Red Hat Security Advisory: java-11-openjdk security update

Fixed packages 15

Vulnerabilities 7

• High 8.1
  CVE-2020-2604

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 15, 2020
• Medium 6.8
  CVE-2020-2601

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 15, 2020
• Medium 4.8
  CVE-2020-2593

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions th…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 15, 2020
• Medium 4.8
  CVE-2020-2655 Public exploit

  Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java…

  Oracle Java openjdk-lts openjdk11 Debian Ubuntu Alpine
  Jan 15, 2020
• Low 3.7
  CVE-2020-2583

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 15, 2020
• Low 3.7
  CVE-2020-2590

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 15, 2020
• Low 3.7
  CVE-2020-2654

  Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 15, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1790444
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1790556
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1790570
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1790884
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1790944
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1790951
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1791217
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0232.json
• report
  https://access.redhat.com/security/cve/CVE-2020-2583
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-2583
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-2583
• report
  https://access.redhat.com/security/cve/CVE-2020-2590
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-2590
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-2590
• report
  https://access.redhat.com/security/cve/CVE-2020-2593
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-2593
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-2593
• report
  https://access.redhat.com/security/cve/CVE-2020-2601
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-2601
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-2601
• report
  https://access.redhat.com/security/cve/CVE-2020-2604
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-2604
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-2604
• article
  https://www.oracle.com/technetwork/java/javase/11-0-6-oracle-relnotes-5813175.html
• article
  https://www.oracle.com/technetwork/java/javase/13-0-2-relnotes-5812268.html
• article
  https://www.oracle.com/technetwork/java/javase/8u241-relnotes-5813177.html
• article
  https://www.oracle.com/technetwork/java/javaseproducts/documentation/javase7supportreleasenotes-1601161.html#R170_251
• report
  https://access.redhat.com/security/cve/CVE-2020-2654
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-2654
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-2654
• report
  https://access.redhat.com/security/cve/CVE-2020-2655
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-2655
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-2655