RHSA-2020:0157 — Red Hat Security Advisory: java-1.8.0-openjdk security update

Fixed packages 52

Release	Package	Fixed in
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-debug	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-debuginfo	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-demo	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-demo-debug	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-devel	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-devel-debug	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-headless	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-headless-debug	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-javadoc	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-javadoc-debug	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-src	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-src-debug	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-debug	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-debuginfo	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-demo	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-demo-debug	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-devel	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-devel-debug	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-headless	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-headless-debug	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-javadoc	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-javadoc-debug	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-src	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-src-debug	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-debug	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-debuginfo	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-demo	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-demo-debug	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-devel	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-devel-debug	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-headless	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-headless-debug	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-javadoc	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-javadoc-debug	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-src	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-src-debug	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-debug	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-debuginfo	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-demo	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-demo-debug	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-devel	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-devel-debug	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-headless	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-headless-debug	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-javadoc	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-javadoc-debug	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-src	1:1.8.0.242.b07-1.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-src-debug	1:1.8.0.242.b07-1.el6_10

Vulnerabilities 7

High 8.1

CVE-2020-2604

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 15, 2020
Medium 6.8

CVE-2020-2601

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 15, 2020
Medium 4.8

CVE-2020-2593

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions th…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 15, 2020
Low 3.7

CVE-2020-2583

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 15, 2020
Low 3.7

CVE-2020-2590

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 15, 2020
Low 3.7

CVE-2020-2654

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 15, 2020
Low 3.7

CVE-2020-2659

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions th…

Oracle Java openjdk-8 openjdk8 Ubuntu Alpine

Jan 15, 2020

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=1790444
report
https://bugzilla.redhat.com/show_bug.cgi?id=1790556
report
https://bugzilla.redhat.com/show_bug.cgi?id=1790570
report
https://bugzilla.redhat.com/show_bug.cgi?id=1790884
report
https://bugzilla.redhat.com/show_bug.cgi?id=1790944
report
https://bugzilla.redhat.com/show_bug.cgi?id=1791217
report
https://bugzilla.redhat.com/show_bug.cgi?id=1791284
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0157.json
report
https://access.redhat.com/security/cve/CVE-2020-2583
advisory
https://www.cve.org/CVERecord?id=CVE-2020-2583
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-2583
report
https://access.redhat.com/security/cve/CVE-2020-2590
advisory
https://www.cve.org/CVERecord?id=CVE-2020-2590
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-2590
report
https://access.redhat.com/security/cve/CVE-2020-2593
advisory
https://www.cve.org/CVERecord?id=CVE-2020-2593
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-2593
report
https://access.redhat.com/security/cve/CVE-2020-2601
advisory
https://www.cve.org/CVERecord?id=CVE-2020-2601
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-2601
report
https://access.redhat.com/security/cve/CVE-2020-2604
advisory
https://www.cve.org/CVERecord?id=CVE-2020-2604
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-2604
article
https://www.oracle.com/technetwork/java/javase/11-0-6-oracle-relnotes-5813175.html
article
https://www.oracle.com/technetwork/java/javase/13-0-2-relnotes-5812268.html
article
https://www.oracle.com/technetwork/java/javase/8u241-relnotes-5813177.html
article
https://www.oracle.com/technetwork/java/javaseproducts/documentation/javase7supportreleasenotes-1601161.html#R170_251
report
https://access.redhat.com/security/cve/CVE-2020-2654
advisory
https://www.cve.org/CVERecord?id=CVE-2020-2654
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-2654
report
https://access.redhat.com/security/cve/CVE-2020-2659
advisory
https://www.cve.org/CVERecord?id=CVE-2020-2659
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-2659

Red Hat Security Advisory: java-1.8.0-openjdk security update

Fixed packages 52

Vulnerabilities 7

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions th…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that…

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions th…

References