Fedora 32: FEDORA-2021-4cebc3aff9 Critical: Java 1.8.0 Security Issue

The OpenJDK 8 runtime environment.

# New in release OpenJDK 8u282 (2021-01-19) Live versions of these release

notes can be found at: * https://mail.openjdk.org/pipermail/jdk8u-dev/2021-January/013337.html *

https://builds.shipilev.net/backports-monitor/release-notes-openjdk8u282.txt ##

Security fixes * JDK-8247619: Improve Direct Buffering of Characters ## Other

changes * [JDK-8230839](https://bugs.openjdk.org/browse/JDK-8230839):

Updated XML Signature Implementation to Apache Santuario 2.1.3, adding support

for embedding elliptic curve public keys in the KeyValue element * Default to

RSA when using keytool, as DSA is only supported by the LEGACY crypto policy.

* Make java-1.8.0-openjdk-demo own its directories as well as its files

* Sat Jan 30 2021 Andrew Hughes - 1:1.8.0.282.b08-0

- Update to aarch64-shenandoah-jdk8u282-b08 (GA)

- Update release notes for 8u282.

- Remove PR3601, covered upstream by JDK-8062808.

- Remove upstreamed JDK-8197981/PR3548, JDK-8062808/PR3548 & JDK-8254177.

- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395

- Adapt JDK-8143245 patch, following JDK-8254166

- Remove upstreamed patch PR3519

- Use RSA as default for keytool, as DSA is disabled in all crypto policies except LEGACY

- Add directories to files directive for demo package.

- Include a test in the RPM to check the build has the correct vendor information.

- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.

- Cleanup package descriptions and version number placement.

su -c 'dnf upgrade --advisory FEDORA-2021-4cebc3aff9' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure