Stay Secure with the Latest Linux Advisories

security advisoryfedoracritical

Fedora 32: FEDORA-2020-5386fe3bbb Critical: OpenJDK 8u252 Update

Update to OpenJDK 8u252 (April Critical Patch Update) - JDK-8223898, CVE-2020-2754: Forward references to Nashorn - JDK-8223904, CVE-2020-2755: Improve Nashorn matching - JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs - JDK-8224549, CVE-2020-2757: Less Blocking Array Queues - JDK-8225603: Enhancement for big integers - JDK-8227542: Manifest improved jar headers -. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-5386fe3bbb 2020-05-07 03:09:35.196281 --------------------------------------------------------------------------------Name : java-1.8.0-openjdk Product : Fedora 32 Version : 1.8.0.252.b09 Release : 0.fc32 URL : https://openjdk.org/ Summary : OpenJDK Runtime Environment 8 Description : The OpenJDK runtime environment 8. --------------------------------------------------------------------------------Update Information: Update to OpenJDK 8u252 (April Critical Patch Update) - JDK-8223898, CVE-2020-2754: Forward references to Nashorn - JDK-8223904, CVE-2020-2755: Improve Nashorn matching - JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs - JDK-8224549, CVE-2020-2757: Less Blocking Array Queues - JDK-8225603: Enhancement for big integers - JDK-8227542: Manifest improved jar headers -JDK-8231415, CVE-2020-2773: Better signatures in XML - JDK-8233250: Better X11 rendering - JDK-8233410: Better Build Scripting - JDK-8234027: Better JCEKS key support - JDK-8234408, CVE-2020-2781: Improve TLS session handling -JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers - JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers - JDK-8235274, CVE-2020-2805: Enhance typing of methods - JDK-8236201, CVE-2020-2830: Better Scanner conversions - JDK-8238960: linux-i586 builds are inconsistent as the newly build jdk is not able to reserve enough space for object heap Full releasenotes: https://mail.openjdk.org/pipermail/jdk8u-dev/2020-April/011566.html --------------------------------------------------------------------------------ChangeLog: * Sun May 3 2020 Andrew John Hughes - 1:1.8.0.252.b09-0 - Update to aarch64-shenandoah-jdk8u242-b09. - Switch to GA mode for final release. - Add release notes. - Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978 - Remove backports of JDK-8224851 & JDK-8241296 now applied upstream. * Sun May 3 2020 Andrew Hughes - 1:1.8.0.252.b01-0.1.ea - Update to aarch64-shenandoah-jdk8u252-b01. - Switch to EA mode. - Adjust JDK-8199936/PR3533 patch following JDK-8227397 configure change - Make use of --with-extra-asflags introduced in jdk8u252-b01. - Drop obsolete local patch, JDK-8219772, now that ASFLAGS are properly handled. --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-5386fe3bbb' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Update OpenJDK 8u252 in Fedora to fix critical security flaws and improve performance; install patch promptly.. Java OpenJDK Update, FedoraSecurity Patch, OpenJDK Enhancements. . Severity: Critical. LinuxSecurity.com Team

May 06, 2020 •Critical Fedora