ELSA-2024-8116

ELSA-2024-8116 - java-1.8.0-openjdk security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2024-11-28

Description

[1:1.8.0.432.b06-1.0.1]
- Update to shenandoah8u432-b06 [Orabug: 37185223]
- Fixes CVE-2024-21208 CVE-2024-21210 CVE-2024-21217 CVE-2024-21235
- Removed patches
- 1001-orabug36904359-CVE-2024-21131-fix.patch
- 1002-orabug36904359-CVE-2024-21138-fix.patch
- 1003-orabug36904359-CVE-2024-21140-fix-part1.patch
- 1004-orabug36904359-CVE-2024-21140-fix-part2.patch
- 1005-orabug36904359-CVE-2024-21140-fix-part3.patch
- 1006-orabug36904359-CVE-2024-21144-fix.patch
- 1007-orabug36904359-CVE-2024-21145-fix.patch
- 1008-orabug36904359-CVE-2024-21147-fix.patch
- rh1648644-java_access_bridge_privileged_security.patch
- jdk8186464-rh1433262-zip64_failure.patch
- rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch
- jdk8199936-pr3533-enable_mstackrealign_on_x86_linux_as_well_as_x86_mac_os_x.patch
- pr2462-resolve_disabled_warnings_for_libunpack_and_the_unpack200_binary.patch
- Added following patches:
- jdk8186464-rh1433262-zip64_failure_ol7.patch
- rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel_ol7.patch
- jdk8199936-pr3533-enable_mstackrealign_on_x86_linux_as_well_as_x86_mac_os_x_ol7.patch
- pr2462-resolve_disabled_warnings_for_libunpack_and_the_unpack200_binary_ol7.patch

Related CVEs

CVE-2023-48161

CVE-2024-21210

CVE-2024-21208

CVE-2024-21217

CVE-2024-21235

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	java-1.8.0-openjdk-1.8.0.432.b06-1.0.1.el7_9.src.rpm	880637735955458dd75273c72740d27b	-	ol7_aarch64_latest
	java-1.8.0-openjdk-1.8.0.432.b06-1.0.1.el7_9.src.rpm	880637735955458dd75273c72740d27b	-	ol7_aarch64_optional_latest
	java-1.8.0-openjdk-1.8.0.432.b06-1.0.1.el7_9.src.rpm	880637735955458dd75273c72740d27b	-	ol7_aarch64_u9_patch
	java-1.8.0-openjdk-1.8.0.432.b06-1.0.1.el7_9.aarch64.rpm	6e649b4a61dc6127892ff6b0437fbe5f	-	ol7_aarch64_latest
	java-1.8.0-openjdk-1.8.0.432.b06-1.0.1.el7_9.aarch64.rpm	6e649b4a61dc6127892ff6b0437fbe5f	-	ol7_aarch64_u9_patch
	java-1.8.0-openjdk-accessibility-1.8.0.432.b06-1.0.1.el7_9.aarch64.rpm	8799b9c5888671ec410e8b4bc131c919	-	ol7_aarch64_optional_latest
	java-1.8.0-openjdk-demo-1.8.0.432.b06-1.0.1.el7_9.aarch64.rpm	c7847b6be79f484a2b2b09821129c63a	-	ol7_aarch64_optional_latest
	java-1.8.0-openjdk-devel-1.8.0.432.b06-1.0.1.el7_9.aarch64.rpm	af92532bf2bcc59eaecef6062ab57a8b	-	ol7_aarch64_latest
	java-1.8.0-openjdk-devel-1.8.0.432.b06-1.0.1.el7_9.aarch64.rpm	af92532bf2bcc59eaecef6062ab57a8b	-	ol7_aarch64_u9_patch
	java-1.8.0-openjdk-headless-1.8.0.432.b06-1.0.1.el7_9.aarch64.rpm	f4d16ee243f73fc323f06c8049f3f1da	-	ol7_aarch64_latest
	java-1.8.0-openjdk-headless-1.8.0.432.b06-1.0.1.el7_9.aarch64.rpm	f4d16ee243f73fc323f06c8049f3f1da	-	ol7_aarch64_u9_patch
	java-1.8.0-openjdk-javadoc-1.8.0.432.b06-1.0.1.el7_9.noarch.rpm	8418cd5457f92bcfbaffbb1cf34d28a1	-	ol7_aarch64_optional_latest
	java-1.8.0-openjdk-javadoc-zip-1.8.0.432.b06-1.0.1.el7_9.noarch.rpm	03ea6298101d9d0c3a48e8002a410bc7	-	ol7_aarch64_optional_latest
	java-1.8.0-openjdk-src-1.8.0.432.b06-1.0.1.el7_9.aarch64.rpm	c881777c80c639b03bc69967ccddff94	-	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	java-1.8.0-openjdk-1.8.0.432.b06-1.0.1.el7_9.src.rpm	880637735955458dd75273c72740d27b	-	ol7_x86_64_latest
	java-1.8.0-openjdk-1.8.0.432.b06-1.0.1.el7_9.src.rpm	880637735955458dd75273c72740d27b	-	ol7_x86_64_optional_latest
	java-1.8.0-openjdk-1.8.0.432.b06-1.0.1.el7_9.src.rpm	880637735955458dd75273c72740d27b	-	ol7_x86_64_u9_patch
	java-1.8.0-openjdk-1.8.0.432.b06-1.0.1.el7_9.i686.rpm	f3472c55fc7cc58d6ff5a59e7d79b60d	-	ol7_x86_64_latest
	java-1.8.0-openjdk-1.8.0.432.b06-1.0.1.el7_9.i686.rpm	f3472c55fc7cc58d6ff5a59e7d79b60d	-	ol7_x86_64_u9_patch
	java-1.8.0-openjdk-1.8.0.432.b06-1.0.1.el7_9.x86_64.rpm	212ce9aa689811b3c2dc4650a3c8b8ac	-	ol7_x86_64_latest
	java-1.8.0-openjdk-1.8.0.432.b06-1.0.1.el7_9.x86_64.rpm	212ce9aa689811b3c2dc4650a3c8b8ac	-	ol7_x86_64_u9_patch
	java-1.8.0-openjdk-accessibility-1.8.0.432.b06-1.0.1.el7_9.i686.rpm	099bf9174735a6de8b036fc57090bf97	-	ol7_x86_64_optional_latest
	java-1.8.0-openjdk-accessibility-1.8.0.432.b06-1.0.1.el7_9.x86_64.rpm	0ad15cdac3fe88f368c693aeafbb1d89	-	ol7_x86_64_optional_latest
	java-1.8.0-openjdk-demo-1.8.0.432.b06-1.0.1.el7_9.i686.rpm	d5b56732f7ad91ede32bb645a2042786	-	ol7_x86_64_optional_latest
	java-1.8.0-openjdk-demo-1.8.0.432.b06-1.0.1.el7_9.x86_64.rpm	a5cc7d8bd2ebd413515216d5fb558972	-	ol7_x86_64_optional_latest
	java-1.8.0-openjdk-devel-1.8.0.432.b06-1.0.1.el7_9.i686.rpm	67920cbeb9c4b14184351213372811b6	-	ol7_x86_64_latest
	java-1.8.0-openjdk-devel-1.8.0.432.b06-1.0.1.el7_9.i686.rpm	67920cbeb9c4b14184351213372811b6	-	ol7_x86_64_u9_patch
	java-1.8.0-openjdk-devel-1.8.0.432.b06-1.0.1.el7_9.x86_64.rpm	5d15f6990e0ed866f462c9d41ddc5dc5	-	ol7_x86_64_latest
	java-1.8.0-openjdk-devel-1.8.0.432.b06-1.0.1.el7_9.x86_64.rpm	5d15f6990e0ed866f462c9d41ddc5dc5	-	ol7_x86_64_u9_patch
	java-1.8.0-openjdk-headless-1.8.0.432.b06-1.0.1.el7_9.i686.rpm	8aa4b4324356de68cac96af1b74a8f84	-	ol7_x86_64_latest
	java-1.8.0-openjdk-headless-1.8.0.432.b06-1.0.1.el7_9.i686.rpm	8aa4b4324356de68cac96af1b74a8f84	-	ol7_x86_64_u9_patch
	java-1.8.0-openjdk-headless-1.8.0.432.b06-1.0.1.el7_9.x86_64.rpm	394c5a6dcf1701d124688d3be75bd3a1	-	ol7_x86_64_latest
	java-1.8.0-openjdk-headless-1.8.0.432.b06-1.0.1.el7_9.x86_64.rpm	394c5a6dcf1701d124688d3be75bd3a1	-	ol7_x86_64_u9_patch
	java-1.8.0-openjdk-javadoc-1.8.0.432.b06-1.0.1.el7_9.noarch.rpm	8418cd5457f92bcfbaffbb1cf34d28a1	-	ol7_x86_64_optional_latest
	java-1.8.0-openjdk-javadoc-zip-1.8.0.432.b06-1.0.1.el7_9.noarch.rpm	03ea6298101d9d0c3a48e8002a410bc7	-	ol7_x86_64_optional_latest
	java-1.8.0-openjdk-src-1.8.0.432.b06-1.0.1.el7_9.i686.rpm	0d9c09560ac40c3cd68d7824395d2fb0	-	ol7_x86_64_optional_latest
	java-1.8.0-openjdk-src-1.8.0.432.b06-1.0.1.el7_9.x86_64.rpm	133bd2ecaed62225ba9d76ac81f29fab	-	ol7_x86_64_optional_latest