A java-1.8.0-openjdk security and bug fix update has been released for Oracle Linux 8.

ELSA-2023-4176 Moderate: Oracle Linux 8 java-1.8.0-openjdk security and bug fix update

Oracle Linux Security Advisory ELSA-2023-4176

http://linux.oracle.com/errata/ELSA-2023-4176.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
java-1.8.0-openjdk-1.8.0.382.b05-2.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-accessibility-1.8.0.382.b05-2.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-demo-1.8.0.382.b05-2.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-devel-1.8.0.382.b05-2.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-headless-1.8.0.382.b05-2.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-javadoc-1.8.0.382.b05-2.0.1.el8.noarch.rpm
java-1.8.0-openjdk-javadoc-zip-1.8.0.382.b05-2.0.1.el8.noarch.rpm
java-1.8.0-openjdk-src-1.8.0.382.b05-2.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.382.b05-2.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.382.b05-2.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-demo-fastdebug-1.8.0.382.b05-2.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-demo-slowdebug-1.8.0.382.b05-2.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-devel-fastdebug-1.8.0.382.b05-2.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-devel-slowdebug-1.8.0.382.b05-2.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-fastdebug-1.8.0.382.b05-2.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-headless-fastdebug-1.8.0.382.b05-2.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-headless-slowdebug-1.8.0.382.b05-2.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-slowdebug-1.8.0.382.b05-2.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-src-fastdebug-1.8.0.382.b05-2.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-src-slowdebug-1.8.0.382.b05-2.0.1.el8.x86_64.rpm

aarch64:
java-1.8.0-openjdk-1.8.0.382.b05-2.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-accessibility-1.8.0.382.b05-2.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-demo-1.8.0.382.b05-2.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-devel-1.8.0.382.b05-2.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-headless-1.8.0.382.b05-2.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-javadoc-1.8.0.382.b05-2.0.1.el8.noarch.rpm
java-1.8.0-openjdk-javadoc-zip-1.8.0.382.b05-2.0.1.el8.noarch.rpm
java-1.8.0-openjdk-src-1.8.0.382.b05-2.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.382.b05-2.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.382.b05-2.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-demo-fastdebug-1.8.0.382.b05-2.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-demo-slowdebug-1.8.0.382.b05-2.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-devel-fastdebug-1.8.0.382.b05-2.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-devel-slowdebug-1.8.0.382.b05-2.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-fastdebug-1.8.0.382.b05-2.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-headless-fastdebug-1.8.0.382.b05-2.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-headless-slowdebug-1.8.0.382.b05-2.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-slowdebug-1.8.0.382.b05-2.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-src-fastdebug-1.8.0.382.b05-2.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-src-slowdebug-1.8.0.382.b05-2.0.1.el8.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//java-1.8.0-openjdk-1.8.0.382.b05-2.0.1.el8.src.rpm

Related CVEs:

CVE-2023-22045
CVE-2023-22049

Description of changes:

[1:1.8.0.382.b05-2.0.1]
- Add Oracle vendor bug URL [Orabug: 34340155]

[1:1.8.0.382.b05-2]
- CVE-2023-22045 and CVE-2023-22049 fixed
- Release bump for Oracle rebuild

[1:1.8.0.382.b05-1]
- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106

[1:1.8.0.382.b04-0.1.ea]
- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106

[1:1.8.0.382.b01-0.1.ea]
- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106