A java-11-openjdk security and bug fix update has been released for Oracle Linux 7.

ELSA-2023-5736 Moderate: Oracle Linux 7 java-11-openjdk security and bug fix update

Oracle Linux Security Advisory ELSA-2023-5736

http://linux.oracle.com/errata/ELSA-2023-5736.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
java-11-openjdk-11.0.21.0.9-1.0.1.el7_9.i686.rpm
java-11-openjdk-11.0.21.0.9-1.0.1.el7_9.x86_64.rpm
java-11-openjdk-demo-11.0.21.0.9-1.0.1.el7_9.i686.rpm
java-11-openjdk-demo-11.0.21.0.9-1.0.1.el7_9.x86_64.rpm
java-11-openjdk-devel-11.0.21.0.9-1.0.1.el7_9.i686.rpm
java-11-openjdk-devel-11.0.21.0.9-1.0.1.el7_9.x86_64.rpm
java-11-openjdk-headless-11.0.21.0.9-1.0.1.el7_9.i686.rpm
java-11-openjdk-headless-11.0.21.0.9-1.0.1.el7_9.x86_64.rpm
java-11-openjdk-javadoc-11.0.21.0.9-1.0.1.el7_9.i686.rpm
java-11-openjdk-javadoc-11.0.21.0.9-1.0.1.el7_9.x86_64.rpm
java-11-openjdk-javadoc-zip-11.0.21.0.9-1.0.1.el7_9.i686.rpm
java-11-openjdk-javadoc-zip-11.0.21.0.9-1.0.1.el7_9.x86_64.rpm
java-11-openjdk-jmods-11.0.21.0.9-1.0.1.el7_9.i686.rpm
java-11-openjdk-jmods-11.0.21.0.9-1.0.1.el7_9.x86_64.rpm
java-11-openjdk-src-11.0.21.0.9-1.0.1.el7_9.i686.rpm
java-11-openjdk-src-11.0.21.0.9-1.0.1.el7_9.x86_64.rpm
java-11-openjdk-static-libs-11.0.21.0.9-1.0.1.el7_9.i686.rpm
java-11-openjdk-static-libs-11.0.21.0.9-1.0.1.el7_9.x86_64.rpm

SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates//java-11-openjdk-11.0.21.0.9-1.0.1.el7_9.src.rpm

Related CVEs:

CVE-2023-22081

Description of changes:

[1:11.0.21.0.9-1.0.1]
- link atomic for ix86 build

[1:11.0.21.0.9-1]
- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217

[1:11.0.21.0.9-1]
- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320

[1:11.0.20.1.1-1]
- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229