Skip to content
OpenAdvisories
High ELSA-2020-0202 7 CVEs

Important: java-1.8.0-openjdk security update (Oracle Linux 8)

Published Jan 22, 2020 · Updated Jan 22, 2020

Summary

[1:1.8.0.242.b08-0]
- Update to aarch64-shenandoah-jdk8u242-b08.
- Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions.
- Resolves: rhbz#1785753

[1:1.8.0.242.b07-1]
- Add backports of JDK-8031111 & JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753

[1:1.8.0.242.b07-0]
- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753

[1:1.8.0.242.b05-0.1.ea]
- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753

[1:1.8.0.242.b01-0.0.ea]
- Update to aarch64-shenandoah-jdk8u242-b01.
- Switch to EA mode.
- Resolves: rhbz#1785753

[1:1.8.0.232.b09-4]
- Revert SSBD removal for now, until appropriate messaging has been decided.
- Resolves: rhbz#1785753

[1:1.8.0.232.b09-3]
- Remove CVE-2018-3639 mitigation due to performance regression and
OpenJDK position on speculative execution vulnerabilities.
https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
- Resolves: rhbz#1785753

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 8 java-1.8.0-openjdk 1:1.8.0.242.b08-0.el8_1
Oracle Linux · 8 java-1.8.0-openjdk-accessibility 1:1.8.0.242.b08-0.el8_1
Oracle Linux · 8 java-1.8.0-openjdk-demo 1:1.8.0.242.b08-0.el8_1
Oracle Linux · 8 java-1.8.0-openjdk-devel 1:1.8.0.242.b08-0.el8_1
Oracle Linux · 8 java-1.8.0-openjdk-headless 1:1.8.0.242.b08-0.el8_1
Oracle Linux · 8 java-1.8.0-openjdk-javadoc 1:1.8.0.242.b08-0.el8_1
Oracle Linux · 8 java-1.8.0-openjdk-javadoc-zip 1:1.8.0.242.b08-0.el8_1
Oracle Linux · 8 java-1.8.0-openjdk-src 1:1.8.0.242.b08-0.el8_1

Vulnerabilities 7