Summary
[1:11.0.25.0.9-1.0.1]
- Update to jdk-11.0.25+9 (GA) [Orabug: 37178930]
- Fixes CVE-2024-21208 CVE-2024-21210 CVE-2024-21217 CVE-2024-21235
- Removed patches
- 1001-orabug36904359-CVE-2024-21138-fix.patch
- 1002-orabug36904359-CVE-2024-21138-fix.patch
- 1003-orabug36904359-CVE-2024-21140-fix-part1.patch
- 1004-orabug36904359-CVE-2024-21140-fix-part2.patch
- 1005-orabug36904359-CVE-2024-21144-fix.patch
- 1006-orabug36904359-CVE-2024-21145-fix.patch
- 1007-orabug36904359-CVE-2024-21147-fix.patch
[1:11.0.23.0.9-2.0.3]
- Fixes below CVE's
- CVE-2024-21131 Improve-UTF8-String-supports
- CVE-2024-21138 Better-symbol-storage
- Fixes malformed control flow openjdk bug8303466
- CVE-2024-21140 Improved-loop-handling
- CVE-2024-21144 Enhance-Pack-200-loading
- CVE-2024-21145 Improve-2D-image-handling
- CVE-2024-21147 Improve-array-management
[1:11.0.23.0.9-2.0.1]
- link atomic for ix86 build
[1:11.0.23.0.9-2]
- Fix 11.0.22 release date in NEWS
- Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds
[1:11.0.23.0.9-1]
- Update to jdk-11.0.23+9 (GA)
- Update release notes to 11.0.23+9
- Switch to GA mode for release
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Resolves: RHEL-30914
[1:11.0.23.0.1-0.1.ea]
- Update to jdk-11.0.23+1 (EA)
- Update release notes to 11.0.23+1
- Switch to EA mode
- Speed up PPC build by removing ppc64le --with-jobs=1 workaround
[1:11.0.22.0.7-1]
- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966
[1:11.0.22.0.6-0.1.ea]
- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031
[1:11.0.21.0.9-2]
- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
- Resolves: RHEL-19642
[1:11.0.21.0.9-1]
- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217
[1:11.0.21.0.9-1]
- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320
[1:11.0.20.1.1-1]
- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229
[1:11.0.20.0.8-1]
- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106
[1:11.0.20.0.7-0.1.ea]
- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106
[1:11.0.20.0.1-0.1.ea]
- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106
[1:11.0.19.0.7-1]
- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
[1:11.0.18.0.10-2]
- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111
[1:11.0.18.0.10-1]
- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192
[1:11.0.18.0.9-0.2.ea]
- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192
[1:11.0.18.0.1-0.1.ea]
- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192
[1:11.0.17.0.8-2]
- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-829222
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | java-11-openjdk | 1:11.0.25.0.9-1.0.1.el7_9 |
| Oracle Linux · 7 | java-11-openjdk-demo | 1:11.0.25.0.9-1.0.1.el7_9 |
| Oracle Linux · 7 | java-11-openjdk-devel | 1:11.0.25.0.9-1.0.1.el7_9 |
| Oracle Linux · 7 | java-11-openjdk-headless | 1:11.0.25.0.9-1.0.1.el7_9 |
| Oracle Linux · 7 | java-11-openjdk-javadoc | 1:11.0.25.0.9-1.0.1.el7_9 |
| Oracle Linux · 7 | java-11-openjdk-javadoc-zip | 1:11.0.25.0.9-1.0.1.el7_9 |
| Oracle Linux · 7 | java-11-openjdk-jmods | 1:11.0.25.0.9-1.0.1.el7_9 |
| Oracle Linux · 7 | java-11-openjdk-src | 1:11.0.25.0.9-1.0.1.el7_9 |
| Oracle Linux · 7 | java-11-openjdk-static-libs | 1:11.0.25.0.9-1.0.1.el7_9 |
Vulnerabilities 5
-
Medium 4.8
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
Low 3.7
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
Low 3.7
Vulnerability in Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8…
-
Low 3.7
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
Unscored —
Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information …