Red Hat Security Advisory

RHSA-2020:4348

java-1.8.0-openjdk security update

Released 2020-10-27 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) java-1.8.0-openjdk-1:1.8.0.272.b10-0.el6_10, java-1.8.0-openjdk-headless-1:1.8.0.272.b10-0.el6_10
Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.8.0-openjdk-debug-1:1.8.0.272.b10-0.el6_10, java-1.8.0-openjdk-demo-1:1.8.0.272.b10-0.el6_10, java-1.8.0-openjdk-demo-debug-1:1.8.0.272.b10-0.el6_10 +7
Red Hat Enterprise Linux HPC Node (v. 6) java-1.8.0-openjdk-1:1.8.0.272.b10-0.el6_10, java-1.8.0-openjdk-devel-1:1.8.0.272.b10-0.el6_10, java-1.8.0-openjdk-headless-1:1.8.0.272.b10-0.el6_10
Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.8.0-openjdk-debug-1:1.8.0.272.b10-0.el6_10, java-1.8.0-openjdk-demo-1:1.8.0.272.b10-0.el6_10, java-1.8.0-openjdk-demo-debug-1:1.8.0.272.b10-0.el6_10 +6
Red Hat Enterprise Linux Server (v. 6) java-1.8.0-openjdk-1:1.8.0.272.b10-0.el6_10, java-1.8.0-openjdk-devel-1:1.8.0.272.b10-0.el6_10, java-1.8.0-openjdk-headless-1:1.8.0.272.b10-0.el6_10
Red Hat Enterprise Linux Server Optional (v. 6) java-1.8.0-openjdk-debug-1:1.8.0.272.b10-0.el6_10, java-1.8.0-openjdk-demo-1:1.8.0.272.b10-0.el6_10, java-1.8.0-openjdk-demo-debug-1:1.8.0.272.b10-0.el6_10 +6
Red Hat Enterprise Linux Workstation (v. 6) java-1.8.0-openjdk-1:1.8.0.272.b10-0.el6_10, java-1.8.0-openjdk-devel-1:1.8.0.272.b10-0.el6_10, java-1.8.0-openjdk-headless-1:1.8.0.272.b10-0.el6_10
Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.8.0-openjdk-debug-1:1.8.0.272.b10-0.el6_10, java-1.8.0-openjdk-demo-1:1.8.0.272.b10-0.el6_10, java-1.8.0-openjdk-demo-debug-1:1.8.0.272.b10-0.el6_10 +6

Fixes 7 records

TI-2020-11638 CVE-2020-14803 · GHSA-5frm-fh7j-wpfx

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries).

LOW 36

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0316 Published 2020-10-21 Fixed

TI-2020-11627 CVE-2020-14792 · GHSA-gx8h-w6f7-x7qf

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

LOW 24

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 4.2 Network No auth User interaction EPSS 0.0223 Published 2020-10-21 Fixed

TI-2020-11614 CVE-2020-14779 · GHSA-ppr6-rwxr-hfr8

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

LOW 24

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.03758 Published 2020-10-21 Fixed

TI-2020-11632 CVE-2020-14797 · GHSA-wgvf-93f7-fwc3

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

LOW 22

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.02196 Published 2020-10-21 Fixed

TI-2020-11617 CVE-2020-14782 · GHSA-2r7j-vm47-9h8m

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

LOW 22

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.02272 Published 2020-10-21 Fixed

TI-2020-11616 CVE-2020-14781 · GHSA-285p-hp2m-592x

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

LOW 22

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.02324 Published 2020-10-21 Fixed

TI-2020-11631 CVE-2020-14796 · GHSA-xvc4-7pr5-9qg4

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

LOW 20

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.02493 Published 2020-10-21 Fixed