First Last Prev Next    This bug is not in your last search results.
Bug 53155 - openjdk-8: Multiple issues (4.4)
openjdk-8: Multiple issues (4.4)
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Security updates
UCS 4.4
All Linux
: P3 normal (vote)
: UCS 4.4-8-errata
Assigned To: Quality Assurance
Erik Damrose
:
Depends on:
Blocks:
  Show dependency tree / graph
 
Reported: 2021-04-26 09:29 CEST by Quality Assurance
Modified: 2021-04-28 13:57 CEST (History)
0 users

See Also:
What kind of report is it?: Security Issue
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Quality Assurance univentionstaff 2021-04-26 09:29:02 CEST 
New Debian openjdk-8 8u292-b10-0+deb9u1 fixes:
This update addresses the following issue:
* Incorrect handling of partially quoted arguments in ProcessBuilder on  Windows (Libraries, 8250568) (CVE-2021-2161)
Comment 1 Quality Assurance univentionstaff 2021-04-26 10:00:34 CEST 
--- mirror/ftp/4.4/unmaintained/4.4-8/source/openjdk-8_8u275-b01-1~deb9u1.dsc
+++ apt/ucs_4.4-0-errata4.4-8/source/openjdk-8_8u292-b10-0+deb9u1.dsc
@@ -1,3 +1,32 @@
+8u292-b10-0+deb9u1 [Wed, 21 Apr 2021 13:13:15 +0200] Emilio Pozuelo Monfort <pochu@debian.org>:
+
+  * Merge with Ubuntu.
+  * Update to 8u292-b10 (GA).
+
+8u292-b10-0ubuntu1 [Wed, 21 Apr 2021 12:25:15 +0200] Matthias Klose <doko@ubuntu.com>:
+
+  * Update to 8u292-b10 (GA).
+  * Security fixes
+    - JDK-8227467: Better class method invocations
+    - JDK-8244473: Contextualize registration for JNDI
+    - JDK-8244543: Enhanced handling of abstract classes
+    - JDK-8249906, CVE-2021-2163: Enhance opening JARs
+    - JDK-8250568, CVE-2021-2161: Less ambiguous processing
+    - JDK-8253799: Make lists of normal filenames
+  * Other changes:
+    See https://mail.openjdk.java.net/pipermail/jdk8u-dev/2021-April/013680.html
+
+8u282-b08-0ubuntu1 [Wed, 20 Jan 2021 00:48:04 +0000] Tiago Stürmer Daitx <tiago.daitx@ubuntu.com>:
+
+  * Update to 8u282-b08 (GA).
+  * Update AArch64 hotspot to 8u282-b07 and AArch32 hotspot to 8u282-b07.
+
+8u282-b07-0ubuntu1 [Thu, 07 Jan 2021 00:16:35 +0000] Tiago Stürmer Daitx <tiago.daitx@ubuntu.com>:
+
+  * Update to 8u282-b07 (early access build).
+  * Update AArch64 hotspot to 8u282-b03 and AArch32 hotspot to 8u282-b06.
+  * Update patches.
+
 8u275-b01-1~deb9u1 [Wed, 02 Dec 2020 11:15:53 +0100] Thorsten Glaser <tg@mirbsd.de>:
 
   * Team upload.

<http://piuparts.knut.univention.de/4.4-8/#2737311640170502350>
Comment 2 Erik Damrose univentionstaff 2021-04-28 13:22:18 CEST 
OK: yaml
OK: announce_errata
OK: patch
OK: piuparts

[4.4-8] 3e94909562 Bug #53155: openjdk-8 8u292-b10-0+deb9u1
 doc/errata/staging/openjdk-8.yaml | 13 +++++++++++++
 1 file changed, 13 insertions(+)
First Last Prev Next    This bug is not in your last search results.