Red Hat Security Advisory

RHSA-2020:0196

java-1.8.0-openjdk security update

Released 2020-01-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7, java-1.8.0-openjdk-headless-1:1.8.0.242.b08-0.el7_7
Red Hat Enterprise Linux Client Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.242.b08-0.el7_7, java-1.8.0-openjdk-accessibility-debug-1:1.8.0.242.b08-0.el7_7, java-1.8.0-openjdk-debug-1:1.8.0.242.b08-0.el7_7 +11
Red Hat Enterprise Linux ComputeNode (v. 7) java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7, java-1.8.0-openjdk-headless-1:1.8.0.242.b08-0.el7_7
Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.242.b08-0.el7_7, java-1.8.0-openjdk-accessibility-debug-1:1.8.0.242.b08-0.el7_7, java-1.8.0-openjdk-debug-1:1.8.0.242.b08-0.el7_7 +11
Red Hat Enterprise Linux Server (v. 7) java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7, java-1.8.0-openjdk-devel-1:1.8.0.242.b08-0.el7_7, java-1.8.0-openjdk-headless-1:1.8.0.242.b08-0.el7_7
Red Hat Enterprise Linux Server Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.242.b08-0.el7_7, java-1.8.0-openjdk-accessibility-debug-1:1.8.0.242.b08-0.el7_7, java-1.8.0-openjdk-debug-1:1.8.0.242.b08-0.el7_7 +10
Red Hat Enterprise Linux Workstation (v. 7) java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7, java-1.8.0-openjdk-devel-1:1.8.0.242.b08-0.el7_7, java-1.8.0-openjdk-headless-1:1.8.0.242.b08-0.el7_7
Red Hat Enterprise Linux Workstation Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.242.b08-0.el7_7, java-1.8.0-openjdk-accessibility-debug-1:1.8.0.242.b08-0.el7_7, java-1.8.0-openjdk-debug-1:1.8.0.242.b08-0.el7_7 +10

Fixes 7 records

TI-2020-02307 CVE-2020-2604 · GHSA-c9rv-f9qq-jjvf

Deserialization of untrusted data in Oracle Java

MEDIUM 45

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04881 Published 2020-01-15 Fixed CWE-502

TI-2020-02304 CVE-2020-2601 · GHSA-h9g7-7vx4-6649

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

LOW 37

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security).

CVSS 3.1MEDIUM 6.8 Network No auth No interaction EPSS 0.04299 Published 2020-01-15 Partial fix

TI-2020-02296 CVE-2020-2593 · GHSA-9q7r-hh98-v46j

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

LOW 27

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking).

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.0297 Published 2020-01-15 Fixed

TI-2020-02362 CVE-2020-2659 · GHSA-j2h3-xh23-6v27

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

LOW 25

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.04202 Published 2020-01-15 Fixed

TI-2020-02357 CVE-2020-2654 · GHSA-wx3r-hh3w-28wg

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries).

LOW 24

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.0396 Published 2020-01-15 Partial fix

TI-2020-02286 CVE-2020-2583 · GHSA-q9rx-vprp-mmrf

Improper handling of exceptional conditions in Oracle Java

LOW 24

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.04022 Published 2020-01-15 Fixed CWE-755

TI-2020-02293 CVE-2020-2590 · GHSA-gcq6-qg3m-6m3g

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

LOW 23

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.03161 Published 2020-01-15 Partial fix