch64_appstream
	java-17-openjdk-demo-17.0.11.0.9-2.0.1.el9.aarch64.rpm	9278895b6c24cf163d453f6ab6b9ad2b	-	ol9_aarch64_appstream
	java-17-openjdk-demo-fastdebug-17.0.11.0.9-2.0.1.el9.aarch64.rpm	9adce65706e039fd8de0991ad2c2a54d	-	ol9_aarch64_codeready_builder
	java-17-openjdk-demo-slowdebug-17.0.11.0.9-2.0.1.el9.aarch64.rpm	ca3b40a0b7bee5e7bf2fc0652af5ffae	-	ol9_aarch64_codeready_builder
	java-17-openjdk-devel-17.0.11.0.9-2.0.1.el9.aarch64.rpm	acbd3c692493eb3408b7af449f2e69a5	-	ol9_aarch64_appstream
	java-17-openjdk-devel-fastdebug-17.0.11.0.9-2.0.1.el9.aarch64.rpm	646f03df0717a5e02b7f0a25640ec0d9	-	ol9_aarch64_codeready_builder
	java-17-openjdk-devel-slowdebug-17.0.11.0.9-2.0.1.el9.aarch64.rpm	29fa29a3a6be3ed99506fadf77b8071c	-	ol9_aarch64_codeready_builder
	java-17-openjdk-fastdebug-17.0.11.0.9-2.0.1.el9.aarch64.rpm	398850174ed2232f01804d05b6e5ea95	-	ol9_aarch64_codeready_builder
	java-17-openjdk-headless-17.0.11.0.9-2.0.1.el9.aarch64.rpm	d69a12c09e847abb31cb4ed7237a57cb	-	ol9_aarch64_appstream
	java-17-openjdk-headless-fastdebug-17.0.11.0.9-2.0.1.el9.aarch64.rpm	522e41df8cae693b6d82c254c6f85792	-	ol9_aarch64_codeready_builder
	java-17-openjdk-headless-slowdebug-17.0.11.0.9-2.0.1.el9.aarch64.rpm	dc865f6ce52d7b3a8b849fdd225fddc6	-	ol9_aarch64_codeready_builder
	java-17-openjdk-javadoc-17.0.11.0.9-2.0.1.el9.aarch64.rpm	5f60ede5df91e090dc63996e53e752d9	-	ol9_aarch64_appstream
	java-17-openjdk-javadoc-zip-17.0.11.0.9-2.0.1.el9.aarch64.rpm	763a05ab3db7632ff7896f145bc8dd11	-	ol9_aarch64_appstream
	java-17-openjdk-jmods-17.0.11.0.9-2.0.1.el9.aarch64.rpm	68606ce5f9e88cb2130267b9a315fbc4	-	ol9_aarch64_appstream
	java-17-openjdk-jmods-fastdebug-17.0.11.0.9-2.0.1.el9.aarch64.rpm	99da2bd6bddd660295721b404fba1335	-	ol9_aarch64_codeready_builder
	java-17-openjdk-jmods-slowdebug-17.0.11.0.9-2.0.1.el9.aarch64.rpm	af9e91b90f09fc98af27989db6270600	-	ol9_aarch64_codeready_builder
	java-17-openjdk-slowdebug-17.0.11.0.9-2.0.1.el9.aarch64.rpm	6dc59e8582af62f027eab804cb5ba970	-	ol9_aarch64_codeready_builder
	java-17-openjdk-src-17.0.11.0.9-2.0.1.el9.aarch64.rpm	8a60340b647396c29c184eed42d00f5e	-	ol9_aarch64_appstream
	java-17-openjdk-src-fastdebug-17.0.11.0.9-2.0.1.el9.aarch64.rpm	cb7d96e694634fe8500b467d6c2601b5	-	ol9_aarch64_codeready_builder
	java-17-openjdk-src-slowdebug-17.0.11.0.9-2.0.1.el9.aarch64.rpm	a202aca9e352abd390ba66cb547d36b1	-	ol9_aarch64_codeready_builder
	java-17-openjdk-static-libs-17.0.11.0.9-2.0.1.el9.aarch64.rpm	ce404087344ecc645d59b5426faa275a	-	ol9_aarch64_appstream
	java-17-openjdk-static-libs-fastdebug-17.0.11.0.9-2.0.1.el9.aarch64.rpm	118131a0054c90959494a35b259e4b62	-	ol9_aarch64_codeready_builder
	java-17-openjdk-static-libs-slowdebug-17.0.11.0.9-2.0.1.el9.aarch64.rpm	ae82b2e34832c00f3658e90cda64638b	-	ol9_aarch64_codeready_builder
Oracle Linux 9 (x86_64)	java-17-openjdk-17.0.11.0.9-2.0.1.el9.src.rpm	899ae007b2fb09144b039bd11631544f	-	ol9_x86_64_appstream
	java-17-openjdk-17.0.11.0.9-2.0.1.el9.src.rpm	899ae007b2fb09144b039bd11631544f	-	ol9_x86_64_codeready_builder
	java-17-openjdk-17.0.11.0.9-2.0.1.el9.x86_64.rpm	ec499e1383358f22b559934ca13ac4c8	-	ol9_x86_64_appstream
	java-17-openjdk-demo-17.0.11.0.9-2.0.1.el9.x86_64.rpm	2f12abb7d1a650175fbcc3e3fbc7f8cd	-	ol9_x86_64_appstream
	java-17-openjdk-demo-fastdebug-17.0.11.0.9-2.0.1.el9.x86_64.rpm	46243a7531fd3582305a77d20a96ce66	-	ol9_x86_64_codeready_builder
	java-17-openjdk-demo-slowdebug-17.0.11.0.9-2.0.1.el9.x86_64.rpm	015858663eaa15130108421026f9fdca	-	ol9_x86_64_codeready_builder
	java-17-openjdk-devel-17.0.11.0.9-2.0.1.el9.x86_64.rpm	6c4463672d3ba37973b8fe960952d7ac	-	ol9_x86_64_appstream
	java-17-openjdk-devel-fastdebug-17.0.11.0.9-2.0.1.el9.x86_64.rpm	58ed910a33a0b85a7c1447185d0fb5ea	-	ol9_x86_64_codeready_builder
	java-17-openjdk-devel-slowdebug-17.0.11.0.9-2.0.1.el9.x86_64.rpm	1257491f15a08a726994e7e2df6fc080	-	ol9_x86_64_codeready_builder
	java-17-openjdk-fastdebug-17.0.11.0.9-2.0.1.el9.x86_64.rpm	86363519fea596de80b7448162624089	-	ol9_x86_64_codeready_builder
	java-17-openjdk-headless-17.0.11.0.9-2.0.1.el9.x86_64.rpm	1d733275bb564d852a9b90cc536b22e1	-	ol9_x86_64_appstream
	java-17-openjdk-headless-fastdebug-17.0.11.0.9-2.0.1.el9.x86_64.rpm	d719077cbd794fd948a1e73273f1aee9	-	ol9_x86_64_codeready_builder
	java-17-openjdk-headless-slowdebug-17.0.11.0.9-2.0.1.el9.x86_64.rpm	cd0647784ed5a210ed7bfd2f6c369ee6	-	ol9_x86_64_codeready_builder
	java-17-openjdk-javadoc-17.0.11.0.9-2.0.1.el9.x86_64.rpm	8ef5b5e22182841f869d868c10b3a517	-	ol9_x86_64_appstream
	java-17-openjdk-javadoc-zip-17.0.11.0.9-2.0.1.el9.x86_64.rpm	26c7d95338c14f1973f76681d08bb699	-	ol9_x86_64_appstream
	java-17-openjdk-jmods-17.0.11.0.9-2.0.1.el9.x86_64.rpm	b0cb627c30f5e8caeaac7bcb9c375928	-	ol9_x86_64_appstream
	java-17-openjdk-jmods-fastdebug-17.0.11.0.9-2.0.1.el9.x86_64.rpm	df469d982b8f66cfcd7990c0d7dbf895	-	ol9_x86_64_codeready_builder
	java-17-openjdk-jmods-slowdebug-17.0.11.0.9-2.0.1.el9.x86_64.rpm	40a8d36035a178fd460240f14f1824ae	-	ol9_x86_64_codeready_builder
	java-17-openjdk-slowdebug-17.0.11.0.9-2.0.1.el9.x86_64.rpm	b44798fb8f95e85310fb44d5768d9d0e	-	ol9_x86_64_codeready_builder
	java-17-openjdk-src-17.0.11.0.9-2.0.1.el9.x86_64.rpm	16bcfd6c6d47075ce8cd8a9774a84bab	-	ol9_x86_64_appstream
	java-17-openjdk-src-fastdebug-17.0.11.0.9-2.0.1.el9.x86_64.rpm	8e438f668b6ff3aef47759662ebb09ea	-	ol9_x86_64_codeready_builder
	java-17-openjdk-src-slowdebug-17.0.11.0.9-2.0.1.el9.x86_64.rpm	818114e79b0efddcce72a6b6331e6390	-	ol9_x86_64_codeready_builder
	java-17-openjdk-static-libs-17.0.11.0.9-2.0.1.el9.x86_64.rpm	a67607e63e3a859ac5f7d59279e00373	-	ol9_x86_64_appstream
	java-17-openjdk-static-libs-fastdebug-17.0.11.0.9-2.0.1.el9.x86_64.rpm	f00981ec55c43db10fc133ae1dfd24ba	-	ol9_x86_64_codeready_builder
	java-17-openjdk-static-libs-slowdebug-17.0.11.0.9-2.0.1.el9.x86_64.rpm	14886caa41ca45efe3a23dc78fa2c123	-	ol9_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team