Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Oracle Linux 8 ELSA-2021-3893 Important: Java Security Update

oracle
Calendar Grey October 21, 2021
Scroller Oracle
Keep abreast with Oracle Linux Security Notification ELSA-2021-3893 covering enhanced Java modules and their essential corrections.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Summary

[1:1.8.0.312.b07-1] - Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 [1:1.8.0.312.b05-0.4.ea] - Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false - Resolves: rhbz#2014193 [1:1.8.0.312.b05-0.4.ea] - Add patch to allow plain key import. - Resolves: rhbz#2014193 [1:1.8.0.312.b05-0.3.ea] - Add patch to login to the NSS software token when in FIPS mode. - Resolves: rhbz#2014204 [1:1.8.0.312.b05-0.2.ea] - Port FIPS system detection support to OpenJDK 8u - Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure. - Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM. - Resolves: rhbz#2014201 [1:1.8.0.312.b05-0.2.ea] - Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library. - Resolves: rhbz#20...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory critical update important fix Java update Oracle Linux

SRPMs

https://oss.oracle.com:443/ol8/SRPMS-updates/java-1.8.0-openjdk-1.8.0.312.b07-1.el8_4.src.rpm

x86_64

java-1.8.0-openjdk-1.8.0.312.b07-1.el8_4.x86_64.rpm java-1.8.0-openjdk-accessibility-1.8.0.312.b07-1.el8_4.x86_64.rpm java-1.8.0-openjdk-demo-1.8.0.312.b07-1.el8_4.x86_64.rpm java-1.8.0-openjdk-devel-1.8.0.312.b07-1.el8_4.x86_64.rpm java-1.8.0-openjdk-headless-1.8.0.312.b07-1.el8_4.x86_64.rpm java-1.8.0-openjdk-javadoc-1.8.0.312.b07-1.el8_4.noarch.rpm java-1.8.0-openjdk-javadoc-zip-1.8.0.312.b07-1.el8_4.noarch.rpm java-1.8.0-openjdk-src-1.8.0.312.b07-1.el8_4.x86_64.rpm java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.312.b07-1.el8_4.x86_64.rpm java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.312.b07-1.el8_4.x86_64.rpm java-1.8.0-openjdk-demo-fastdebug-1.8.0.312.b07-1.el8_4.x86_64.rpm java-1.8.0-openjdk-demo-slowdebug-1.8.0.312.b07-1.el8_4.x86_64.rpm java-1.8.0-openjdk-devel-fastdebug-1.8.0.312.b07-1.el8_4.x86_64.rpm java-1.8.0-openjdk-devel-slowdebug-1.8.0.312.b07-1.el8_4.x86_64.rpm java-1.8.0-openjdk-fastdebug-1.8.0.312.b07-1.el8_4.x86_64.rpm java-1.8.0-openjdk-headless-fastdebug-1...

Read the Full Advisory

aarch64

java-1.8.0-openjdk-1.8.0.312.b07-1.el8_4.aarch64.rpm java-1.8.0-openjdk-accessibility-1.8.0.312.b07-1.el8_4.aarch64.rpm java-1.8.0-openjdk-demo-1.8.0.312.b07-1.el8_4.aarch64.rpm java-1.8.0-openjdk-devel-1.8.0.312.b07-1.el8_4.aarch64.rpm java-1.8.0-openjdk-headless-1.8.0.312.b07-1.el8_4.aarch64.rpm java-1.8.0-openjdk-javadoc-1.8.0.312.b07-1.el8_4.noarch.rpm java-1.8.0-openjdk-javadoc-zip-1.8.0.312.b07-1.el8_4.noarch.rpm java-1.8.0-openjdk-src-1.8.0.312.b07-1.el8_4.aarch64.rpm java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.312.b07-1.el8_4.aarch64.rpm java-1.8.0-openjdk-demo-slowdebug-1.8.0.312.b07-1.el8_4.aarch64.rpm java-1.8.0-openjdk-devel-slowdebug-1.8.0.312.b07-1.el8_4.aarch64.rpm java-1.8.0-openjdk-headless-slowdebug-1.8.0.312.b07-1.el8_4.aarch64.rpm java-1.8.0-openjdk-slowdebug-1.8.0.312.b07-1.el8_4.aarch64.rpm java-1.8.0-openjdk-src-slowdebug-1.8.0.312.b07-1.el8_4.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2021-35550 CVE-2021-35556 CVE-2021-35559 CVE-2021-35561 CVE-2021-35564 CVE-2021-35565 CVE-2021-35567 CVE-2021-35578 CVE-2021-35586 CVE-2021-35588 CVE-2021-35603

Topics%20covered

Topics Covered

security advisory critical update important fix Java update Oracle Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.