RHBA-2022:0936 - Bug Fix Advisory

Topic

An update for java-11-openjdk is now available for Red Hat Enterprise Linux 8.

Description

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Bug Fix(es):

• The previous OpenJDK 11 release, 11.0.14, was found to contain a regression introduced by improvements to the HTTP client. It caused both the ':authority' and 'Host' header fields to be sent in HTTP/2 requests, which is rejected by some HTTP servers, such as Google's. With this update, the previous behaviour of only setting the ':authority' header is now used. (RH#2053171)
• Recent changes to the Lightweight Directory Access Protocol (LDAP) implementation in OpenJDK changed the behaviour when an authentication failure occurred. Instead of aborting immediately, all available LDAP servers would be tried with the same credentials. With this update, the previous behaviour of failure after the first authentication denial is restored. (RH#2055341)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of OpenJDK Java must be restarted for this update to take effect.

Affected Products

• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.1 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.1 x86_64

Fixes

• BZ - 2053171 - Update to 11.0.14.1 Interim Release [rhel-8] [rhel-8.1.0.z]
• BZ - 2055341 - Retrying a failed authentication on multiple LDAP servers can lead to users blocked [rhel-8, openjdk-11] [rhel-8.1.0.z]

CVEs

(none)

References

(none)