Red Hat Security Advisory

RHSA-2020:2970

java-11-openjdk security and enhancement update

Released 2020-07-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) java-11-openjdk-1:11.0.8.10-0.el8_2, java-11-openjdk-demo-1:11.0.8.10-0.el8_2, java-11-openjdk-devel-1:11.0.8.10-0.el8_2 +6

TI-2020-11432 CVE-2020-14583 · GHSA-7cv6-52m7-636w

MEDIUM 45

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.0392 Published 2020-07-15 Partial fix

TI-2020-11442 CVE-2020-14593 · GHSA-5h6c-hfmg-9hrj

LOW 39

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D).

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.03846 Published 2020-07-15 Partial fix

TI-2020-11411 CVE-2020-14562 · GHSA-h9x7-6gxx-xvj2

LOW 38

Vulnerability in the Java SE product of Oracle Java SE (component: ImageIO).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.05166 Published 2020-07-15 Fixed

TI-2020-11470 CVE-2020-14621 · GHSA-p493-cq87-mf78

LOW 37

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.04471 Published 2020-07-15 Partial fix

TI-2020-11405 CVE-2020-14556 · GHSA-862j-pwc6-mxj9

LOW 28

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.03022 Published 2020-07-15 Partial fix

TI-2020-11426 CVE-2020-14577 · GHSA-hw3x-mw2m-4jxw

LOW 24

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.0338 Published 2020-07-15 Partial fix

TI-2020-11422 CVE-2020-14573 · GHSA-cpcx-4qmw-3fj8

LOW 24

Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.03405 Published 2020-07-15 Fixed