Red Hat Security AdvisoryRHSA-2021:0736
java-1.8.0-ibm security update
Released 2021-03-04 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux 8 Supplementary java-1.8.0-ibm-1:1.8.0.6.25-2.el8_3, java-1.8.0-ibm-demo-1:1.8.0.6.25-2.el8_3, java-1.8.0-ibm-devel-1:1.8.0.6.25-2.el8_3 +5
Fixes 5 records
Priority MEDIUM 45
In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01551 · Published 2021-01-21 · Fixed CWE-121
Priority LOW 36
Vulnerability in the Java SE product of Oracle Java SE (component: Libraries).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0316 · Published 2020-10-21 · Fixed
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.03884 · Published 2020-04-15 · Partial fix
Priority LOW 22
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.02272 · Published 2020-10-21 · Fixed
Priority LOW 22
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.02324 · Published 2020-10-21 · Fixed
THREATIST.IORead the docs