RHBA-2016:1409 - Bug Fix Advisory

Topic

Updated java-1.8.0-openjdk packages that fix one bug are now available for Red Hat Enterprise Linux 6.

Description

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

This update fixes the following bug:

• Prior to this update, a list of elliptic curves provided by an OpenJDK Secure Sockets Layer (SSL) server to a client included some elliptic curves that were not supported. As a consequence, the connection failed when the client selected an unsupported elliptic curve from the list. This update fixes the list of elliptic curves reported by OpenJDK to match the ones OpenJDK can provide. As a result, the connection no longer fails in the described situation. (BZ#1348525)

Users of java-1.8.0-openjdk are advised to upgrade to these updated packages, which fix this bug. All running instances of OpenJDK Java must be restarted for the update to take effect.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64

Fixes

• BZ - 1348525 - OpenJDK should report the elliptic curves supported by NSS, not the SunEC library

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal