Red Hat Security Advisory

RHSA-2021:0717

java-1.8.0-ibm security update

Released 2021-03-04 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.6.25-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.6.25-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.6.25-1jpp.1.el7 +3
Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.6.25-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.6.25-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.6.25-1jpp.1.el7 +1
Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.6.25-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.6.25-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.6.25-1jpp.1.el7 +3
Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.6.25-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.6.25-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.6.25-1jpp.1.el7 +3

Fixes 5 records

TI-2020-16547 CVE-2020-27221 · GHSA-768g-gf3v-34vm

Stack-based buffer overflow in Eclipse OpenJ9

MEDIUM 45

In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01551 Published 2021-01-21 Fixed CWE-121

TI-2020-11638 CVE-2020-14803 · GHSA-5frm-fh7j-wpfx

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries).

LOW 36

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0316 Published 2020-10-21 Fixed

TI-2020-02474 CVE-2020-2773 · GHSA-8h5j-9c7f-7mm6

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

LOW 24

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.03884 Published 2020-04-15 Partial fix

TI-2020-11617 CVE-2020-14782 · GHSA-2r7j-vm47-9h8m

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

LOW 22

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.02272 Published 2020-10-21 Fixed

TI-2020-11616 CVE-2020-14781 · GHSA-285p-hp2m-592x

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

LOW 22

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.02324 Published 2020-10-21 Fixed