Summary
The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.
Security Fix(es):
* OpenJDK: segmentation fault in ciMethodBlocks (CVE-2022-40433)
* OpenJDK: IOR deserialization issue in CORBA (8303384) (CVE-2023-22067)
* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 8u382 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 8u392, increases it to 16 MB. (AlmaLinux-13635)
* The /usr/bin/jfr alternative is now owned by the java-1.8.0-openjdk package (AlmaLinux-13641)
Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | java-1.8.0-openjdk | 1:1.8.0.392.b08-4.el8 |
| AlmaLinux · 8 | java-1.8.0-openjdk-accessibility | 1:1.8.0.392.b08-4.el8 |
| AlmaLinux · 8 | java-1.8.0-openjdk-accessibility-fastdebug | 1:1.8.0.392.b08-4.el8 |
| AlmaLinux · 8 | java-1.8.0-openjdk-accessibility-slowdebug | 1:1.8.0.392.b08-4.el8 |
| AlmaLinux · 8 | java-1.8.0-openjdk-demo | 1:1.8.0.392.b08-4.el8 |
| AlmaLinux · 8 | java-1.8.0-openjdk-demo-fastdebug | 1:1.8.0.392.b08-4.el8 |
| AlmaLinux · 8 | java-1.8.0-openjdk-demo-slowdebug | 1:1.8.0.392.b08-4.el8 |
| AlmaLinux · 8 | java-1.8.0-openjdk-devel | 1:1.8.0.392.b08-4.el8 |
| AlmaLinux · 8 | java-1.8.0-openjdk-devel-fastdebug | 1:1.8.0.392.b08-4.el8 |
| AlmaLinux · 8 | java-1.8.0-openjdk-devel-slowdebug | 1:1.8.0.392.b08-4.el8 |
| AlmaLinux · 8 | java-1.8.0-openjdk-fastdebug | 1:1.8.0.392.b08-4.el8 |
| AlmaLinux · 8 | java-1.8.0-openjdk-headless | 1:1.8.0.392.b08-4.el8 |
| AlmaLinux · 8 | java-1.8.0-openjdk-headless-fastdebug | 1:1.8.0.392.b08-4.el8 |
| AlmaLinux · 8 | java-1.8.0-openjdk-headless-slowdebug | 1:1.8.0.392.b08-4.el8 |
| AlmaLinux · 8 | java-1.8.0-openjdk-javadoc | 1:1.8.0.392.b08-4.el8 |
| AlmaLinux · 8 | java-1.8.0-openjdk-javadoc-zip | 1:1.8.0.392.b08-4.el8 |
| AlmaLinux · 8 | java-1.8.0-openjdk-slowdebug | 1:1.8.0.392.b08-4.el8 |
| AlmaLinux · 8 | java-1.8.0-openjdk-src | 1:1.8.0.392.b08-4.el8 |
| AlmaLinux · 8 | java-1.8.0-openjdk-src-fastdebug | 1:1.8.0.392.b08-4.el8 |
| AlmaLinux · 8 | java-1.8.0-openjdk-src-slowdebug | 1:1.8.0.392.b08-4.el8 |
Vulnerabilities 3
-
Medium 5.3
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Su…
-
Medium 5.3
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
Unscored —CVE-2022-40433 Rejected
** REJECT ** This CVE ID has been rejected by its CNA as it was not a security issue.
References
-
report
https://access.redhat.com/security/cve/CVE-2022-40433
-
report
https://access.redhat.com/security/cve/CVE-2023-22067
-
report
https://access.redhat.com/security/cve/CVE-2023-22081
-
report
https://bugzilla.redhat.com/2237709
-
report
https://bugzilla.redhat.com/2243627
-
report
https://bugzilla.redhat.com/2243637
-
advisory
https://errata.almalinux.org/8/ALSA-2023-5731.html