Описание
ELSA-2023-6738: java-21-openjdk security and bug fix update (MODERATE)
[1:21.0.1.0.12-2.0.1]
- Add Oracle vendor bug URL
[1:21.0.1.0.12-2]
- Switch to using portable binaries built on RHEL 7
- Sync the copy of the portable specfile with the RHEL 7 version
- Related: RHEL-12997
[1:21.0.1.0.12-1]
- Update to jdk-21.0.1.0+12 (GA)
- Update release notes to 21.0.1.0+12
- Sync the copy of the portable specfile with the latest update
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise bundled versions with 21u sources (FreeType, LCMS, HarfBuzz, libpng)
- Sync generate_tarball.sh with 11u & 17u version
- Update bug URL for RHEL to point to the Red Hat customer portal
- Fix upstream release URL for OpenJDK source
- Following JDK-8005165, class data sharing can be enabled on all JIT architectures
- Use tapsets from the misc tarball
- Introduce 'prelease' for the portable release versioning, to handle EA builds
- Make sure root installation directory is created first
- Use in-place substitution for all but the first of the tapset changes
- Synchronise runtime and buildtime tzdata requirements
- Remove ghosts for binaries not in java-21-openjdk (pack200, rmid, unpack200)
- Add missing jfr, jpackage and jwebserver alternative ghosts
- Move jcmd to the headless package
- Revert alt-java binary location to being within the JDK tree
- Resolves: RHEL-12997
- Resolves: RHEL-14954
- Resolves: RHEL-14962
- Resolves: RHEL-14958
- Related: RHEL-14946
- Resolves: RHEL-14959
- Resolves: RHEL-14948
[1:21.0.1.0.12-1]
- Exclude classes_nocoops.jsa on i686 and arm32
- Related: RHEL-14946
[1:21.0.1.0.12-1]
- Fix packaging of CDS archives
- Resolves: RHEL-14946
[1:21.0.0.0.35-2]
- Update documentation (README.md)
- Replace alt-java patch with a binary separate from the JDK
- Drop stale patches that are of little use any more:
-
- nss.cfg has been disabled since early PKCS11 work and long superseded by FIPS work
-
- No accessibility subpackage to warrant RH1648242 & RH1648644 patches any more
-
- No use of system libjpeg turbo to warrant RH649512 patch any more
- Replace RH1684077 pcsc-lite-libs patch with better JDK-8009550 fix being upstreamed
- Adapt alt-java test to new binary where there is always a set_speculation function
- Related: RHEL-12997
[1:21.0.0.0.35-1]
- Update to jdk-21.0.0+35
- Update system crypto policy & FIPS patch from new fips-21u tree
- Update generate_tarball.sh to sync with upstream vanilla script inc. no more ECC removal
- Drop fakefeaturever now it is no longer needed
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Use upstream release URL for OpenJDK source
- Re-enable tzdata tests now we are on the latest JDK and things are back in sync
- Install jaxp.properties introduced by JDK-8303530
- Install lible.so introduced by JDK-8306983
- Related: RHEL-12997
[1:21.0.0.0.35-1]
- Replace smoke test files used in the staticlibs test, as fdlibm was removed by JDK-8303798
- Related: RHEL-12997
[1:20.0.0.0.36-1]
- Update to jdk-20.0.2+9
- Update release notes to 20.0.2+9
- Update system crypto policy & FIPS patch from new fips-20u tree
- Update generate_tarball.sh ICEDTEA_VERSION
- Update CLDR reference data following update to 42 (Rocky Mountain-Normalzeit => Rocky-Mountain-Normalzeit)
- Related: RHEL-12997
[1:20.0.0.0.36-1]
- Dropped JDK-8295447, JDK-8296239 & JDK-8299439 patches now upstream
- Adapted rh1750419-redhat_alt_java.patch
- Related: RHEL-12997
[1:19.0.1.0.10-1]
- Update to jdk-19.0.2 release
- Update release notes to 19.0.2
- Rebase FIPS patches from fips-19u branch
- Remove references to sample directory removed by JDK-8284999
- Add local patch JDK-8295447 (javac NPE) which was accepted into 19u upstream but not in the GA tag
- Add local patches for JDK-8296239 & JDK-8299439 (Croatia Euro update) which are present in 8u, 11u & 17u releases
- Related: RHEL-12997
[1:18.0.2.0.9-1]
- Update to jdk-18.0.2 release
- Support JVM variant zero following JDK-8273494 no longer installing Zero's libjvm.so in the server directory
- Rebase FIPS patches from fips-18u branch
- Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
- Drop now unused fresh_libjvm, build_hotspot_first, bootjdk and buildjdkver variables, as we don't build a JDK here
- Drop tzdata patches added for 17.0.7 which will eventually appear in the upstream tarball when we reach OpenJDK 21
- Disable tzdata tests until we are on the latest JDK and things are back in sync
- Use empty nss.fips.cfg until it is again available via the FIPS patch
- Related: RHEL-12997
[1:18.0.2.0.9-1]
- Update to ea version of jdk18
- Add new slave jwebserver and corresponding manpage
- Adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch
- Related: RHEL-12997
[1:18.0.2.0.9-1]
- Add javaver- and origin-specific javadoc and javadoczip alternatives.
- Related: RHEL-12997
[1:17.0.7.0.7-4]
- Add files missed by centpkg import.
- Related: rhbz#2192748
[1:17.0.7.0.7-3]
- Create java-21-openjdk package based on java-17-openjdk
- Related: rhbz#2192748
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
java-21-openjdk
21.0.1.0.12-2.0.1.el9
java-21-openjdk-demo
21.0.1.0.12-2.0.1.el9
java-21-openjdk-demo-fastdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-demo-slowdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-devel
21.0.1.0.12-2.0.1.el9
java-21-openjdk-devel-fastdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-devel-slowdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-fastdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-headless
21.0.1.0.12-2.0.1.el9
java-21-openjdk-headless-fastdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-headless-slowdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-javadoc
21.0.1.0.12-2.0.1.el9
java-21-openjdk-javadoc-zip
21.0.1.0.12-2.0.1.el9
java-21-openjdk-jmods
21.0.1.0.12-2.0.1.el9
java-21-openjdk-jmods-fastdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-jmods-slowdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-slowdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-src
21.0.1.0.12-2.0.1.el9
java-21-openjdk-src-fastdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-src-slowdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-static-libs
21.0.1.0.12-2.0.1.el9
java-21-openjdk-static-libs-fastdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-static-libs-slowdebug
21.0.1.0.12-2.0.1.el9
Oracle Linux x86_64
java-21-openjdk
21.0.1.0.12-2.0.1.el9
java-21-openjdk-demo
21.0.1.0.12-2.0.1.el9
java-21-openjdk-demo-fastdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-demo-slowdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-devel
21.0.1.0.12-2.0.1.el9
java-21-openjdk-devel-fastdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-devel-slowdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-fastdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-headless
21.0.1.0.12-2.0.1.el9
java-21-openjdk-headless-fastdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-headless-slowdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-javadoc
21.0.1.0.12-2.0.1.el9
java-21-openjdk-javadoc-zip
21.0.1.0.12-2.0.1.el9
java-21-openjdk-jmods
21.0.1.0.12-2.0.1.el9
java-21-openjdk-jmods-fastdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-jmods-slowdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-slowdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-src
21.0.1.0.12-2.0.1.el9
java-21-openjdk-src-fastdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-src-slowdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-static-libs
21.0.1.0.12-2.0.1.el9
java-21-openjdk-static-libs-fastdebug
21.0.1.0.12-2.0.1.el9
java-21-openjdk-static-libs-slowdebug
21.0.1.0.12-2.0.1.el9
Связанные CVE
Связанные уязвимости
ELSA-2023-6887: java-21-openjdk security and bug fix update (MODERATE)
ELSA-2023-5753: java-17-openjdk security and bug fix update (MODERATE)
ELSA-2023-5751: java-17-openjdk security and bug fix update (MODERATE)