Red Hat Security Advisory

RHSA-2020:4350

java-1.8.0-openjdk security and bug fix update

Released 2020-10-27 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) java-1.8.0-openjdk-1:1.8.0.272.b10-1.el7_9, java-1.8.0-openjdk-headless-1:1.8.0.272.b10-1.el7_9
Red Hat Enterprise Linux Client Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.272.b10-1.el7_9, java-1.8.0-openjdk-demo-1:1.8.0.272.b10-1.el7_9, java-1.8.0-openjdk-devel-1:1.8.0.272.b10-1.el7_9 +3
Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.272.b10-1.el7_9, java-1.8.0-openjdk-demo-1:1.8.0.272.b10-1.el7_9, java-1.8.0-openjdk-devel-1:1.8.0.272.b10-1.el7_9 +3
Red Hat Enterprise Linux Server (v. 7) java-1.8.0-openjdk-1:1.8.0.272.b10-1.el7_9, java-1.8.0-openjdk-devel-1:1.8.0.272.b10-1.el7_9, java-1.8.0-openjdk-headless-1:1.8.0.272.b10-1.el7_9
Red Hat Enterprise Linux Server Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.272.b10-1.el7_9, java-1.8.0-openjdk-demo-1:1.8.0.272.b10-1.el7_9, java-1.8.0-openjdk-javadoc-1:1.8.0.272.b10-1.el7_9 +2
Red Hat Enterprise Linux Workstation (v. 7) java-1.8.0-openjdk-1:1.8.0.272.b10-1.el7_9, java-1.8.0-openjdk-devel-1:1.8.0.272.b10-1.el7_9, java-1.8.0-openjdk-headless-1:1.8.0.272.b10-1.el7_9
Red Hat Enterprise Linux Workstation Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.272.b10-1.el7_9, java-1.8.0-openjdk-demo-1:1.8.0.272.b10-1.el7_9, java-1.8.0-openjdk-javadoc-1:1.8.0.272.b10-1.el7_9 +2

TI-2020-11638 CVE-2020-14803 · GHSA-5frm-fh7j-wpfx

LOW 36

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0316 Published 2020-10-21 Fixed

TI-2020-11627 CVE-2020-14792 · GHSA-gx8h-w6f7-x7qf

LOW 24

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 4.2 Network No auth User interaction EPSS 0.0223 Published 2020-10-21 Fixed

TI-2020-11614 CVE-2020-14779 · GHSA-ppr6-rwxr-hfr8

LOW 24

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.03758 Published 2020-10-21 Fixed

TI-2020-11632 CVE-2020-14797 · GHSA-wgvf-93f7-fwc3

LOW 22

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.02196 Published 2020-10-21 Fixed

TI-2020-11617 CVE-2020-14782 · GHSA-2r7j-vm47-9h8m

LOW 22

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.02272 Published 2020-10-21 Fixed

TI-2020-11616 CVE-2020-14781 · GHSA-285p-hp2m-592x

LOW 22

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.02324 Published 2020-10-21 Fixed

TI-2020-11631 CVE-2020-14796 · GHSA-xvc4-7pr5-9qg4

LOW 20

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.02493 Published 2020-10-21 Fixed