Oracle Java SE Critical Patch Update

Asked by Nayan Mandal on 2020-11-26

Hello Team,

Please provide me with steps and commands on how to update the below security patches for Ubuntu 16.04.6 LTS .
Below is the current java version:

java version "1.8.0_161"
Java(TM) SE Runtime Environment (build 1.8.0_161-b12)
Java HotSpot(TM) 64-Bit Server VM (build 25.161-b12, mixed mode)

Below security patches needed to be installed.

Oracle Java SE Critical Patch Update - April 2018
Oracle Java SE Critical Patch Update - July 2018
Oracle Java SE Critical Patch Update - October 2018
Oracle Java SE Critical Patch Update - January 2019
Oracle Java SE Critical Patch Update - April 2019
Oracle Java SE Critical Patch Update - July 2019
Oracle Java SE Critical Patch Update - October 2019
Oracle Java SE Critical Patch Update - January 2020
Oracle Java SE Critical Patch Update - April 2020
Oracle Java SE Critical Patch Update - July 2020(CPUJUL2020)

Regards,
Nayan

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu openjdk-8 Edit question
Assignee:
No assignee Edit question
Last query:
2020-11-26
Last reply:
2020-11-26
Manfred Hampl (m-hampl) said : #1

For diagnostic purposes please provide the output that you receive for the commands

uname -a
lsb_release -crid
dpkg -l | grep openjdk
apt-cache policy openjdk-8-jre

Nayan Mandal (nayanmandal) said : #2

Hello Manfred,

Please find the below details:

1. 4.4.0-1117-aws #131-Ubuntu SMP Tue Oct 6 20:45:33 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux

2.

Distributor ID: Ubuntu
Description: Ubuntu 16.04.6 LTS
Release: 16.04
Codename: xenial

3.

ii openjdk-8-jdk:amd64 8u275-b01-0ubuntu1~16.04 amd64 OpenJDK Development Kit (JDK)
ii openjdk-8-jdk-headless:amd64 8u275-b01-0ubuntu1~16.04 amd64 OpenJDK Development Kit (JDK) (headless)
ii openjdk-8-jre:amd64 8u275-b01-0ubuntu1~16.04 amd64 OpenJDK Java runtime, using Hotspot JIT
ii openjdk-8-jre-headless:amd64 8u275-b01-0ubuntu1~16.04 amd64 OpenJDK Java runtime, using Hotspot JIT (headless)

4.

openjdk-8-jre:
  Installed: 8u275-b01-0ubuntu1~16.04
  Candidate: 8u275-b01-0ubuntu1~16.04
  Version table:
 *** 8u275-b01-0ubuntu1~16.04 500
        500 http://us-east-2.ec2.archive.ubuntu.com/ubuntu xenial-updates/main amd64 Packages
        500 http://security.ubuntu.com/ubuntu xenial-security/main amd64 Packages
        100 /var/lib/dpkg/status
     8u77-b03-3ubuntu3 500
        500 http://us-east-2.ec2.archive.ubuntu.com/ubuntu xenial/main amd64 Packages

Manfred Hampl (m-hampl) said : #3

The Ubuntu package management tells that you have already version 8u275 installed which is supposed to already contain the required updates. In your initial question, however, version 8u161 is shown. This is somewhat contradictory.

What output do you receive for the commands

which java
ls -l `which java`
java -version

Nayan Mandal (nayanmandal) said : #4

lrwxrwxrwx 1 root root 22 Mar 27 2018 /usr/bin/java -> /etc/alternatives/java

java version "1.8.0_161"
Java(TM) SE Runtime Environment (build 1.8.0_161-b12)
Java HotSpot(TM) 64-Bit Server VM (build 25.161-b12, mixed mode)

How did you install Oracle Java? What steps did you take?

Manfred Hampl (m-hampl) said : #6

Apparently you have two different installations of openjdk on your system - the current one from the Ubuntu repositories, but also another outdated one from a different source. Unfortunately the one that is used is the obsolete one.

What is the output of

ls -l /etc/alternatives/java
update-alternatives --list java

Nayan Mandal (nayanmandal) said : #7

It is like the other person installed the java.I did not install it.But I would like to install the security patches.So if it is like all the security patches are installed here ?

Nayan Mandal (nayanmandal) said : #8

@Manfred,

Below is he output:

ls -l /etc/alternatives/java
lrwxrwxrwx 1 root root 39 Mar 27 2018 /etc/alternatives/java -> /usr/lib/jvm/java-8-oracle/jre/bin/java

update-alternatives --list java
/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/java
/usr/lib/jvm/java-8-oracle/jre/bin/java

Manfred Hampl (m-hampl) said : #9

Ok, that is the proof of my assumption.

What is the output of the commands

/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/java -version
/usr/lib/jvm/java-8-oracle/jre/bin/java -version

Apparently you have an installation of oracle java 8u161 and an installation of openjdk 8u275.

You have to decide what you need and want. You can e.g.

uninstall oracle java and use the updated (and already patched) openjdk version
or
continue using oracle java, but if doing so, you should update the oracle java installation first

Nayan Mandal (nayanmandal) said : #10

@ Manfred,

Below is the output:

/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/java -version

openjdk version "1.8.0_275"
OpenJDK Runtime Environment (build 1.8.0_275-8u275-b01-0ubuntu1~16.04-b01)
OpenJDK 64-Bit Server VM (build 25.275-b01, mixed mode)

/usr/lib/jvm/java-8-oracle/jre/bin/java -version

java version "1.8.0_161"
Java(TM) SE Runtime Environment (build 1.8.0_161-b12)
Java HotSpot(TM) 64-Bit Server VM (build 25.161-b12, mixed mode)

Below are my questions:

1. If I want to keep both of them and with latest security patches then please let me know the commands to keep them updated.

2. If I want to uninstall java version "1.8.0_161" then please get me the commands

Manfred Hampl (m-hampl) said : #11

The steps required for oracle java depend on the way how that software was installed. I do not know any details of how this was done on your system, and so I cannot help.

The easiest temporary solution probably is the following:

Issue the command

sudo update-alternatives --configure java

and when asked for it type the number of the openjdk installation. This should instruct your system to use the openjdk version when you issue the "java" command.

Test with

java -version

afterwards.

Can you help with this problem?

Provide an answer of your own, or ask Nayan Mandal for more information if necessary.

To post a message you must log in.