Red Hat Security Advisory

RHSA-2020:2969

java-11-openjdk security update

Released 2020-07-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) java-11-openjdk-1:11.0.8.10-0.el7_8, java-11-openjdk-headless-1:11.0.8.10-0.el7_8
Red Hat Enterprise Linux Client Optional (v. 7) java-11-openjdk-demo-1:11.0.8.10-0.el7_8, java-11-openjdk-devel-1:11.0.8.10-0.el7_8, java-11-openjdk-javadoc-1:11.0.8.10-0.el7_8 +3
Red Hat Enterprise Linux ComputeNode (v. 7) java-11-openjdk-1:11.0.8.10-0.el7_8, java-11-openjdk-headless-1:11.0.8.10-0.el7_8
Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-11-openjdk-demo-1:11.0.8.10-0.el7_8, java-11-openjdk-devel-1:11.0.8.10-0.el7_8, java-11-openjdk-javadoc-1:11.0.8.10-0.el7_8 +3
Red Hat Enterprise Linux Server (v. 7) java-11-openjdk-1:11.0.8.10-0.el7_8, java-11-openjdk-devel-1:11.0.8.10-0.el7_8, java-11-openjdk-headless-1:11.0.8.10-0.el7_8
Red Hat Enterprise Linux Server Optional (v. 7) java-11-openjdk-demo-1:11.0.8.10-0.el7_8, java-11-openjdk-javadoc-1:11.0.8.10-0.el7_8, java-11-openjdk-javadoc-zip-1:11.0.8.10-0.el7_8 +2
Red Hat Enterprise Linux Workstation (v. 7) java-11-openjdk-1:11.0.8.10-0.el7_8, java-11-openjdk-devel-1:11.0.8.10-0.el7_8, java-11-openjdk-headless-1:11.0.8.10-0.el7_8
Red Hat Enterprise Linux Workstation Optional (v. 7) java-11-openjdk-demo-1:11.0.8.10-0.el7_8, java-11-openjdk-javadoc-1:11.0.8.10-0.el7_8, java-11-openjdk-javadoc-zip-1:11.0.8.10-0.el7_8 +2

TI-2020-11432 CVE-2020-14583 · GHSA-7cv6-52m7-636w

MEDIUM 45

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.0392 Published 2020-07-15 Partial fix

TI-2020-11442 CVE-2020-14593 · GHSA-5h6c-hfmg-9hrj

LOW 39

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D).

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.03846 Published 2020-07-15 Partial fix

TI-2020-11411 CVE-2020-14562 · GHSA-h9x7-6gxx-xvj2

LOW 38

Vulnerability in the Java SE product of Oracle Java SE (component: ImageIO).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.05166 Published 2020-07-15 Fixed

TI-2020-11470 CVE-2020-14621 · GHSA-p493-cq87-mf78

LOW 37

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.04471 Published 2020-07-15 Partial fix

TI-2020-11405 CVE-2020-14556 · GHSA-862j-pwc6-mxj9

LOW 28

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.03022 Published 2020-07-15 Partial fix

TI-2020-11426 CVE-2020-14577 · GHSA-hw3x-mw2m-4jxw

LOW 24

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.0338 Published 2020-07-15 Partial fix

TI-2020-11422 CVE-2020-14573 · GHSA-cpcx-4qmw-3fj8

LOW 24

Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.03405 Published 2020-07-15 Fixed