A java-1.8.0-openjdk security update has been released for Oracle Linux 8.

El-errata: ELSA-2021-2776 Important: Oracle Linux 8 java-1.8.0-openjdk security update

Oracle Linux Security Advisory ELSA-2021-2776

  http://linux.oracle.com/errata/ELSA-2021-2776.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
java-1.8.0-openjdk-1.8.0.302.b08-0.el8_4.x86_64.rpm
java-1.8.0-openjdk-accessibility-1.8.0.302.b08-0.el8_4.x86_64.rpm
java-1.8.0-openjdk-demo-1.8.0.302.b08-0.el8_4.x86_64.rpm
java-1.8.0-openjdk-devel-1.8.0.302.b08-0.el8_4.x86_64.rpm
java-1.8.0-openjdk-headless-1.8.0.302.b08-0.el8_4.x86_64.rpm
java-1.8.0-openjdk-javadoc-1.8.0.302.b08-0.el8_4.noarch.rpm
java-1.8.0-openjdk-javadoc-zip-1.8.0.302.b08-0.el8_4.noarch.rpm
java-1.8.0-openjdk-src-1.8.0.302.b08-0.el8_4.x86_64.rpm
java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.302.b08-0.el8_4.x86_64.rpm
java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.302.b08-0.el8_4.x86_64.rpm
java-1.8.0-openjdk-demo-fastdebug-1.8.0.302.b08-0.el8_4.x86_64.rpm
java-1.8.0-openjdk-demo-slowdebug-1.8.0.302.b08-0.el8_4.x86_64.rpm
java-1.8.0-openjdk-devel-fastdebug-1.8.0.302.b08-0.el8_4.x86_64.rpm
java-1.8.0-openjdk-devel-slowdebug-1.8.0.302.b08-0.el8_4.x86_64.rpm
java-1.8.0-openjdk-fastdebug-1.8.0.302.b08-0.el8_4.x86_64.rpm
java-1.8.0-openjdk-headless-fastdebug-1.8.0.302.b08-0.el8_4.x86_64.rpm
java-1.8.0-openjdk-headless-slowdebug-1.8.0.302.b08-0.el8_4.x86_64.rpm
java-1.8.0-openjdk-slowdebug-1.8.0.302.b08-0.el8_4.x86_64.rpm
java-1.8.0-openjdk-src-fastdebug-1.8.0.302.b08-0.el8_4.x86_64.rpm
java-1.8.0-openjdk-src-slowdebug-1.8.0.302.b08-0.el8_4.x86_64.rpm

aarch64:
java-1.8.0-openjdk-1.8.0.302.b08-0.el8_4.aarch64.rpm
java-1.8.0-openjdk-accessibility-1.8.0.302.b08-0.el8_4.aarch64.rpm
java-1.8.0-openjdk-demo-1.8.0.302.b08-0.el8_4.aarch64.rpm
java-1.8.0-openjdk-devel-1.8.0.302.b08-0.el8_4.aarch64.rpm
java-1.8.0-openjdk-headless-1.8.0.302.b08-0.el8_4.aarch64.rpm
java-1.8.0-openjdk-javadoc-1.8.0.302.b08-0.el8_4.noarch.rpm
java-1.8.0-openjdk-javadoc-zip-1.8.0.302.b08-0.el8_4.noarch.rpm
java-1.8.0-openjdk-src-1.8.0.302.b08-0.el8_4.aarch64.rpm
java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.302.b08-0.el8_4.aarch64.rpm
java-1.8.0-openjdk-demo-slowdebug-1.8.0.302.b08-0.el8_4.aarch64.rpm
java-1.8.0-openjdk-devel-slowdebug-1.8.0.302.b08-0.el8_4.aarch64.rpm
java-1.8.0-openjdk-headless-slowdebug-1.8.0.302.b08-0.el8_4.aarch64.rpm
java-1.8.0-openjdk-slowdebug-1.8.0.302.b08-0.el8_4.aarch64.rpm
java-1.8.0-openjdk-src-slowdebug-1.8.0.302.b08-0.el8_4.aarch64.rpm

SRPMS:
  http://oss.oracle.com/ol8/SRPMS-updates/java-1.8.0-openjdk-1.8.0.302.b08-0.el8_4.src.rpm

Related CVEs:

CVE-2021-2341
CVE-2021-2369
CVE-2021-2388



Description of changes:

[1:1.8.0.302.b08-0]
- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395

[1:1.8.0.302.b07-0.0.ea]
- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Switch to EA mode.
- Cleanup architecture handling
- Fixed not-including fastdebug build in case of --without fastdebug
- Re-order source files to sync with Fedora.
- Introduced nm based check to verify alt-java on x86_64 is patched, and no other alt-java or java is patched
- Patch600, rh1750419-redhat_alt_java.patch, amended to die, if it is used wrongly
- Introduced ssbd_arches with currently only valid arch of x86_64 to separate real alt-java architectures
- Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics.
- Remove restriction on disabling product build, as debug packages no longer have javadoc packages.
- Fix name of javadoc debug packages in Obsoletes declarations and add version where it was removed.
- Resolves: rhbz#1972395

[1:1.8.0.302.b07-0.0.ea]
- Add a test verifying system crypto policies can be disabled
- Resolves: rhbz#1972395