RHSA-2020:2985 — Red Hat Security Advisory: java-1.8.0-openjdk security update

Fixed packages 52

Release	Package	Fixed in
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-debug	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-debuginfo	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-demo	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-demo-debug	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-devel	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-devel-debug	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-headless	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-headless-debug	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-javadoc	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-javadoc-debug	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-src	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client	java-1.8.0-openjdk-src-debug	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-debug	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-debuginfo	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-demo	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-demo-debug	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-devel	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-devel-debug	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-headless	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-headless-debug	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-javadoc	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-javadoc-debug	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-src	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode	java-1.8.0-openjdk-src-debug	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-debug	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-debuginfo	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-demo	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-demo-debug	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-devel	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-devel-debug	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-headless	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-headless-debug	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-javadoc	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-javadoc-debug	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-src	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server	java-1.8.0-openjdk-src-debug	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-debug	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-debuginfo	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-demo	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-demo-debug	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-devel	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-devel-debug	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-headless	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-headless-debug	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-javadoc	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-javadoc-debug	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-src	1:1.8.0.262.b10-0.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation	java-1.8.0-openjdk-src-debug	1:1.8.0.262.b10-0.el6_10

Vulnerabilities 7

High 8.3

CVE-2020-14583

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 15, 2020
High 7.4

CVE-2020-14593

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are a…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 15, 2020
Medium 5.3

CVE-2020-14621

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 15, 2020
Medium 4.8

CVE-2020-14556

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 15, 2020
Low 3.7

CVE-2020-14577

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 15, 2020
Low 3.7

CVE-2020-14578

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Oracle Java openjdk-8 openjdk8 Debian Ubuntu Alpine

Jul 15, 2020
Low 3.7

CVE-2020-14579

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Oracle Java openjdk-8 openjdk8 Debian Ubuntu Alpine

Jul 15, 2020

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=1856448
report
https://bugzilla.redhat.com/show_bug.cgi?id=1856784
report
https://bugzilla.redhat.com/show_bug.cgi?id=1856885
report
https://bugzilla.redhat.com/show_bug.cgi?id=1856896
report
https://bugzilla.redhat.com/show_bug.cgi?id=1856988
report
https://bugzilla.redhat.com/show_bug.cgi?id=1856991
report
https://bugzilla.redhat.com/show_bug.cgi?id=1856995
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2985.json
report
https://access.redhat.com/security/cve/CVE-2020-14556
advisory
https://www.cve.org/CVERecord?id=CVE-2020-14556
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-14556
report
https://access.redhat.com/security/cve/CVE-2020-14577
advisory
https://www.cve.org/CVERecord?id=CVE-2020-14577
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-14577
report
https://access.redhat.com/security/cve/CVE-2020-14578
advisory
https://www.cve.org/CVERecord?id=CVE-2020-14578
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-14578
report
https://access.redhat.com/security/cve/CVE-2020-14579
advisory
https://www.cve.org/CVERecord?id=CVE-2020-14579
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-14579
report
https://access.redhat.com/security/cve/CVE-2020-14583
advisory
https://www.cve.org/CVERecord?id=CVE-2020-14583
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-14583
report
https://access.redhat.com/security/cve/CVE-2020-14593
advisory
https://www.cve.org/CVERecord?id=CVE-2020-14593
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-14593
report
https://access.redhat.com/security/cve/CVE-2020-14621
advisory
https://www.cve.org/CVERecord?id=CVE-2020-14621
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-14621

Red Hat Security Advisory: java-1.8.0-openjdk security update

Fixed packages 52

Vulnerabilities 7

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are a…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

References