ELSA-2020-1509 — Important: java-11-openjdk security update (Oracle Linux 7)

Summary

[1:11.0.7.10-4.0.1]
- link atomic for ix86 build

[1:11.0.7.10-4]
- Add JDK-8228407 backport to resolve crashes during verification.
- Resolves: rhbz#1810557

[1:11.0.7.10-3]
- Amend release notes, removing issue actually fixed in 11.0.6.
- Resolves: rhbz#1810557

[1:11.0.7.10-2]
- Add release notes.
- Resolves: rhbz#1810557

[1:11.0.7.10-1]
- Make use of --with-extra-asflags introduced in jdk-11.0.6+1.
- Resolves: rhbz#1810557

[1:11.0.7.10-0]
- Update to shenandoah-jdk-11.0.7+10 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1810557

[1:11.0.7.9-0.0.ea]
- Update to shenandoah-jdk-11.0.7+9 (EA)
- Resolves: rhbz#1810557

[1:11.0.7.8-0.0.ea]
- Update to shenandoah-jdk-11.0.7+8 (EA)
- Resolves: rhbz#1810557

[1:11.0.7.7-0.0.ea]
- Update to shenandoah-jdk-11.0.7+7 (EA)
- Resolves: rhbz#1810557

[1:11.0.7.6-0.0.ea]
- Update to shenandoah-jdk-11.0.7+6 (EA)
- Resolves: rhbz#1810557

[1:11.0.7.5-0.0.ea]
- Update to shenandoah-jdk-11.0.7+5 (EA)
- Resolves: rhbz#1810557

[1:11.0.7.4-0.0.ea]
- Update to shenandoah-jdk-11.0.7+4 (EA)
- Resolves: rhbz#1810557

[1:11.0.7.3-0.0.ea]
- Update to shenandoah-jdk-11.0.7+3 (EA)
- Resolves: rhbz#1810557

[1:11.0.7.2-0.0.ea]
- Update to shenandoah-jdk-11.0.7+2 (EA)
- Resolves: rhbz#1810557

[1:11.0.7.1-0.0.ea]
- Update to shenandoah-jdk-11.0.7+1 (EA)
- Switch to EA mode for 11.0.7 pre-release builds.
- Drop JDK-8236039 backport now applied upstream.
- Resolves: rhbz#1810557

Fixed packages 16

Release	Package	Fixed in
Oracle Linux · 7	java-11-openjdk	1:11.0.7.10-4.0.1.el7_8
Oracle Linux · 7	java-11-openjdk-debug	1:11.0.7.10-4.0.1.el7_8
Oracle Linux · 7	java-11-openjdk-demo	1:11.0.7.10-4.0.1.el7_8
Oracle Linux · 7	java-11-openjdk-demo-debug	1:11.0.7.10-4.0.1.el7_8
Oracle Linux · 7	java-11-openjdk-devel	1:11.0.7.10-4.0.1.el7_8
Oracle Linux · 7	java-11-openjdk-devel-debug	1:11.0.7.10-4.0.1.el7_8
Oracle Linux · 7	java-11-openjdk-headless	1:11.0.7.10-4.0.1.el7_8
Oracle Linux · 7	java-11-openjdk-headless-debug	1:11.0.7.10-4.0.1.el7_8
Oracle Linux · 7	java-11-openjdk-javadoc	1:11.0.7.10-4.0.1.el7_8
Oracle Linux · 7	java-11-openjdk-javadoc-debug	1:11.0.7.10-4.0.1.el7_8
Oracle Linux · 7	java-11-openjdk-javadoc-zip	1:11.0.7.10-4.0.1.el7_8
Oracle Linux · 7	java-11-openjdk-javadoc-zip-debug	1:11.0.7.10-4.0.1.el7_8
Oracle Linux · 7	java-11-openjdk-jmods	1:11.0.7.10-4.0.1.el7_8
Oracle Linux · 7	java-11-openjdk-jmods-debug	1:11.0.7.10-4.0.1.el7_8
Oracle Linux · 7	java-11-openjdk-src	1:11.0.7.10-4.0.1.el7_8
Oracle Linux · 7	java-11-openjdk-src-debug	1:11.0.7.10-4.0.1.el7_8

Vulnerabilities 13

High 8.3

CVE-2020-2803

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 15, 2020
High 8.3

CVE-2020-2805

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 15, 2020
High 7.5

CVE-2020-2816

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java…

Oracle Java openjdk-lts openjdk11 Debian Ubuntu Alpine Wolfi

Apr 15, 2020
Medium 5.3

CVE-2020-2781

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 15, 2020
Medium 5.3

CVE-2020-2830

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions t…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 15, 2020
Medium 4.8

CVE-2020-2767

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java…

Oracle Java openjdk-lts openjdk11 Debian Ubuntu Alpine Wolfi

Apr 15, 2020
Medium 4.8

CVE-2020-2800

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supporte…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 15, 2020
Low 3.7

CVE-2020-2754

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions tha…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 15, 2020
Low 3.7

CVE-2020-2755

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions tha…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 15, 2020
Low 3.7

CVE-2020-2756

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 15, 2020
Low 3.7

CVE-2020-2757

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 15, 2020
Low 3.7

CVE-2020-2773

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 15, 2020
Low 3.7

CVE-2020-2778

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java…

Oracle Java openjdk-lts openjdk11 Debian Ubuntu Alpine Wolfi

Apr 15, 2020

Important: java-11-openjdk security update (Oracle Linux 7)

Summary

Fixed packages 16

Vulnerabilities 13

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions t…

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supporte…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions tha…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions tha…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that…

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java…