Stay Connected:

ELSA-2024-4568

ELSA-2024-4568 - java-17-openjdk security update

Type:SECURITY
Severity:IMPORTANT
Release Date:2024-07-18

Description


[1:17.0.12.0.7-2.0.1]
- Add Oracle vendor bug URL

[1:17.0.12.0.7-2]
- Update to jdk-17.0.12+7 (GA)
- Update .gitignore to ignore openjdk-17.0.12+7.tar.xz
- Sync java-17-openjdk-portable.specfile
- Set buildver to 7
- Set portablerelease 1
- Set is_ga to 1
- Update sources to openjdk-17.0.12+7.tar.xz
- Resolves: RHEL-46641
- Resolves: RHEL-47019
- ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **

[1:17.0.12.0.6-0.1.ea]
- Add debuginfo section to rpminspect.yaml (OPENJDK-2904)
- Add unicode section to rpminspect.yaml (OPENJDK-2904)

[1:17.0.12.0.6-0.1.ea]
- Add upstream patch that removes illegal RLO Unicode characters (JDK-8332174)
- Sync the copy of the portable specfile with the latest update

[1:17.0.12.0.6-0.1.ea]
- Delete fips-17u-d63771ea660.patch
- Add fips-17u-e893be00150.patch
- Update fipsver to e893be00150

[1:17.0.12.0.6-0.1.ea]
- generate_source_tarball.sh: Use tar exclude options for VCS files
- generate_source_tarball.sh: Improve VCS exclusion

[1:17.0.12.0.6-0.1.ea]
- generate_source_tarball.sh: Update examples in header for clarity
- generate_source_tarball.sh: Cleanup message issued when checkout already exists
- generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
- generate_source_tarball.sh: Only add --depth=1 on non-local repositories
- icedtea_sync.sh: Reinstate from rhel-8.9.0 branch
- Move maintenance scripts to a scripts subdirectory
- discover_trees.sh: Set compile-command and indentation instructions for Emacs
- discover_trees.sh: shellcheck: Do not use -o (SC2166)
- discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: Add authorship
- icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
- icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
- icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: Set compile-command and indentation instructions for Emacs
- openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
- openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
- generate_source_tarball.sh: Output values of new options WITH_TEMP and OPENJDK_LATEST
- generate_source_tarball.sh: Double-quote DEPTH reference (SC2086)
- generate_source_tarball.sh: Avoid empty DEPTH reference while still appeasing shellcheck

[1:17.0.12.0.6-0.1.ea]
- Update to jdk-17.0.12+6 (EA)
- Add openjdk-17.0.12+6-ea.tar.xz to .gitignore
- Set updatever to 12
- Set buildver to 6
- Set rpmrelease to 1
- Set is_ga to 0
- Update sources to openjdk-17.0.12+6-ea.tar.xz
- Require tzdata-java 2024a at runtime and for build (JDK-8325150)
- Update lcms2 bundled provides to 2.16.0
- Add zlib 1.3.1 bundled provides and zlib-devel build requirement (OPENJDK-3065)
- Label as error a designator mismatch
- Change a fix-me comment to a note instead
- Sync generate_source_tarball.sh from Fedora rawhide


Related CVEs


CVE-2024-21131
CVE-2024-21140
CVE-2024-21145
CVE-2024-21147
CVE-2024-21138

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) java-17-openjdk-17.0.12.0.7-2.0.1.el8.src.rpm03818bf8e183223fb82ba989a5b33da8-ol8_aarch64_appstream
java-17-openjdk-17.0.12.0.7-2.0.1.el8.src.rpm03818bf8e183223fb82ba989a5b33da8-ol8_aarch64_codeready_builder
java-17-openjdk-17.0.12.0.7-2.0.1.el8.aarch64.rpm896222e92c65f8d33a7d08b799b90f6e-ol8_aarch64_appstream
java-17-openjdk-demo-17.0.12.0.7-2.0.1.el8.aarch64.rpmfdc53c65cd3cb9681ea01dbbe188cb25-ol8_aarch64_appstream
java-17-openjdk-demo-fastdebug-17.0.12.0.7-2.0.1.el8.aarch64.rpm3b7e6df1f1afeae77f250bc269083d27-ol8_aarch64_codeready_builder
java-17-openjdk-demo-slowdebug-17.0.12.0.7-2.0.1.el8.aarch64.rpm8258492ee1daf6035a8d6a8ce6f3b062-ol8_aarch64_codeready_builder
java-17-openjdk-devel-17.0.12.0.7-2.0.1.el8.aarch64.rpm76de75d238c974a9c940ab65df74b65c-ol8_aarch64_appstream
java-17-openjdk-devel-fastdebug-17.0.12.0.7-2.0.1.el8.aarch64.rpme771de20850b927ac87adac27c4277cd-ol8_aarch64_codeready_builder
java-17-openjdk-devel-slowdebug-17.0.12.0.7-2.0.1.el8.aarch64.rpma3ae61e5f3914c43f600a98155d2fcd6-ol8_aarch64_codeready_builder
java-17-openjdk-fastdebug-17.0.12.0.7-2.0.1.el8.aarch64.rpmec73f6441bd400ad8a45425729bd001f-ol8_aarch64_codeready_builder
java-17-openjdk-headless-17.0.12.0.7-2.0.1.el8.aarch64.rpm98e984f25bff2d2d4bc65e5fc5e9126c-ol8_aarch64_appstream
java-17-openjdk-headless-fastdebug-17.0.12.0.7-2.0.1.el8.aarch64.rpm5f5c1ca531f6dc60aa3c68bbfb7339aa-ol8_aarch64_codeready_builder
java-17-openjdk-headless-slowdebug-17.0.12.0.7-2.0.1.el8.aarch64.rpm767015f35b4ee0f8e6b259e98335fd44-ol8_aarch64_codeready_builder
java-17-openjdk-javadoc-17.0.12.0.7-2.0.1.el8.aarch64.rpm1bbf764ba85ae941304ced613a8c977b-ol8_aarch64_appstream
java-17-openjdk-javadoc-zip-17.0.12.0.7-2.0.1.el8.aarch64.rpm739ff9a41e57468c4d2ed1eb96d5081e-ol8_aarch64_appstream
java-17-openjdk-jmods-17.0.12.0.7-2.0.1.el8.aarch64.rpm0cb19c847120da86efb06c512c1a8f05-ol8_aarch64_appstream
java-17-openjdk-jmods-fastdebug-17.0.12.0.7-2.0.1.el8.aarch64.rpm4e405d7b79bb007d32c49b550b176372-ol8_aarch64_codeready_builder
java-17-openjdk-jmods-slowdebug-17.0.12.0.7-2.0.1.el8.aarch64.rpm6a8e46d32d1f6d2123ca8a57a7829478-ol8_aarch64_codeready_builder
java-17-openjdk-slowdebug-17.0.12.0.7-2.0.1.el8.aarch64.rpm034dd480be5a5da94c5d49b34aa8067b-ol8_aarch64_codeready_builder
java-17-openjdk-src-17.0.12.0.7-2.0.1.el8.aarch64.rpmd6509087552044d7d7a704c49db5717c-ol8_aarch64_appstream
java-17-openjdk-src-fastdebug-17.0.12.0.7-2.0.1.el8.aarch64.rpmf1f1766650728c3e4a72f501babdc172-ol8_aarch64_codeready_builder
java-17-openjdk-src-slowdebug-17.0.12.0.7-2.0.1.el8.aarch64.rpm2e201f507c01144b2456848e8f394558-ol8_aarch64_codeready_builder
java-17-openjdk-static-libs-17.0.12.0.7-2.0.1.el8.aarch64.rpm18a6ad9f4e92018c99a796b25dda0270-ol8_aarch64_appstream
java-17-openjdk-static-libs-fastdebug-17.0.12.0.7-2.0.1.el8.aarch64.rpm155cdd203c268af0b524727536ab2891-ol8_aarch64_codeready_builder
java-17-openjdk-static-libs-slowdebug-17.0.12.0.7-2.0.1.el8.aarch64.rpm636c08a35ef015766302dde1ee5968b9-ol8_aarch64_codeready_builder
Oracle Linux 8 (x86_64) java-17-openjdk-17.0.12.0.7-2.0.1.el8.src.rpm03818bf8e183223fb82ba989a5b33da8-ol8_x86_64_appstream
java-17-openjdk-17.0.12.0.7-2.0.1.el8.src.rpm03818bf8e183223fb82ba989a5b33da8-ol8_x86_64_codeready_builder
java-17-openjdk-17.0.12.0.7-2.0.1.el8.x86_64.rpm5ad8be90ecf105a83c804d15cd49af3e-ol8_x86_64_appstream
java-17-openjdk-demo-17.0.12.0.7-2.0.1.el8.x86_64.rpm068e6486fcc55767ab2e209888f977c6-ol8_x86_64_appstream
java-17-openjdk-demo-fastdebug-17.0.12.0.7-2.0.1.el8.x86_64.rpm8eb952d6443b5ace6a1deb02ec0159a3-ol8_x86_64_codeready_builder
java-17-openjdk-demo-slowdebug-17.0.12.0.7-2.0.1.el8.x86_64.rpm28b4e48f3d4be4bcaef6e27b59d8b2f5-ol8_x86_64_codeready_builder
java-17-openjdk-devel-17.0.12.0.7-2.0.1.el8.x86_64.rpmd8870f5dc2c7be79c5476acf3fbf1f26-ol8_x86_64_appstream
java-17-openjdk-devel-fastdebug-17.0.12.0.7-2.0.1.el8.x86_64.rpmec2a552a24884262103ab451a48d6f94-ol8_x86_64_codeready_builder
java-17-openjdk-devel-slowdebug-17.0.12.0.7-2.0.1.el8.x86_64.rpm49db30abf24d70a544af18d6a81ffe21-ol8_x86_64_codeready_builder
java-17-openjdk-fastdebug-17.0.12.0.7-2.0.1.el8.x86_64.rpm3cff48536cd7fa637f115407c0f16443-ol8_x86_64_codeready_builder
java-17-openjdk-headless-17.0.12.0.7-2.0.1.el8.x86_64.rpm6fd09f44d06463c3e1ddf2f25a407c1f-ol8_x86_64_appstream
java-17-openjdk-headless-fastdebug-17.0.12.0.7-2.0.1.el8.x86_64.rpm01c8f550a575524f939de2835bd91d49-ol8_x86_64_codeready_builder
java-17-openjdk-headless-slowdebug-17.0.12.0.7-2.0.1.el8.x86_64.rpm97d8bd87ee706484d13dc10dbde8e2af-ol8_x86_64_codeready_builder
java-17-openjdk-javadoc-17.0.12.0.7-2.0.1.el8.x86_64.rpm465b5dd8ca6950bc70b2781a92629b00-ol8_x86_64_appstream
java-17-openjdk-javadoc-zip-17.0.12.0.7-2.0.1.el8.x86_64.rpma43cd28eed55c36f9b0a0bd43e337590-ol8_x86_64_appstream
java-17-openjdk-jmods-17.0.12.0.7-2.0.1.el8.x86_64.rpmcea62959b3481dcfcf282e52612c329b-ol8_x86_64_appstream
java-17-openjdk-jmods-fastdebug-17.0.12.0.7-2.0.1.el8.x86_64.rpm758876ad31a0660220933b31ab729a15-ol8_x86_64_codeready_builder
java-17-openjdk-jmods-slowdebug-17.0.12.0.7-2.0.1.el8.x86_64.rpmb74fb740d5369ea51319b3aca53b2ad1-ol8_x86_64_codeready_builder
java-17-openjdk-slowdebug-17.0.12.0.7-2.0.1.el8.x86_64.rpmac12770f274d9b4f87bc0f37a01c6a92-ol8_x86_64_codeready_builder
java-17-openjdk-src-17.0.12.0.7-2.0.1.el8.x86_64.rpmee0331b3834dda763bcf02aa5e4bef85-ol8_x86_64_appstream
java-17-openjdk-src-fastdebug-17.0.12.0.7-2.0.1.el8.x86_64.rpm680e2255852a2e6383ca5d3e7ebd9fa6-ol8_x86_64_codeready_builder
java-17-openjdk-src-slowdebug-17.0.12.0.7-2.0.1.el8.x86_64.rpm3ae4f6b2c4a4a83eb0f2f594ece98286-ol8_x86_64_codeready_builder
java-17-openjdk-static-libs-17.0.12.0.7-2.0.1.el8.x86_64.rpmf55ec08c64e6e5f29f4bd72800e189e5-ol8_x86_64_appstream
java-17-openjdk-static-libs-fastdebug-17.0.12.0.7-2.0.1.el8.x86_64.rpm54388a16aa9c6294ee16300247c817da-ol8_x86_64_codeready_builder
java-17-openjdk-static-libs-slowdebug-17.0.12.0.7-2.0.1.el8.x86_64.rpm55f5e7c0292a8d9aeba87438f0572722-ol8_x86_64_codeready_builder
Oracle Linux 9 (aarch64) java-17-openjdk-17.0.12.0.7-2.0.1.el9.src.rpm8350fcdab36b233cac451a0bfa5a5b32-ol9_aarch64_appstream
java-17-openjdk-17.0.12.0.7-2.0.1.el9.src.rpm8350fcdab36b233cac451a0bfa5a5b32-ol9_aarch64_codeready_builder
java-17-openjdk-17.0.12.0.7-2.0.1.el9.aarch64.rpmfb339a8c39f60e90a72de0e21e6104a8-ol9_aarch64_appstream
java-17-openjdk-demo-17.0.12.0.7-2.0.1.el9.aarch64.rpmdb6af0819856127b37426d8c458c97cf-ol9_aarch64_appstream
java-17-openjdk-demo-fastdebug-17.0.12.0.7-2.0.1.el9.aarch64.rpm0ba8daffa3a7dfad2a89eca9ebbf3e6b-ol9_aarch64_codeready_builder
java-17-openjdk-demo-slowdebug-17.0.12.0.7-2.0.1.el9.aarch64.rpm3abe89f21f34a3a002d5390aea4bf6f2-ol9_aarch64_codeready_builder
java-17-openjdk-devel-17.0.12.0.7-2.0.1.el9.aarch64.rpm0690997a97ec63b4ff71c79c6f6f5f17-ol9_aarch64_appstream
java-17-openjdk-devel-fastdebug-17.0.12.0.7-2.0.1.el9.aarch64.rpm742da8ae7509cc65d9d6fc3c7db60dbe-ol9_aarch64_codeready_builder
java-17-openjdk-devel-slowdebug-17.0.12.0.7-2.0.1.el9.aarch64.rpm6879b75c5b5b862b69f0c595117655b9-ol9_aarch64_codeready_builder
java-17-openjdk-fastdebug-17.0.12.0.7-2.0.1.el9.aarch64.rpmb6ee03c3bfa32082ab5697e2563f876f-ol9_aarch64_codeready_builder
java-17-openjdk-headless-17.0.12.0.7-2.0.1.el9.aarch64.rpmc686afea96e10cc242631e2ef3174da1-ol9_aarch64_appstream
java-17-openjdk-headless-fastdebug-17.0.12.0.7-2.0.1.el9.aarch64.rpme75a06aed01d42b1a93feefa58b013b6-ol9_aarch64_codeready_builder
java-17-openjdk-headless-slowdebug-17.0.12.0.7-2.0.1.el9.aarch64.rpmb320aaceb9fb90fa93bc5c62433ebb0b-ol9_aarch64_codeready_builder
java-17-openjdk-javadoc-17.0.12.0.7-2.0.1.el9.aarch64.rpm89be51888053222f114bc5cfa0f583f9-ol9_aarch64_appstream
java-17-openjdk-javadoc-zip-17.0.12.0.7-2.0.1.el9.aarch64.rpmfd384f9bd0ebe8a30614051259767b5f-ol9_aarch64_appstream
java-17-openjdk-jmods-17.0.12.0.7-2.0.1.el9.aarch64.rpm5987fc630d1ec11ae2da07d490382989-ol9_aarch64_appstream
java-17-openjdk-jmods-fastdebug-17.0.12.0.7-2.0.1.el9.aarch64.rpme623dd66fb5604bf76d3fc03ac3c2bbb-ol9_aarch64_codeready_builder
java-17-openjdk-jmods-slowdebug-17.0.12.0.7-2.0.1.el9.aarch64.rpm748fb2a92d88ef308d8fb75393f05a3e-ol9_aarch64_codeready_builder
java-17-openjdk-slowdebug-17.0.12.0.7-2.0.1.el9.aarch64.rpmbdbee4a0fb9069c0e4694f7cd029acc0-ol9_aarch64_codeready_builder
java-17-openjdk-src-17.0.12.0.7-2.0.1.el9.aarch64.rpma84b6aa1d83284da8cc669ec565ff364-ol9_aarch64_appstream
java-17-openjdk-src-fastdebug-17.0.12.0.7-2.0.1.el9.aarch64.rpm16d85cf5b69c6c468bf210c7f2f41298-ol9_aarch64_codeready_builder
java-17-openjdk-src-slowdebug-17.0.12.0.7-2.0.1.el9.aarch64.rpm77f7ffbafd3b0dad2302c7f9d8212a34-ol9_aarch64_codeready_builder
java-17-openjdk-static-libs-17.0.12.0.7-2.0.1.el9.aarch64.rpm679ae4335bf5c4d409eb5ae5decf59ff-ol9_aarch64_appstream
java-17-openjdk-static-libs-fastdebug-17.0.12.0.7-2.0.1.el9.aarch64.rpm0ed9e97c609288e2098e7bb88ab45ba8-ol9_aarch64_codeready_builder
java-17-openjdk-static-libs-slowdebug-17.0.12.0.7-2.0.1.el9.aarch64.rpma490c7f70aef41b892b4711f0ff77b8b-ol9_aarch64_codeready_builder
Oracle Linux 9 (x86_64) java-17-openjdk-17.0.12.0.7-2.0.1.el9.src.rpm8350fcdab36b233cac451a0bfa5a5b32-ol9_x86_64_appstream
java-17-openjdk-17.0.12.0.7-2.0.1.el9.src.rpm8350fcdab36b233cac451a0bfa5a5b32-ol9_x86_64_codeready_builder
java-17-openjdk-17.0.12.0.7-2.0.1.el9.x86_64.rpm92ad9f66f64aae03d8db6ab2587ba414-ol9_x86_64_appstream
java-17-openjdk-demo-17.0.12.0.7-2.0.1.el9.x86_64.rpm48daab7a65ee2a1baf59df9508b73758-ol9_x86_64_appstream
java-17-openjdk-demo-fastdebug-17.0.12.0.7-2.0.1.el9.x86_64.rpm29ee3f42342e380c334d4631be50807a-ol9_x86_64_codeready_builder
java-17-openjdk-demo-slowdebug-17.0.12.0.7-2.0.1.el9.x86_64.rpm15ef82e5df66ca33ff28cd6503ef5e59-ol9_x86_64_codeready_builder
java-17-openjdk-devel-17.0.12.0.7-2.0.1.el9.x86_64.rpmfaff36a9464b1b7f425013b129ffb24b-ol9_x86_64_appstream
java-17-openjdk-devel-fastdebug-17.0.12.0.7-2.0.1.el9.x86_64.rpm7c1fbb9732c3bdc67d6769149eb7315d-ol9_x86_64_codeready_builder
java-17-openjdk-devel-slowdebug-17.0.12.0.7-2.0.1.el9.x86_64.rpm908295dd232ee7354d77bc3af5e5103e-ol9_x86_64_codeready_builder
java-17-openjdk-fastdebug-17.0.12.0.7-2.0.1.el9.x86_64.rpm927c9e5eae76cf76741e5f087d9bf85b-ol9_x86_64_codeready_builder
java-17-openjdk-headless-17.0.12.0.7-2.0.1.el9.x86_64.rpm8ede02b5b282e0e706a9da968b658f87-ol9_x86_64_appstream
java-17-openjdk-headless-fastdebug-17.0.12.0.7-2.0.1.el9.x86_64.rpmb9729b681825777162f8e8aac1465003-ol9_x86_64_codeready_builder
java-17-openjdk-headless-slowdebug-17.0.12.0.7-2.0.1.el9.x86_64.rpm0b7d41abec2d372b6454c90d3f5de520-ol9_x86_64_codeready_builder
java-17-openjdk-javadoc-17.0.12.0.7-2.0.1.el9.x86_64.rpm797dd0ffd6806a9897ee7a9f115e5983-ol9_x86_64_appstream
java-17-openjdk-javadoc-zip-17.0.12.0.7-2.0.1.el9.x86_64.rpm57f853b656161297fe5fc64c6a63b560-ol9_x86_64_appstream
java-17-openjdk-jmods-17.0.12.0.7-2.0.1.el9.x86_64.rpm838c55d6c25c4c3134c195b31b389810-ol9_x86_64_appstream
java-17-openjdk-jmods-fastdebug-17.0.12.0.7-2.0.1.el9.x86_64.rpmf333c87c3bb785379d1b1cbbaa774ddd-ol9_x86_64_codeready_builder
java-17-openjdk-jmods-slowdebug-17.0.12.0.7-2.0.1.el9.x86_64.rpma4babc6d4a0184ad9a4d3bfd0572356c-ol9_x86_64_codeready_builder
java-17-openjdk-slowdebug-17.0.12.0.7-2.0.1.el9.x86_64.rpm5d0ab567f25aab72f3b48c41f1bb03de-ol9_x86_64_codeready_builder
java-17-openjdk-src-17.0.12.0.7-2.0.1.el9.x86_64.rpm10f8266f9019ef4116958ae5be48fadf-ol9_x86_64_appstream
java-17-openjdk-src-fastdebug-17.0.12.0.7-2.0.1.el9.x86_64.rpm54a153afa934fa08e90d9bc25eab2d78-ol9_x86_64_codeready_builder
java-17-openjdk-src-slowdebug-17.0.12.0.7-2.0.1.el9.x86_64.rpm9e9eaed46ceac19ef98ce6c6545b98ff-ol9_x86_64_codeready_builder
java-17-openjdk-static-libs-17.0.12.0.7-2.0.1.el9.x86_64.rpmce6164e5881e4bda521df55a41a0b0b4-ol9_x86_64_appstream
java-17-openjdk-static-libs-fastdebug-17.0.12.0.7-2.0.1.el9.x86_64.rpm17643ffc5d908927e43de0b805ef716e-ol9_x86_64_codeready_builder
java-17-openjdk-static-libs-slowdebug-17.0.12.0.7-2.0.1.el9.x86_64.rpme38056281b32e9690554ce01b2e2c75b-ol9_x86_64_codeready_builder


This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections:

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights