[El-errata] ELSA-2017-2998 Critical: Oracle Linux 7 java-1.8.0-openjdk security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2017-2998

http://linux.oracle.com/errata/ELSA-2017-2998.html

The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
java-1.8.0-openjdk-1.8.0.151-1.b12.el7_4.i686.rpm
java-1.8.0-openjdk-1.8.0.151-1.b12.el7_4.x86_64.rpm
java-1.8.0-openjdk-accessibility-1.8.0.151-1.b12.el7_4.i686.rpm
java-1.8.0-openjdk-accessibility-1.8.0.151-1.b12.el7_4.x86_64.rpm
java-1.8.0-openjdk-accessibility-debug-1.8.0.151-1.b12.el7_4.i686.rpm
java-1.8.0-openjdk-accessibility-debug-1.8.0.151-1.b12.el7_4.x86_64.rpm
java-1.8.0-openjdk-debug-1.8.0.151-1.b12.el7_4.i686.rpm
java-1.8.0-openjdk-debug-1.8.0.151-1.b12.el7_4.x86_64.rpm
java-1.8.0-openjdk-demo-1.8.0.151-1.b12.el7_4.i686.rpm
java-1.8.0-openjdk-demo-1.8.0.151-1.b12.el7_4.x86_64.rpm
java-1.8.0-openjdk-demo-debug-1.8.0.151-1.b12.el7_4.i686.rpm
java-1.8.0-openjdk-demo-debug-1.8.0.151-1.b12.el7_4.x86_64.rpm
java-1.8.0-openjdk-devel-1.8.0.151-1.b12.el7_4.i686.rpm
java-1.8.0-openjdk-devel-1.8.0.151-1.b12.el7_4.x86_64.rpm
java-1.8.0-openjdk-devel-debug-1.8.0.151-1.b12.el7_4.i686.rpm
java-1.8.0-openjdk-devel-debug-1.8.0.151-1.b12.el7_4.x86_64.rpm
java-1.8.0-openjdk-headless-1.8.0.151-1.b12.el7_4.i686.rpm
java-1.8.0-openjdk-headless-1.8.0.151-1.b12.el7_4.x86_64.rpm
java-1.8.0-openjdk-headless-debug-1.8.0.151-1.b12.el7_4.i686.rpm
java-1.8.0-openjdk-headless-debug-1.8.0.151-1.b12.el7_4.x86_64.rpm
java-1.8.0-openjdk-javadoc-1.8.0.151-1.b12.el7_4.noarch.rpm
java-1.8.0-openjdk-javadoc-debug-1.8.0.151-1.b12.el7_4.noarch.rpm
java-1.8.0-openjdk-javadoc-zip-1.8.0.151-1.b12.el7_4.noarch.rpm
java-1.8.0-openjdk-javadoc-zip-debug-1.8.0.151-1.b12.el7_4.noarch.rpm
java-1.8.0-openjdk-src-1.8.0.151-1.b12.el7_4.i686.rpm
java-1.8.0-openjdk-src-1.8.0.151-1.b12.el7_4.x86_64.rpm
java-1.8.0-openjdk-src-debug-1.8.0.151-1.b12.el7_4.i686.rpm
java-1.8.0-openjdk-src-debug-1.8.0.151-1.b12.el7_4.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/java-1.8.0-openjdk-1.8.0.151-1.b12.el7_4.src.rpm



Description of changes:

[1:1.8.0.151-1.b12]
- Reverting to java-1.7.0-openjdk on AArch64 as 
rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207

[1:1.8.0.151-1.b12]
- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207

[1:1.8.0.151-0.b12]
- Update location of policy JAR files following 8157561.

[1:1.8.0.151-0.b12]
- 8188030 is not yet upstream, so it should be listed under upstreamable 
fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 & 8181810 all now in 8u162.
- Resolves: rhbz#1499207

[1:1.8.0.151-0.b12]
- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK 
is not lost.
- Resolves: rhbz#1499207

[1:1.8.0.151-0.b01]
- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207

[1:1.8.0.151-0.b12]
- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix 
RH1492139.
- Resolves: rhbz#1499207

[1:1.8.0.151-0.b12]
- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207

[1:1.8.0.151-0.b12]
- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not 
supplied by Oracle.
- Resolves: rhbz#1499207

[1:1.8.0.151-0.b12]
- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until 
RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207

[1:1.8.0.151-0.b12]
- Update to aarch64-jdk8u151-b12 and aarch64-shenandoah-jdk8u151-b12.
- Update location of OpenJDK zlib system library source code in 
remove-intree-libraries.sh
- Drop upstreamed patches for 8179084 and RH1367357 (part of 8183028).
- Update RH1191652 (root) and PR2842 to accomodate 8151841 (GCC 6 support).
- Update PR2964/RH1337583 to accomodate 8171319 (keytool warning output)
- Update RH1163501 to accomodate 8181048 (crypto refactoring)
- Resolves: rhbz#1499207

[1:1.8.0.144-1.b01]
- Add IBM-supplied Montgomery backport, backport other ppc64 fixes & add 
CFF fix
- Resolves: rhbz#1499207