Stay Secure with the Latest Linux Advisories

security advisorysecurity fixTLS

Mageia 8 MGASA-2021-0298 Moderate: Java-OpenJDK Security Update Details

For java-1.8.0 ## Security fixes - JDK-8227467: Better class method invocations - JDK-8244473: Contextualize registration for JNDI - JDK-8244543: Enhanced handling of abstract classes . MGASA-2021-0298 - Updated java-openjdk packages fix security vulnerabilities Publication date: 28 Jun 2021 URL: https://advisories.mageia.org/MGASA-2021-0298.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-2161, CVE-2021-2163 For java-1.8.0 ## Security fixes - JDK-8227467: Better class method invocations - JDK-8244473: Contextualize registration for JNDI - JDK-8244543: Enhanced handling of abstract classes - JDK-8249906, CVE-2021-2163: Enhance opening JARs - JDK-8250568, CVE-2021-2161: Less ambiguous processing - JDK-8253799: Make lists of normal filenames ## Other significant changes - JDK-8236730: Weak Named Curves in TLS, CertPath, and Signed JAR Disabled by Default - JDK-8244286: Tools Warn If Weak Algorithms Are Used - JDK-8256490: Disable TLS 1.0 and 1.1 - JDK-8242147: New System Properties to Configure the TLS Signature Schemes - JDK-8177368: Several incorporation steps are silently failing when an error should be reported. For java-11 ## Security fixes - JDK-8244473: Contextualize registration for JNDI - JDK-8244543: Enhanced handling of abstract classes - JDK-8249906, CVE-2021-2163: Enhance opening JARs - JDK-8250568, CVE-2021-2161: Less ambiguous processing - JDK-8253799: Make lists of normal filenames - JDK-8257001: Improve HTTP Client Support ## Other significant changes - LDAP Channel Binding Support for Java GSS/Kerberos - Disable TLS 1.0 and 1.1 - jdeps --print-module-deps Reports Transitive Dependencies - XML declaration is not followed by a newline - SystemTap tapsets updated to support OpenJDK 11 References: - https://bugs.mageia.org/show_bug.cgi?id=29145 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./message/CFXOKM2233JVGYDOWW77BN54X3GZTIBK/ -https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./message/CG7EWXSO6JUCVHP7R3SOZQ7WPNBOISJH/ - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./message/UD3JEP4HPLK7MNZHVUMKIJPBP74M3A2V/ - https://www.oracle.com/security-alerts/cpuapr2021.html#AppendixJAVA - https://www.cve.org/CVERecord?id=CVE-2021-2161 - https://www.cve.org/CVERecord?id=CVE-2021-2163 SRPMS: - 8/core/java-11-openjdk-11.0.11.0.9-0.1.mga8 - 8/core/copy-jdk-configs-4.0-1.mga8 - 8/core/java-1.8.0-openjdk-1.8.0.292.b10-1.1.mga8 . Mageia 8 sec update MGASA-2021-0298 resolves critical java-openjdk issues and enhancements. Discover the details!. Java-OpenJDK, Maven security update, Mageia 8, Java enhancements, security patches. . LinuxSecurity.com Team

Jun 28, 2021 Mageia