Stay Secure with the Latest Linux Advisories

security advisoryfedoracritical

Fedora 34 Java-11-Openjdk Update 2021-4581ccb97d Critical HTTP Improvements

# New in release OpenJDK 11.0.12 (2021-07-20): Live versions of these release notes can be found at: * https://mail.openjdk.org/pipermail/jdk-updates-dev/2021-July/006954.html * https://builds.shipilev.net/backports-monitor/release-notes-11.0.12.txt ## Security fixes - JDK-8256157: Improve bytecode assembly - JDK-8256491: Better HTTP transport - JDK-8258432, CVE-2021-2341: Improve file transfers -. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-4581ccb97d 2021-08-01 04:04:30.580741 --------------------------------------------------------------------------------Name : java-11-openjdk Product : Fedora 34 Version : 11.0.12.0.7 Release : 0.fc34 URL : https://openjdk.org/ Summary : OpenJDK 11 Runtime Environment Description : The OpenJDK 11 runtime environment. --------------------------------------------------------------------------------Update Information: # New in release OpenJDK 11.0.12 (2021-07-20): Live versions of these release notes can be found at: * https://mail.openjdk.org/pipermail/jdk-updates-dev/2021-July/006954.html * https://builds.shipilev.net/backports-monitor/release-notes-11.0.12.txt ## Security fixes - JDK-8256157: Improve bytecode assembly - JDK-8256491: Better HTTP transport - JDK-8258432, CVE-2021-2341: Improve file transfers -JDK-8260453: Improve Font Bounding - JDK-8260960: Signs of jarsigner signing - JDK-8260967, CVE-2021-2369: Better jar file validation - JDK-8262380: Enhance XML processing passes - JDK-8262403: Enhanced data transfer -JDK-8262410: Enhanced rules for zones - JDK-8262477: Enhance String Conclusions - JDK-8262967: Improve Zip file support - JDK-8264066, CVE-2021-2388: Enhance compiler validation - JDK-8264079: Improve abstractions - JDK-8264460: Improve NTLM support ## Major changes * Customizing PKCS12 keystore Generation * Removed Root Certificates with 1024-bit Keys * Removed Telia Company's SoneraClass2 CA certificate * Upgraded the Default PKCS12 Encryption and MAC Algorithms * Improve Encoding of TLS Application-Layer Protocol Negotiation (ALPN) Values * Support for certificate_authorities Extension --------------------------------------------------------------------------------ChangeLog: * Tue Jul 13 2021 Andrew Hughes - 1:11.0.12.0.7-0 - Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. * Thu Jul 8 2021 Andrew Hughes - 1:11.0.12.0.6-0.0.ea - Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics. - Remove restriction on disabling product build, as debug packages no longer have javadoc packages. --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-4581ccb97d' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do notreply to spam on the list, report it: https://pagure.io/fedora-infrastructure . The recent Fedora 34 release for java-11-openjdk brings essential enhancements, notably improved file handling and resolved HTTP issues.. Java Security Fixes, OpenJDK Enhancements, Fedora Updates. . Severity: Critical. LinuxSecurity.com Team

Aug 01, 2021 •Critical Fedora