java-1.8.0-openjdk-1.8.0.282.b08-2.el8

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime
Environment and the OpenJDK 8 Java Software Development Kit.

Bug Fix(es) and Enhancement(s):

* Currently, Java applications run with Speculative Store Bypass (SSB,
CVE-2018-3639) disabled. Disabling SSB results in a performance degradation.
With this update, SSB is only disabled when applications are run via the new
'alt-java' launcher.

* Rebase to OpenJDK quarterly update 8u282. See release notes for full
details

* Support for FIPS in OpenJDK relies on the Network Security Services (NSS) library. However, this was not expressed as an RPM dependency, so systems without NSS installed already would fail in FIPS mode. The OpenJDK RPMs now depend on NSS explicitly.

CVE-2018-3639
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.