You are here
Home > Preporuke > Ranjivost programskog paketa java-1.8.0-openjdk

Ranjivost programskog paketa java-1.8.0-openjdk

by ncert - 0

——————————————————————————–
Fedora Update Notification
FEDORA-2015-8264
2015-05-15 09:47:49
——————————————————————————–

Name : java-1.8.0-openjdk
Product : Fedora 21
Version : 1.8.0.45
Release : 38.b14.fc21
URL : http://openjdk.java.net/
Summary : OpenJDK Runtime Environment
Description :
The OpenJDK runtime environment.

——————————————————————————–
Update Information:

updated to 8u45-b14. fixes rhbz#1123870
——————————————————————————–
ChangeLog:

* Wed May 13 2015 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.45-35.b14
– updated to 8u45-b14 with hope to fix rhbz#1123870
– sync with f22
* Wed Apr 29 2015 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.45-35.b13
– Omit jsa files from power64 file list as well, as they are never generated
– moved to boot build by openjdk8
– Use the template interpreter on ppc64le
* Fri Apr 10 2015 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.45-31.b13
– repacked sources
* Tue Apr 7 2015 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.45-30.b13
– updated to security u45
– added patch d318d83c4e74.patch
– added rhbz1206656_fix_current_stack_pointer.patch
– renamed PStack-808293.patch -> java-1.8.0-openjdk-PStack-808293.patch
– renamed remove-intree-libraries.sh -> java-1.8.0-openjdk-remove-intree-libraries.sh
– renamed to preven conflix with jdk7
* Thu Apr 2 2015 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.40-27.b25
– bumped release. Needed rebuild by itself on arm
* Tue Mar 31 2015 Severin Gehwolf <sgehwolf@redhat.com> – 1:1.8.0.40-26.b25
– Make Zero build-able on ARM32.
Resolves: RHBZ#1206656
* Fri Mar 27 2015 Dan Horák <dan[at]danny.cz> – 1:1.8.0.40-25.b25
– refresh s390 patches
* Fri Mar 27 2015 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.40-24.b25
– added patch501 1182011_JavaPrintApiDoesNotPrintUmlautCharsWithPostscriptOutputCorrectly.patch
– added patch502 1182694_javaApplicationMenuMisbehave.patch
– both upstreamed, will be gone with u60
* Wed Mar 25 2015 Omair Majid <omajid@redhat.com> – 1:1.8.0.40-23.b25
– Disable various EC algorithms in configuration
* Mon Mar 23 2015 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.40-22.b25
– sytemtap made working for dual package
* Tue Mar 3 2015 Severin Gehwolf <sgehwolf@redhat.com> – 1:1.8.0.40-21.b25
– Added compiler no-warn-
* Fri Feb 20 2015 Omair Majid <omajid@redhat.com> – 1:1.8.0.40-21.b25
– Fix zero interpreter build.
* Thu Feb 12 2015 Omair Majid <omajid@redhat.com> – 1:1.8.0.40-21.b25
– Fix building with gcc 5 by ignoring return-local-addr warning
– Include additional debugging info for java class files and test that they are
present
* Thu Feb 12 2015 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.40-20.b25
– bumped to b25
– removed upstreamed patch11 hotspot-build-j-directive.patch
– policies repacked to stop spamming yum update
– added and used source20 repackReproduciblePolycies.sh
– added mehanism to force priority size
* Fri Jan 9 2015 Dan Horák <dan[at]danny.cz> – 1:1.8.0.40-19.b12
– refresh s390 patches
——————————————————————————–
References:

[ 1 ] Bug #1123870 – CVE-2015-0383 OpenJDK: insecure hsperfdata temporary file handling (Hotspot, 8050807)
https://bugzilla.redhat.com/show_bug.cgi?id=1123870
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update java-1.8.0-openjdk’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

 

 

 

 

——————————————————————————–
Fedora Update Notification
FEDORA-2015-8226
2015-05-14 20:23:38
——————————————————————————–

Name : java-1.8.0-openjdk
Product : Fedora 22
Version : 1.8.0.45
Release : 38.b14.fc22
URL : http://openjdk.java.net/
Summary : OpenJDK Runtime Environment
Description :
The OpenJDK runtime environment.

——————————————————————————–
Update Information:

updated to 8u45-b14. fixes rhbz#1123870
——————————————————————————–
ChangeLog:

* Wed May 13 2015 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.45-38.b14
– updated to 8u45-b14 with hope to fix rhbz#1123870
* Wed May 13 2015 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.45-37.b13
– added runtime requires for tzdata
– Remove reference to tz.properties which is no longer used (by gnu.andrew)
——————————————————————————–
References:

[ 1 ] Bug #1123870 – CVE-2015-0383 OpenJDK: insecure hsperfdata temporary file handling (Hotspot, 8050807)
https://bugzilla.redhat.com/show_bug.cgi?id=1123870
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update java-1.8.0-openjdk’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

 

 

 

 

——————————————————————————–
Fedora Update Notification
FEDORA-2015-8251
2015-05-15 09:47:21
——————————————————————————–

Name : java-1.8.0-openjdk
Product : Fedora 20
Version : 1.8.0.45
Release : 38.b14.fc20
URL : http://openjdk.java.net/
Summary : OpenJDK Runtime Environment
Description :
The OpenJDK runtime environment.

——————————————————————————–
Update Information:

updated to 8u45-b14 with hope to fix rhbz#1123870
This update adds debugging information to all the Java code included in the JDK, make it easier to debug the code.
——————————————————————————–
ChangeLog:

* Wed May 13 2015 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.45-35.b14
– updated to 8u45-b14 with hope to fix rhbz#1123870
* Thu Apr 16 2015 Omair Majid <omajid@redhat.com> – 1:1.8.0.45-32.b13
– Build all java code with -g
– Test at build-time to ensure debugging information is included
– Resolves: rhbz#1150932
* Fri Apr 10 2015 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.45-31.b13
– repacked sources
– added Patch204: zero-interpreter-fix.patch
* Tue Apr 7 2015 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.45-30.b13
– updated to security u45
– deleted hotspot-build-j-directive.patch
– adapted generate_source_tarball.sh, removeSunEcProvider-RH1154143.patch,
repackReproduciblePolycies.sh
* Thu Feb 12 2015 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.25-4.b12
– policies repacked to stop spamming yum update
– added and used source20 repackReproduciblePolycies.sh
– added mehanism to force priority size
* Mon Jan 12 2015 Severin Gehwolf <sgehwolf@redhat.com> – 1:1.8.0.31-1.b13
– Update to January CPU patch update.
* Fri Nov 7 2014 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.25-4.b12
– updated arm64 tarball to jdk8-jdk8u40-b12-aarch64-1263.tar.xz
* Mon Nov 3 2014 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.25-3.b12
– updated aarch64 tarball to u40b12
* Fri Oct 24 2014 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.25-2.b18
– added patch12,removeSunEcProvider-RH1154143
– Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com)
– Resolves: rhbz#1125260
* Mon Oct 20 2014 Omair Majid <omajid@redhat.com> – 1:1.8.0.25-1.b18
– Apply patches accidentally left out
* Wed Oct 15 2014 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.25-0.b18
– updated to security u25
– partial sync with f21
* Wed Sep 17 2014 Omair Majid <omajid@redhat.com> – 1:1.8.0.10-10.b26
– Remove LIBDIR and funny definition of _libdir.
– Fix rpmlint warnings about macros in comments.
* Fri Aug 22 2014 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.11-9.b12
– fixed update to f21
– alternatrives forced to removal if there is more then one jdk even if it si update
– and of course in case of removal
– note: jdk f20 do not support multiple installs, jdk f21 do
* Fri Aug 15 2014 Omair Majid <omajid@redhat.com> – 1:1.8.0.11-8.b12
– Include all sources in src.zip
– Resolves rhbz#1130490
* Mon Jul 21 2014 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.11-7.b12
– removed legacy aarch64 switches
– –with-jvm-variants=client and –disable-precompiled-headers
– added patch patch9999 enableArm64.patch to enable new hotspot
* Tue Jul 15 2014 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.11-5.b12
– Attempt to update aarch64 *jdk* to u11b12, by resticting aarch64 sources to hotpot only
– partial sync with f21
* Tue Jul 15 2014 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.11-1.b12
– updated to security u11b12
* Wed May 28 2014 Omair Majid <omajid@redhat.com> – 1:1.8.0.5-4.b13
– Backport fix for JDK-8012224
* Fri May 16 2014 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.5-3.b13
– Disable doclint for compatiblity
– Patch contributed by Andrew John Hughes
* Wed Apr 23 2014 Omair Majid <omajid@redhat.com> – 1:1.8.0.5-2.b13
– Change make flags to fix debuginfo generation
– Fix suggested by Yasumasa Suenaga
* Wed Apr 16 2014 Omair Majid <omajid@redhat.com> – 1:1.8.0.5-1.b13
– Update to the 2014-04-15 security update.
* Tue Mar 11 2014 Omair Majid <omajid@redhat.com> – 1:1.8.0.0-0.34.b132
– Include jdeps and jjs for aarch64. These are present in b128.
* Mon Mar 10 2014 Omair Majid <omajid@redhat.com> – 1:1.8.0.0-0.33.b132
– Update aarch64 tarball to the latest upstream release
* Fri Mar 7 2014 Omair Majid <omajid@redhat.com> – 1:1.8.0.0-0.32.b132
– Fix `java -version` output
* Fri Mar 7 2014 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.0-0.31.b132
– updated to rc4 aarch64 tarball
– outdated removed: patch2031 system-lcmsAARCH64.patch patch2011 system-libjpeg-aarch64.patch
patch2021 system-libpng-aarch64.patch
* Thu Mar 6 2014 Omair Majid <omajid@redhat.com> – 1:1.8.0.0-0.30.b132
– Update to b132
* Thu Mar 6 2014 Omair Majid <omajid@redhat.com> – 1:1.8.0.0-0.29.b129
– Fix typo in STRIP_POLICY
* Mon Mar 3 2014 Omair Majid <omajid@redhat.com> – 1:1.8.0.0-0.28.b129
– Remove redundant debuginfo files
– Generate complete debug information for libjvm
* Tue Feb 25 2014 Omair Majid <omajid@redhat.com> – 1:1.8.0.0-0.27.b129
– Fix non-headless libraries
* Tue Feb 25 2014 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.0-0.26.b129
– Fix incorrect Requires
* Thu Feb 13 2014 Omair Majid <omajid@redhat.com> – 1:1.8.0.0-0.26.b129
– Add -headless subpackage based on java-1.7.0-openjdk
– Add abrt connector support
– Add -accessibility subpackage
* Thu Feb 13 2014 Omair Majid <omajid@redhat.com> – 1:1.8.0.0-0.26.b129
– Update to b129.
* Fri Feb 7 2014 Omair Majid <omajid@redhat.com> – 1:1.8.0.0-0.25.b126
– Update to candidate Reference Implementation release.
* Fri Jan 31 2014 Omair Majid <omajid@redhat.com> – 1:1.8.0.0-0.24.b123
– Forward port more patches from java-1.7.0-openjdk
* Mon Jan 20 2014 Omair Majid <omajid@redhat.com> – 1:1.8.0.0-0.23.b123
– Update to jdk8-b123
* Thu Nov 14 2013 Omair Majid <omajid@redhat.com> – 1:1.8.0.0-0.22.b115
– Update to jdk8-b115
* Wed Oct 30 2013 Jiri Vanek <jvanek@redhat.com> – 1:1.8.0.0-0.21.b106
– added jre/lib/security/blacklisted.certs for aarch64
– updated to preview_rc2 aarch64 tarball
* Sun Oct 6 2013 Omair Majid <omajid@redhat.com> – 1:1.8.0.0-0.20.b106
– Fix paths in tapsets to work on non-x86_64
– Use system libjpeg
——————————————————————————–
References:

[ 1 ] Bug #1123870 – CVE-2015-0383 OpenJDK: insecure hsperfdata temporary file handling (Hotspot, 8050807)
https://bugzilla.redhat.com/show_bug.cgi?id=1123870
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update java-1.8.0-openjdk’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

 

 

ncert
Top
More in Preporuke
Sigurnosni nedostaci programskog paketa thunderbird

Otkriveni su sigurnosni nedostaci u programskom paketu thunderbird za operacijski sustav Red Hat. Otkriveni nedostaci potencijalnim napadačima omogućuju izvršavanje proizvoljnog...

Close