[El-errata] ELSA-2024-8120 Moderate: Oracle Linux 7 java-11-openjdk security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2024-8120

http://linux.oracle.com/errata/ELSA-2024-8120.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
java-11-openjdk-11.0.25.0.9-1.0.1.el7_9.i686.rpm
java-11-openjdk-11.0.25.0.9-1.0.1.el7_9.x86_64.rpm
java-11-openjdk-demo-11.0.25.0.9-1.0.1.el7_9.i686.rpm
java-11-openjdk-demo-11.0.25.0.9-1.0.1.el7_9.x86_64.rpm
java-11-openjdk-devel-11.0.25.0.9-1.0.1.el7_9.i686.rpm
java-11-openjdk-devel-11.0.25.0.9-1.0.1.el7_9.x86_64.rpm
java-11-openjdk-headless-11.0.25.0.9-1.0.1.el7_9.i686.rpm
java-11-openjdk-headless-11.0.25.0.9-1.0.1.el7_9.x86_64.rpm
java-11-openjdk-javadoc-11.0.25.0.9-1.0.1.el7_9.i686.rpm
java-11-openjdk-javadoc-11.0.25.0.9-1.0.1.el7_9.x86_64.rpm
java-11-openjdk-javadoc-zip-11.0.25.0.9-1.0.1.el7_9.i686.rpm
java-11-openjdk-javadoc-zip-11.0.25.0.9-1.0.1.el7_9.x86_64.rpm
java-11-openjdk-jmods-11.0.25.0.9-1.0.1.el7_9.i686.rpm
java-11-openjdk-jmods-11.0.25.0.9-1.0.1.el7_9.x86_64.rpm
java-11-openjdk-src-11.0.25.0.9-1.0.1.el7_9.i686.rpm
java-11-openjdk-src-11.0.25.0.9-1.0.1.el7_9.x86_64.rpm
java-11-openjdk-static-libs-11.0.25.0.9-1.0.1.el7_9.i686.rpm
java-11-openjdk-static-libs-11.0.25.0.9-1.0.1.el7_9.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates//java-11-openjdk-11.0.25.0.9-1.0.1.el7_9.src.rpm

Related CVEs:

CVE-2023-48161
CVE-2024-21208
CVE-2024-21210
CVE-2024-21217
CVE-2024-21235




Description of changes:

[1:11.0.25.0.9-1.0.1]
- Update to jdk-11.0.25+9 (GA) [Orabug: 37178930]
- Fixes CVE-2024-21208 CVE-2024-21210 CVE-2024-21217 CVE-2024-21235
- Removed patches
- 1001-orabug36904359-CVE-2024-21138-fix.patch 
- 1002-orabug36904359-CVE-2024-21138-fix.patch  
- 1003-orabug36904359-CVE-2024-21140-fix-part1.patch   
- 1004-orabug36904359-CVE-2024-21140-fix-part2.patch    
- 1005-orabug36904359-CVE-2024-21144-fix.patch  
- 1006-orabug36904359-CVE-2024-21145-fix.patch  
- 1007-orabug36904359-CVE-2024-21147-fix.patch