Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2024-8120

Опубликовано: 28 нояб. 2024
Источник: oracle-oval
Платформа: Oracle Linux 7

Описание

ELSA-2024-8120: java-11-openjdk security update (MODERATE)

[1:11.0.25.0.9-1.0.1]

  • Update to jdk-11.0.25+9 (GA) [Orabug: 37178930]
  • Fixes CVE-2024-21208 CVE-2024-21210 CVE-2024-21217 CVE-2024-21235
  • Removed patches
  • 1001-orabug36904359-CVE-2024-21138-fix.patch
  • 1002-orabug36904359-CVE-2024-21138-fix.patch
  • 1003-orabug36904359-CVE-2024-21140-fix-part1.patch
  • 1004-orabug36904359-CVE-2024-21140-fix-part2.patch
  • 1005-orabug36904359-CVE-2024-21144-fix.patch
  • 1006-orabug36904359-CVE-2024-21145-fix.patch
  • 1007-orabug36904359-CVE-2024-21147-fix.patch

[1:11.0.23.0.9-2.0.3]

  • Fixes below CVE's
  • CVE-2024-21131 Improve-UTF8-String-supports
  • CVE-2024-21138 Better-symbol-storage
  • Fixes malformed control flow openjdk bug8303466
  • CVE-2024-21140 Improved-loop-handling
  • CVE-2024-21144 Enhance-Pack-200-loading
  • CVE-2024-21145 Improve-2D-image-handling
  • CVE-2024-21147 Improve-array-management

[1:11.0.23.0.9-2.0.1]

  • link atomic for ix86 build

[1:11.0.23.0.9-2]

  • Fix 11.0.22 release date in NEWS
  • Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds

[1:11.0.23.0.9-1]

  • Update to jdk-11.0.23+9 (GA)
  • Update release notes to 11.0.23+9
  • Switch to GA mode for release
  • Require tzdata 2024a due to upstream inclusion of JDK-8322725
  • Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  • ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  • Resolves: RHEL-30914

[1:11.0.23.0.1-0.1.ea]

  • Update to jdk-11.0.23+1 (EA)
  • Update release notes to 11.0.23+1
  • Switch to EA mode
  • Speed up PPC build by removing ppc64le --with-jobs=1 workaround

[1:11.0.22.0.7-1]

  • Update to jdk-11.0.22+7 (GA)
  • Update release notes to 11.0.22+7
  • Switch to GA mode for release
  • ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  • Resolves: RHEL-20966

[1:11.0.22.0.6-0.1.ea]

  • Update to jdk-11.0.22+6 (EA)
  • Update release notes to 11.0.22+6
  • Switch to EA mode
  • Drop local copy of JDK-8312489 which is now included upstream
  • Resolves: RHEL-21031

[1:11.0.21.0.9-2]

  • Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
  • Resolves: RHEL-19642

[1:11.0.21.0.9-1]

  • Update to jdk-11.0.21+9 (GA)
  • Update release notes to 11.0.21+9
  • Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
  • Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  • Update bug URL for RHEL to point to the Red Hat customer portal
  • Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  • Apply all patches using -p1
  • Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
  • Add missing JFR alternative ghost
  • Move jcmd to the headless package
  • Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
  • Disable the serviceability agent on Zero architectures even when the architecture itself is supported
  • ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  • Resolves: RHEL-12217
  • Resolves: RHEL-12910
  • Resolves: RHEL-12913
  • Resolves: RHEL-11320
  • Resolves: RHEL-13227
  • Resolves: RHEL-13217

[1:11.0.21.0.9-1]

  • For non debug subpackages, ghosted all alternatives (rhbz1649776)
  • For non system JDKs, if-outed versionless provides.
  • Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
  • Related: RHEL-11320

[1:11.0.20.1.1-1]

  • Update to jdk-11.0.20.1+1 (GA)
  • Update release notes to 11.0.20.1+1
  • Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  • Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  • Update openjdk_news script to specify subdirectory last
  • Add missing discover_trees script required by openjdk_news
  • Synchronise runtime and buildtime tzdata requirements
  • Update README.md to match the version in later RHEL releases
  • Resolves: rhbz#2236229

[1:11.0.20.0.8-1]

  • Update to jdk-11.0.20.0+8 (GA)
  • Update release notes to 11.0.20.0+8
  • Switch to GA mode for release
  • ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  • Resolves: rhbz#2221106

[1:11.0.20.0.7-0.1.ea]

  • Update to jdk-11.0.20+7 (EA)
  • Update release notes to 11.0.20+7
  • Related: rhbz#2221106

[1:11.0.20.0.1-0.1.ea]

  • Update to jdk-11.0.20+1 (EA)
  • Update release notes to 11.0.20+1
  • Switch to EA mode
  • Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  • Add missing Swing release note
  • Related: rhbz#2221106

[1:11.0.19.0.7-1]

  • Update to jdk-11.0.19.0+7
  • Update release notes to 11.0.19.0+7
  • Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  • Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  • Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  • Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  • Rebase RH1750419 alt-java patch against 11.0.19+6
  • ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  • Resolves: rhbz#2185182

[1:11.0.18.0.10-2]

  • Add missing release note for JDK-8295687
  • Resolves: rhbz#2160111

[1:11.0.18.0.10-1]

  • Update to jdk-11.0.18+10 (GA)
  • Update release notes to 11.0.18+10
  • Switch to GA mode for release
  • ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
  • Related: rhbz#2150192

[1:11.0.18.0.9-0.2.ea]

  • Update to jdk-11.0.18+9
  • Update release notes to 11.0.18+9
  • Drop local copy of JDK-8293834 now this is upstream
  • Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  • Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  • Resolves: rhbz#2150192

[1:11.0.18.0.1-0.1.ea]

  • Update to jdk-11.0.18+1
  • Update release notes to 11.0.18+1
  • Switch to EA mode for 11.0.18 pre-release builds.
  • Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
  • Related: rhbz#2150192

[1:11.0.17.0.8-2]

  • Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  • Update CLDR data with Europe/Kyiv (JDK-8293834)
  • Drop JDK-8292223 patch which we found to be unnecessary
  • Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  • Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
  • Related: rhbz#2133695

[1:11.0.17.0.8-1]

  • Update to jdk-11.0.17+8 (GA)
  • Update release notes to 11.0.17+8
  • Switch to GA mode for release
  • Resolves: rhbz#2133695

[1:11.0.17.0.7-0.1.ea]

  • Update to jdk-11.0.17+7
  • Update release notes to 11.0.17+7
  • Resolves: rhbz#2130373

[1:11.0.17.0.1-0.1.ea]

  • Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
  • Related: rhbz#2130373

[1:11.0.17.0.1-0.1.ea]

  • Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
  • Related: rhbz#2130373

[1:11.0.17.0.1-0.1.ea]

  • Update to jdk-11.0.17+1
  • Update release notes to 11.0.17+1
  • Switch to EA mode for 11.0.17 pre-release builds.
  • Related: rhbz#2130373

[1:11.0.16.1.1-1]

  • Update to jdk-11.0.16.1+1
  • Update release notes to 11.0.16.1+1
  • Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  • Add test to ensure timezones can be translated
  • Resolves: rhbz#2119512

[1:11.0.16.0.8-1]

  • Update to jdk-11.0.16+8
  • Update release notes to 11.0.16+8
  • Use same tarball naming style as java-17-openjdk and java-latest-openjdk
  • Drop JDK-8284920 patch now upstreamed
  • Print release file during build, which should now include a correct SOURCE value from .src-rev
  • Update tarball script with IcedTea GitHub URL and .src-rev generation
  • Use 'git apply' with patches in the tarball script to allow binary diffs
  • Include script to generate bug list for release notes
  • Update tzdata requirement to 2022a to match JDK-8283350
  • Make use of the vendor version string to store our version & release rather than an upstream release date
  • Explicitly require crypto-policies during build and runtime for system security properties
  • Resolves: rhbz#2106510

[1:11.0.16.0.8-1]

  • Add additional patch during tarball generation to align tests with ECC changes
  • Related: rhbz#2106510

[1:11.0.15.0.9-2]

  • Add JDK-8284920 fix for XPath regression
  • Related: rhbz#2073422

[1:11.0.15.0.9-2]

  • Remove security items from release notes that were only in 17u and N/A for 11u
  • Related: rhbz#2073422

[1:11.0.15.0.9-1]

  • Update to jdk-11.0.15.0+9
  • Update release notes to 11.0.15.0+9
  • Switch to GA mode for release
  • ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
  • Resolves: rhbz#2073422

[1:11.0.15.0.8-0.1.ea]

  • Update to jdk-11.0.15.0+8
  • Update release notes to 11.0.15.0+8
  • Resolves: rhbz#2047531

[1:11.0.15.0.1-0.1.ea]

  • Update to jdk-11.0.15.0+1
  • Update release notes to 11.0.15.0+1
  • Switch to EA mode for 11.0.15 pre-release builds.
  • Related: rhbz#2047531

[1:11.0.14.1.1-1]

  • Update to jdk-11.0.14.1+1
  • Update release notes to 11.0.14.1+1
  • Resolves: rhbz#2052805

[1:11.0.14.0.9-1]

  • Update to jdk-11.0.14.0+9
  • Update release notes to 11.0.14.0+9
  • Switch to GA mode for final release.
  • This tarball is embargoed until 2022-01-18 @ 1pm PT.
  • Resolves: rhbz#2039366

[1:11.0.14.0.8-0.1.ea]

  • Update to jdk-11.0.14.0+8
  • Update release notes to 11.0.14.0+8
  • Switch to EA mode for 11.0.14 pre-release builds.
  • Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
  • Rename blacklisted.certs to blocked.certs following JDK-8253866
  • Resolves: rhbz#2022810

[1:11.0.14.0.8-0.1.ea]

  • Replaced hardcoded 11 by featurever where appropriate
  • Fixed comment of for slowdebug to correct any debug
  • Related: rhbz#2022810

[1:11.0.13.0.8-1]

  • Revert addition of libharfbuzz.so after its removal by JDK-8255790
  • Resolves: rhbz#2012332

[1:11.0.13.0.8-1]

  • Update to jdk-11.0.12.0+8
  • Update release notes to 11.0.12.0+8
  • Switch to GA mode for final release.
  • This tarball is embargoed until 2021-10-19 @ 1pm PT.
  • Resolves: rhbz#2012332

[1:11.0.13.0.7-0.1.ea]

  • Update to jdk-11.0.13.0+7
  • Update release notes to 11.0.13.0+7
  • Resolves: rhbz#1999936

[1:11.0.13.0.1-0.1.ea]

  • Update to jdk-11.0.13.0+1
  • Update release notes to 11.0.13.0+1
  • Update tarball generation script to use git following OpenJDK 11u's move to github
  • Switch to EA mode for 11.0.13 pre-release builds.
  • Remove non-Free test from source tarball.
  • Related: rhbz#1999936

[1:11.0.12.0.7-4]

  • Reduce disk footprint by removing build artifacts by default.
  • Related: rhbz#1999936

[1:11.0.12.0.7-3]

  • Restructure the build so a minimal initial build is then used for the final build (with docs)
  • This reduces pressure on the system JDK and ensures the JDK being built can do a full build
  • Related: rhbz#1999936

[1:11.0.12.0.7-2]

  • Don't package lib/client and lib/client/classes.jsa which don't exist.
  • Resolves: rhbz#1698873

[1:11.0.12.0.7-1]

  • Minor cosmetic improvements to make spec more comparable between variants
  • Related: rhbz#1999936

[1:11.0.12.0.7-0]

  • Update to jdk-11.0.12.0+7
  • Update release notes to 11.0.12.0+7
  • Switch to GA mode for final release.
  • This tarball is embargoed until 2021-07-20 @ 1pm PT.
  • Resolves: rhbz#1972395

[1:11.0.12.0.6-0.0.ea]

  • Update to jdk-11.0.12.0+6
  • Update release notes to 11.0.12.0+6
  • Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
  • Resolves: rhbz#1967811

[1:11.0.12.0.4-0.0.ea]

  • Update to jdk-11.0.12.0+4
  • Update release notes to 11.0.12.0+4
  • Correct bug ID JDK-8264846 to intended ID of JDK-8264848
  • Resolves: rhbz#1967811

[1:11.0.12.0.3-0.0.ea]

  • Update to jdk-11.0.12.0+3
  • Update release notes to 11.0.12.0+3
  • Resolves: rhbz#1967811

[1:11.0.12.0.2-0.0.ea]

  • Update to jdk-11.0.12.0+2
  • Update release notes to 11.0.12.0+2
  • Resolves: rhbz#1967811

[1:11.0.12.0.1-0.0.ea]

  • Update to jdk-11.0.12.0+1
  • Update release notes to 11.0.12.0+1
  • Switch to EA mode for 11.0.12 pre-release builds.
  • Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
  • Remove local JDK-8187450 backport as now included upstream.
  • Resolves: rhbz#1967811

[1:11.0.11.0.9-1]

  • Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
  • Resolves: rhbz#1937736

[1:11.0.11.0.9-0]

  • Update to jdk-11.0.11.0+9
  • Update release notes to 11.0.11.0+9
  • Switch to GA mode for final release.
  • This tarball is embargoed until 2021-04-20 @ 1pm PT.
  • Resolves: rhbz#1940228

[1:11.0.11.0.7-0.0.ea]

  • Update to jdk-11.0.11.0+7
  • Update release notes to 11.0.11.0+7
  • Resolves: rhbz#1938082

[1:11.0.11.0.6-0.0.ea]

  • Update to jdk-11.0.11.0+6
  • Update release notes to 11.0.11.0+6
  • Resolves: rhbz#1938082

[1:11.0.11.0.5-0.0.ea]

  • Update to jdk-11.0.11.0+5
  • Update release notes to 11.0.11.0+5
  • Resolves: rhbz#1938082

[1:11.0.11.0.4-0.0.ea]

  • Update to jdk-11.0.11.0+4
  • Update release notes to 11.0.11.0+4
  • Resolves: rhbz#1938082

[1:11.0.11.0.3-0.1.ea]

  • Fix issue where CheckVendor.java test erroneously passes when it should fail.
  • Add proper quoting so '&' is not treated as a special character by the shell.
  • Resolves: rhbz#1938082

[1:11.0.11.0.3-0.0.ea]

  • Update to jdk-11.0.11.0+3
  • Update release notes to 11.0.11.0+3
  • Resolves: rhbz#1938082

[1:11.0.11.0.2-0.1.ea]

  • Debug builds need to find their documentation from the release build.
  • RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
  • Resolves: rhbz#1930527

[1:11.0.11.0.2-0.1.ea]

  • Perform static library build on a separate source tree with bundled image libraries
  • Make static library build optional
  • Based on initial work by Severin Gehwolf
  • Resolves: rhbz#1930527

[1:11.0.11.0.2-0.0.ea]

  • Update to jdk-11.0.11.0+2
  • Update release notes to 11.0.11.0+2
  • Remove local backport of JDK-8258836 which is now available upstream.
  • Resolves: rhbz#1938082

[1:11.0.11.0.1-0.0.ea]

  • Update to jdk-11.0.11.0+1
  • Update release notes to 11.0.11.0+1
  • Switch to EA mode for 11.0.11 pre-release builds.
  • Require tzdata 2020f to match upstream change JDK-8259048
  • Resolves: rhbz#1938082

[1:11.0.10.0.9-1]

  • Add backport of JDK-8258836 to fix -Xcheck:jni warnings
  • Resolves: rhbz#1897602

[1:11.0.10.0.9-0]

  • Update to jdk-11.0.10.0+9
  • Update release notes to 11.0.10.0+9
  • Switch to GA mode for final release.
  • This tarball is embargoed until 2021-01-19 @ 1pm PT.
  • Resolves: rhbz#1908970

[1:11.0.10.0.8-0.0.ea]

  • Update to jdk-11.0.10.0+8
  • Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
  • Resolves: rhbz#1903907

[1:11.0.10.0.5-0.0.ea]

  • Update to jdk-11.0.10.0+5
  • Update release notes to 11.0.10.0+5
  • Drop JDK-8222527 as applied upstream.
  • Resolves: rhbz#1903907

[1:11.0.10.0.4-0.0.ea]

  • Update to jdk-11.0.10.0+4
  • Update release notes to 11.0.10.0+4
  • Resolves: rhbz#1903907

[1:11.0.10.0.3-0.0.ea]

  • Update to jdk-11.0.10.0+3
  • Update release notes to 11.0.10.0+3
  • Resolves: rhbz#1903907

[1:11.0.10.0.2-0.0.ea]

  • Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
  • Resolves: rhbz#1903907

[1:11.0.10.0.2-0.0.ea]

  • Update to jdk-11.0.10.0+2
  • Update release notes to 11.0.10.0+2
  • Update tarball generation script to use PR3818 which handles JDK-8171279 changes
  • Drop JDK-8250861 as applied upstream.
  • Resolves: rhbz#1903907

[1:11.0.10.0.1-0.0.ea]

  • Add new Harfbuzz library to package listing and _privatelibs
  • Resolves: rhbz#1903907

[1:11.0.10.0.1-0.0.ea]

  • Update to jdk-11.0.10.0+1
  • Update release notes to 11.0.10.0+1
  • Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
  • Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
  • Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
  • Cleanup debug package descriptions and version number placement.
  • Switch to EA mode for 11.0.10 pre-release builds.
  • Drop JDK-8222286 & JDK-8254177 as applied upstream
  • Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
  • Resolves: rhbz#1903907

[1:11.0.9.11-5]

  • Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
  • Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
  • RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
  • Resolves: rhbz#1901695

[1:11.0.9.11-5]

  • Redefined linux -> linux and __x86_64 -> x86_64 in RH1750419 patch
  • Resolves: rhbz#1901695

[1:11.0.9.11-4]

  • Update release notes for 11.0.9.1 release.
  • Resolves: rhbz#1895275

[1:11.0.9.11-3]

  • Removed patch6: rh1566890-CVE_2018_3639-speculative_store_bypass.patch, surpassed by new patch
  • Added patch600: rh1750419-redhat_alt_java.patch, surpassing removed patch
  • No longer copy java->alt-java as it is created by patch600
  • Resolves: rhbz#1901695

[1:11.0.9.11-2]

  • Add backport of JDK-8222537 so the Host header is sent when using proxies.
  • Resolves: rhbz#1869530

[1:11.0.9.11-1]

  • Update to jdk-11.0.9.1+1
  • RPM version stays at 11.0.9.11 so as to not break upgrade path.
  • Adds a single patch for JDK-8250861.
  • Resolves: rhbz#1895275

[1:11.0.9.11-1]

  • Move all license files to NVR-specific JVM directory.
  • This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
  • Resolves: rhbz#1896609

[1:11.0.9.11-1]

  • Fix directory ownership of static-libs package
  • Resolves: rhbz#1896610

[1:11.0.9.11-0]

  • Delay tzdata 2020b dependency until tzdata update has shipped.
  • Resolves: rhbz#1876665

[1:11.0.9.11-0]

  • Update to jdk-11.0.9+11
  • Update release notes for 11.0.9 release.
  • Add backport of JDK-8254177 to update to tzdata 2020b
  • Require tzdata 2020b due to resource changes in JDK-8254177
  • This tarball is embargoed until 2020-10-20 @ 1pm PT.
  • Resolves: rhbz#1876665

[1:11.0.9.10-0.1.ea]

  • Improve quoting of vendor name
  • Resolves: rhbz#1876665

[1:11.0.9.10-0.1.ea]

  • Set vendor property and vendor URLs
  • Made URLs to be preconfigured by OS
  • Moved vendor_version_string to a better place
  • Resolves: rhbz#1876665

[1:11.0.9.10-0.0.ea]

  • Update to jdk-11.0.9+10 (EA)
  • Resolves: rhbz#1876665

[1:11.0.9.9-0.0.ea]

  • Update to jdk-11.0.9+9 (EA)
  • Resolves: rhbz#1876665

[1:11.0.9.8-0.0.ea]

  • Update to jdk-11.0.9+8 (EA)
  • Remove JDK-8252258/RH1868406 now applied upstream.
  • Resolves: rhbz#1876665

[1:11.0.9.7-0.0.ea]

  • Update to jdk-11.0.9+7 (EA)
  • Resolves: rhbz#1876665

[1:11.0.9.6-0.1.ea]

  • Update static-libs packaging to new layout
  • Resolves: rhbz#1876665

[1:11.0.9.6-0.0.ea]

  • Update to jdk-11.0.9+6 (EA)
  • Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
  • Resolves: rhbz#1876665

[1:11.0.9.5-0.0.ea]

  • Update to jdk-11.0.9+5 (EA)
  • Resolves: rhbz#1876665

[1:11.0.9.4-0.0.ea]

  • Update to jdk-11.0.9+4 (EA)
  • Resolves: rhbz#1876665

[1:11.0.9.3-0.0.ea]

  • Update to jdk-11.0.9+3 (EA)
  • Resolves: rhbz#1876665

[1:11.0.9.2-0.1.ea]

  • Following JDK-8005165, class data sharing can be enabled on all JIT architectures
  • Resolves: rhbz#1876665

[1:11.0.9.2-0.0.ea]

  • Update to jdk-11.0.9+2 (EA)
  • With Shenandoah now upstream in OpenJDK 11, we can use jdk-updates/jdk11 directly
  • Resolves: rhbz#1876665

[1:11.0.9.1-0.0.ea]

  • JDK-8245832 increases the set of static libraries, so try and include them all with a wildcard.
  • Resolves: rhbz#1876665

[1:11.0.9.1-0.0.ea]

  • Cleanup architecture and JVM feature handling in preparation for using upstreamed Shenandoah.
  • Resolves: rhbz#1876665

[1:11.0.9.1-0.0.ea]

  • Update to shenandoah-jdk-11.0.9+1 (EA)
  • Switch to EA mode for 11.0.9 pre-release builds.
  • Drop JDK-8227269, JDK-8241750 & JDK-8245714 backports now applied upstream.
  • Resolves: rhbz#1876665

[1:11.0.8.10-2]

  • Add JDK-8252258 to return default vendor to the original value of 'Oracle Corporation'
  • Include a test in the RPM to check the build has the correct vendor information.
  • Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
  • Resolves: rhbz#1876665

[1:11.0.8.10-1]

  • Update to shenandoah-jdk-11.0.8+10 (GA)
  • Switch to GA mode for final release.
  • Update release notes with last minute fix (JDK-8248505).
  • This tarball is embargoed until 2020-07-14 @ 1pm PT.
  • Resolves: rhbz#1838811

[1:11.0.8.9-0.1.ea]

  • Update to shenandoah-jdk-11.0.8+9 (EA)
  • Update release notes for 11.0.8 release.
  • This tarball is embargoed until 2020-07-14 @ 1pm PT.
  • Resolves: rhbz#1838811

[1:11.0.8.8-0.1.ea]

  • Update to shenandoah-jdk-11.0.8+8 (EA)
  • Resolves: rhbz#1838811

[1:11.0.8.7-0.2.ea]

  • java-11-openjdk doesn't have a JRE tree, so don't try and copy alt-java there...
  • Resolves: rhbz#1838811

[1:11.0.8.7-0.2.ea]

  • Create a copy of java as alt-java with alternatives and man pages
  • Resolves: rhbz#1838811

[1:11.0.8.7-0.1.ea]

  • Update to shenandoah-jdk-11.0.8+7 (EA)
  • Resolves: rhbz#1838811

[1:11.0.8.6-0.1.ea]

  • Update to shenandoah-jdk-11.0.8+6 (EA)
  • Resolves: rhbz#1838811

[1:11.0.8.5-0.2.ea]

  • Disable stripping of debug symbols for static libraries part of the -static-libs sub-package.
  • Resolves: rhbz#1838811

[1:11.0.8.5-0.1.ea]

  • Update to shenandoah-jdk-11.0.8+5 (EA)
  • Resolves: rhbz#1838811

[1:11.0.8.4-0.1.ea]

  • Update to shenandoah-jdk-11.0.8+4 (EA)
  • Require tzdata 2020a due to resource changes in JDK-8243541
  • Resolves: rhbz#1838811

[1:11.0.8.3-0.1.ea]

  • Update to shenandoah-jdk-11.0.8+3 (EA)
  • Resolves: rhbz#1838811

[1:11.0.8.2-0.3.ea]

  • Add backport of JDK-8245714 to fix crash in build_loop_late_post(Node*)
  • Resolves: rhbz#1828845

[1:11.0.8.2-0.2.ea]

  • Use RHEL 7 format for handling the debug argument to the files_static_libs macro.
  • Fix warning about macro in comment.
  • Resolves: rhbz#1839091

[1:11.0.8.2-0.2.ea]

  • Build static-libs-image and add resulting files via -static-libs sub-package.
  • Resolves: rhbz#1839091

[1:11.0.8.2-0.1.ea]

  • Update to shenandoah-jdk-11.0.8+2 (EA)
  • Resolves: rhbz#1838811

[1:11.0.8.1-0.1.ea]

  • Update to shenandoah-jdk-11.0.8+1 (EA)
  • Switch to EA mode for 11.0.8 pre-release builds.
  • Drop JDK-8237396 & JDK-8228407 backports now applied upstream.
  • Resolves: rhbz#1838811

[1:11.0.7.10-7]

  • Add backports of JDK-8227269 & JDK-8241750 to resolve slow class loading with JDWP enabled.
  • Resolves: rhbz#1826915

[1:11.0.7.10-6]

  • Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
  • Need to support noarch for creating source RPMs for non-scratch builds.
  • Resolves: rhbz#1737114

[1:11.0.7.10-6]

  • Sync SystemTap & desktop files with upstream IcedTea release 3.15.0
  • Resolves: rhbz#1737114

[1:11.0.7.10-6]

  • Sync SystemTap & desktop files with upstream IcedTea release 3.11.0 using new script
  • Resolves: rhbz#1737114

[1:11.0.7.10-5]

  • Add JDK-8228407 backport to resolve crashes during verification.
  • Resolves: rhbz#1810557

[1:11.0.7.10-5]

  • Amend release notes, removing issue actually fixed in 11.0.6.
  • Resolves: rhbz#1810557

[1:11.0.7.10-5]

  • Add release notes.
  • Resolves: rhbz#1810557

[1:11.0.7.10-5]

  • Update to shenandoah-jdk-11.0.7+10 (GA)
  • Switch to GA mode for final release.
  • Resolves: rhbz#1810557

[1:11.0.7.9-0.2.ea]

  • Make use of --with-extra-asflags introduced in jdk-11.0.6+1.
  • Resolves: rhbz#1810557

[1:11.0.7.9-0.1.ea]

  • Update to shenandoah-jdk-11.0.7+9 (EA)
  • Resolves: rhbz#1810557

[1:11.0.7.8-0.1.ea]

  • Update to shenandoah-jdk-11.0.7+8 (EA)
  • Resolves: rhbz#1810557

[1:11.0.7.7-0.1.ea]

  • Update to shenandoah-jdk-11.0.7+7 (EA)
  • Resolves: rhbz#1810557

[1:11.0.7.6-0.1.ea]

  • Update to shenandoah-jdk-11.0.7+6 (EA)
  • Resolves: rhbz#1810557

[1:11.0.7.5-0.1.ea]

  • Update to shenandoah-jdk-11.0.7+5 (EA)
  • Resolves: rhbz#1810557

[1:11.0.7.4-0.1.ea]

  • Update to shenandoah-jdk-11.0.7+4 (EA)
  • Resolves: rhbz#1810557

[1:11.0.7.3-0.1.ea]

  • Update to shenandoah-jdk-11.0.7+3 (EA)
  • Resolves: rhbz#1810557

[1:11.0.7.2-0.1.ea]

  • Update to shenandoah-jdk-11.0.7+2 (EA)
  • Resolves: rhbz#1810557

[1:11.0.7.1-0.1.ea]

  • Bump release for y-stream branch.
  • Resolves: rhbz#1810557

[1:11.0.7.1-0.0.ea]

  • Update to shenandoah-jdk-11.0.7+1 (EA)
  • Switch to EA mode for 11.0.7 pre-release builds.
  • Drop JDK-8236039 backport now applied upstream.
  • Resolves: rhbz#1810557

[1:11.0.6.10-3]

  • Add JDK-8237396 backport to resolve Shenandoah TCK breakage in traversal mode.
  • Resolves: rhbz#1785753

[1:11.0.6.10-2]

  • Add JDK-8236039 backport to resolve OpenShift blocker
  • Resolves: rhbz#1785753

[1:11.0.6.10-1]

  • Update to shenandoah-jdk-11.0.6+10 (GA)
  • Switch to GA mode for final release.
  • Resolves: rhbz#1785753

[1:11.0.6.9-0.1.ea]

  • Update to shenandoah-jdk-11.0.6+9 (EA)
  • Resolves: rhbz#1785753

[1:11.0.6.8-0.1.ea]

  • Update to shenandoah-jdk-11.0.6+8 (EA)
  • Resolves: rhbz#1785753

[1:11.0.6.7-0.1.ea]

  • Update to shenandoah-jdk-11.0.6+7 (EA)
  • Resolves: rhbz#1785753

[1:11.0.6.6-0.1.ea]

  • Update to shenandoah-jdk-11.0.6+6 (EA)
  • Resolves: rhbz#1785753

[1:11.0.6.5-0.1.ea]

  • Update to shenandoah-jdk-11.0.6+5 (EA)
  • Resolves: rhbz#1785753

[1:11.0.6.4-0.1.ea]

  • Update to shenandoah-jdk-11.0.6+4 (EA)
  • Resolves: rhbz#1785753

[1:11.0.6.3-0.1.ea]

  • Update to shenandoah-jdk-11.0.6+3 (EA)
  • Resolves: rhbz#1785753

[1:11.0.6.2-0.1.ea]

  • Update to shenandoah-jdk-11.0.6+2 (EA)
  • Resolves: rhbz#1785753

[1:11.0.6.1-0.1.ea]

  • Update to shenandoah-jdk-11.0.6+1 (EA)
  • Switch to EA mode for 11.0.6 pre-release builds.
  • Add support for jfr binary.
  • Resolves: rhbz#1785753

[1:11.0.5.10-1]

  • Update to shenandoah-jdk-11.0.5+10 (GA)
  • Switch to GA mode for final release.
  • Resolves: rhbz#1753423

[1:11.0.5.9-0.1.ea]

  • Update to shenandoah-jdk-11.0.5+9 (EA)
  • Resolves: rhbz#1737117

[1:11.0.5.8-0.1.ea]

  • Update to shenandoah-jdk-11.0.5+8 (EA)
  • Resolves: rhbz#1737117

[1:11.0.5.7-0.1.ea]

  • Update to shenandoah-jdk-11.0.5+7 (EA)
  • Resolves: rhbz#1737117

[1:11.0.5.6-0.1.ea]

  • Update to shenandoah-jdk-11.0.5+6 (EA)
  • Resolves: rhbz#1737117

[1:11.0.5.5-0.1.ea]

  • Update to shenandoah-jdk-11.0.5+5 (EA)
  • Resolves: rhbz#1737117

[1:11.0.5.4-0.1.ea]

  • Revert rpmdev-bumpspec workaround as it has consequences for RPM installation.
  • Resolves: rhbz#1737117

[1:11.0.5.4-0.1.ea]

  • Update to shenandoah-jdk-11.0.5+4 (EA)
  • Resolves: rhbz#1737117

[1:11.0.5.3-0.1.ea]

  • Use 'release' rather than 'rpmrelease' for the release variable so rpmdev-bumpspec works again.
  • Resolves: rhbz#1737117

[1:11.0.5.3-0.1.ea]

  • Update to shenandoah-jdk-11.0.5+3 (EA)
  • Resolves: rhbz#1737117

[1:11.0.5.2-0.2.ea]

  • Update generate_source_tarball.sh script to use the PR3751 patch and retain the secp256k1 curve.
  • Regenerate source tarball using the updated script and add the -'4curve' suffix.
  • PR3751 includes the changes in the PR1834/RH1022017 patch which is removed.
  • Resolves: rhbz#1699068

[1:11.0.5.2-0.1.ea]

  • Update to shenandoah-jdk-11.0.5+2 (EA)
  • Resolves: rhbz#1737117

[1:11.0.5.1-0.1.ea]

  • Update to shenandoah-jdk-11.0.5+1 (EA)
  • Switch to EA mode for 11.0.5 pre-release builds.
  • Resolves: rhbz#1737117

[1:11.0.4.11-1]

  • Update to shenandoah-jdk-11.0.4+11 (GA)
  • Switch to GA mode for final release.
  • Resolves: rhbz#1724452

[1:11.0.4.10-0.1.ea]

  • Update to shenandoah-jdk-11.0.4+10 (EA)
  • Resolves: rhbz#1724452

[1:11.0.4.9-0.1.ea]

  • Update to shenandoah-jdk-11.0.4+9 (EA)
  • Resolves: rhbz#1724452

[1:11.0.4.8-0.1.ea]

  • Update to shenandoah-jdk-11.0.4+8 (EA)
  • Resolves: rhbz#1724452

[1:11.0.4.7-0.1.ea]

  • Update to shenandoah-jdk-11.0.4+7 (EA)
  • Resolves: rhbz#1724452

[1:11.0.4.6-0.1.ea]

  • Provide Javadoc debug subpackages for now, but populate them from the normal build.
  • Resolves: rhbz#1724452

[1:11.0.4.6-0.1.ea]

  • Update to shenandoah-jdk-11.0.4+6 (EA)
  • Resolves: rhbz#1724452

[1:11.0.4.5-0.1.ea]

  • Update to shenandoah-jdk-11.0.4+5 (EA)
  • Resolves: rhbz#1724452

[1:11.0.4.4-0.1.ea]

  • Update to shenandoah-jdk-11.0.4+4 (EA)
  • Resolves: rhbz#1724452

[1:11.0.4.3-0.1.ea]

  • Update to shenandoah-jdk-11.0.4+3 (EA)
  • Resolves: rhbz#1724452

[1:11.0.4.2-0.1.ea]

  • Use RHEL 7 format for jspawnhelper addition.
  • Resolves: rhbz#1724452

[1:11.0.4.2-0.1.ea]

  • Update to shenandoah-jdk-11.0.4+2 (EA)
  • Resolves: rhbz#1724452

[1:11.0.4.2-0.1.ea]

  • Package jspawnhelper (see JDK-8220360).
  • Resolves: rhbz#1724452

[1:11.0.3.7-3]

  • Include 'ea' designator in Release when appropriate.
  • Resolves: rhbz#1724452

[1:11.0.3.7-3]

  • Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately.
  • Resolves: rhbz#1724452

[1:11.0.3.7-2]

  • Don't build the test images needlessly.
  • Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
  • Don't perform a bootcycle build for the debug variant build.
  • Resolves: rhbz#1724452

[1:11.0.3.7-1]

  • Update to shenandoah-jdk-11.0.3+7 (April 2019 GA)
  • Resolves: rhbz#1693468

[1:11.0.3.6-1]

  • Add -mstackrealign workaround to build flags to avoid SSE issues on x86
  • Resolves: rhbz#1677516

[1:11.0.3.6-1]

  • Fix macro which doesn't expand.
  • Related: rhbz#1684617

[1:11.0.3.6-1]

  • Add cast to resolve s390 ambiguity in call to log2_intptr
  • Resolves: rhbz#1677516

[1:11.0.3.6-1]

  • Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
  • Drop JDK-8210416/RH1632174 applied upstream.
  • Drop JDK-8210425/RH1632174 applied upstream.
  • Drop JDK-8210647/RH1632174 applied upstream.
  • Drop JDK-8210761/RH1632174 applied upstream.
  • Drop JDK-8210703/RH1632174 applied upstream.
  • Resolves: rhbz#1677516

[1:11.0.2.7-4]

  • Replace pcsc-lite-devel with pcsc-lite-libs so deps can be resolved without optional repository
  • Add JDK-8009550/RH910107 patch so OpenJDK checks for libpcsclite.so.1 (in pcsc-lite-libs)
  • Add missing ISA to cups-libs requirement
  • Remove duplicate lksctp-tools requirement
  • Resolves: rhbz#1684617

[1:11.0.2.7-4]

  • Disable gdb check on s390 as it sporadically fails with SIGFPE
  • Resolves: rhbz#1693468

[1:11.0.2.7-3]

  • Drop NSS runtime dependencies and patches to link against it.
  • Resolves: rhbz#1656677

[1:11.0.2.7-2]

  • Add patch for RH1566890
  • Resolves: rhbz#1693468

[1:11.0.2.7-1]

  • Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
  • Make tagsuffix optional and comment it out while unused.
  • Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
  • Drop JDK-8209639/RH1640127 applied upstream.
  • Re-generate JDK-8210416/RH1632174 following JDK-8209786
  • Resolves: rhbz#1661577

[1:11.0.1.13-8]

  • Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
  • Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
  • Resolves: rhbz#1661577

[1:11.0.1.13-8]

  • Update to shenandoah-jdk-11.0.1+13-20190101
  • Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
  • Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
  • Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
  • Drop upstream Shenandoah patch RH1648995.
  • Resolves: rhbz#1661577

[1:11.0.1.13-7]

  • Added %global _find_debuginfo_opts -g
  • Resolves: rhbz#1656997

[1:11.0.1.13-6]

  • fixed tck failures of arraycopy and process exec with shenandoah on
  • added patch585 rh1648995-shenandoah_array_copy_broken_by_not_always_copy_forward_for_disjoint_arrays.patch

[1:11.0.1.13-5]

  • headless' suggests of cups, replaced by Requires of cups-libs

[1:11.0.1.13-3]

  • added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch

[1:11.0.1.13-3]

  • Use upstream's version of Aarch64 intrinsics disable patch:
    • Removed: RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    • Superceded by: jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch

[1:11.0.1.13-2]

  • Use LTS designator in version output for RHEL.

[1:11.0.1.13-1]

  • Update to October 2018 CPU release, 11.0.1+13.

[1:11.0.0.28-2]

  • Use --with-vendor-version-string=18.9 so as to show original GA date for the JDK.

[1:11.0.0.28-1]

  • Identify as GA version and no longer as early access (EA).
  • JDK 11 has been released for GA on 2018-09-25.

[1:11.0.ea.28-9]

  • Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes RHBZ-1624122.
  • Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to optimize compilation of fdlibm library.
  • Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
  • Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to optimize compilation of libsaproc (extra c flags won't override optimization).
  • Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to optimize compilation of libjsig.
  • Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to optimize compilation of vmStructs.cpp (part of libjvm.so).
  • Reinstate filtering of opt flags coming from redhat-rpm-config.

[1:11.0.ea.28-8]

  • removed version less provides
  • javadocdir moved to arched dir as it is no longer noarch
  • Resolves: rhbz#1570856

[1:11.0.ea.28-6]

  • Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch, so as to disable log math intrinsic on aarch64. Work-around for JDK-8210858
  • Resolves: rhbz#1570856

[1:11.0.ea.28-5]

  • Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch, so as to disable dsin/dcos math intrinsics on aarch64. Work-around for JDK-8210461.
  • Resolves: rhbz#1570856

[1:11.0.ea.22-6]

  • Add patch, JDK-8210416-RHBZ-1624122-fdlibm-opt-fix.patch, so as to optimize compilation of fdlibm library.
  • Add patch, JDK-8210425-RHBZ-1624122-sharedRuntimeTrig-opt-fix.patch, so as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
  • Add patch, JDK-8210647-RHBZ-1624122-libsaproc-opt-fix.patch, so as to optimize compilation of libsaproc (extra c flags won't override optimization).
  • Add patch, JDK-8210703-RHBZ-1624122-vmStructs-opt-fix.patch, so as to optimize compilation of vmStructs.cpp (part of libjvm.so).
  • No longer filter -O flags from C flags coming from redhat-rpm-config.
  • Resolves: RHBZ#1570856

[1:11.0.ea.28-4]

  • link to jhsdb followed its file to ifarch jit_arches ifnarch s390x
  • Resolves: rhbz#1570856

[1:11.0.ea.28-4]

  • modified to build by itself
  • Resolves: rhbz#1570856

[1:11.0.ea.28-3]

  • Enable ZGC on x86_64.
  • Resolves: RHBZ#1570856

[1:11.0.ea.28-2]

  • jfr/*jfc files listed for all arches
  • lib/classlist do not exists s390, ifarch-ed via jit_arches out
  • specfile slightly improved to allow srpm rebuild on rhel8/fedoras
  • Resolves: rhbz#1570856

[1:11.0.ea.28-1]

  • Update to latest upstream build jdk11+28, the first release candidate.
  • Resolves: rhbz#1570856

[1:11.0.ea.22-8]

  • Adjust system NSS patch, pr1983-rh1565658-support_using_the_system_installation_of_nss_with_the_sunec_provider_jdk11.patch, so as to filter -Wl,--as-needed from linker flags. Fixes FTBFS issue.
  • Resolves: rhbz#1570856

[1:11.0.ea.22-6]

  • dissabled accessibility, fixed provides for main package's debug variant
  • Resolves: RHBZ#1570856

[1:11.0.ea.22-8]

  • jfr/*jfc files listed for all arches
  • Resolves: rhbz#1570856

[1:11.0.ea.22-7]

  • added space behind jmd slave
  • Resolves: rhbz#1570856

[1:11.0.ea.22-6]

  • jfr/*jfc files listed also for ppc
  • Resolves: rhbz#1570856

[1:11.0.ea.22-5]

  • Initial Load
  • removed -fno-lifetime-dse; rhel7 gcc to old (4.8.5)
  • lib/classlist do not exists s390, ifarch-ed via jit_arches out
  • Resolves: rhbz#1570856

Обновленные пакеты

Oracle Linux 7

Oracle Linux aarch64

java-11-openjdk

11.0.25.0.9-1.0.1.el7_9

java-11-openjdk-devel

11.0.25.0.9-1.0.1.el7_9

java-11-openjdk-headless

11.0.25.0.9-1.0.1.el7_9

java-11-openjdk-demo

11.0.25.0.9-1.0.1.el7_9

java-11-openjdk-javadoc

11.0.25.0.9-1.0.1.el7_9

java-11-openjdk-javadoc-zip

11.0.25.0.9-1.0.1.el7_9

java-11-openjdk-jmods

11.0.25.0.9-1.0.1.el7_9

java-11-openjdk-src

11.0.25.0.9-1.0.1.el7_9

Oracle Linux x86_64

java-11-openjdk

11.0.25.0.9-1.0.1.el7_9

java-11-openjdk-devel

11.0.25.0.9-1.0.1.el7_9

java-11-openjdk-headless

11.0.25.0.9-1.0.1.el7_9

java-11-openjdk-static-libs

11.0.25.0.9-1.0.1.el7_9

java-11-openjdk-demo

11.0.25.0.9-1.0.1.el7_9

java-11-openjdk-javadoc

11.0.25.0.9-1.0.1.el7_9

java-11-openjdk-javadoc-zip

11.0.25.0.9-1.0.1.el7_9

java-11-openjdk-jmods

11.0.25.0.9-1.0.1.el7_9

java-11-openjdk-src

11.0.25.0.9-1.0.1.el7_9

Связанные уязвимости

rocky
8 месяцев назад

Moderate: java-21-openjdk security update

rocky
8 месяцев назад

Moderate: java-17-openjdk security update

rocky
8 месяцев назад

Moderate: java-11-openjdk security update

rocky
8 месяцев назад

Moderate: java-1.8.0-openjdk security update

oracle-oval
8 месяцев назад

ELSA-2024-8127: java-21-openjdk security update (MODERATE)