Red Hat Security Advisory: java-1.8.0-ibm security update

Fixed packages 6

Vulnerabilities 13

• High 8.3
  CVE-2020-14583

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jul 15, 2020
• High 7.4
  CVE-2020-14593

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are a…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jul 15, 2020
• Medium 6.8
  CVE-2020-2601

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 15, 2020
• Medium 5.3
  CVE-2020-14621

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jul 15, 2020
• Medium 4.8
  CVE-2020-14556

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jul 15, 2020
• Low 3.7
  CVE-2020-14577

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jul 15, 2020
• Low 3.7
  CVE-2020-14578

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

  Oracle Java openjdk-8 openjdk8 Debian Ubuntu Alpine
  Jul 15, 2020
• Low 3.7
  CVE-2020-14579

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

  Oracle Java openjdk-8 openjdk8 Debian Ubuntu Alpine
  Jul 15, 2020
• Low 3.7
  CVE-2020-14779

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 21, 2020
• Low 3.7
  CVE-2020-14797

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 21, 2020
• Low 3.7
  CVE-2020-2590

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 15, 2020
• Low 3.1
  CVE-2020-14796

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 21, 2020
• Unscored —
  CVE-2019-17639

  In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer th…

  The Eclipse Foundation Eclipse OpenJ9
  Jul 15, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1790556
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1790570
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1856448
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1856784
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1856885
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1856896
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1856988
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1856991
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1856995
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1866497
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1889271
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1889697
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1889717
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5585.json
• report
  https://access.redhat.com/security/cve/CVE-2019-17639
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-17639
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-17639
• report
  https://access.redhat.com/security/cve/CVE-2020-2590
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-2590
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-2590
• report
  https://access.redhat.com/security/cve/CVE-2020-2601
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-2601
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-2601
• report
  https://access.redhat.com/security/cve/CVE-2020-14556
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-14556
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-14556
• report
  https://access.redhat.com/security/cve/CVE-2020-14577
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-14577
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-14577
• report
  https://access.redhat.com/security/cve/CVE-2020-14578
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-14578
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-14578
• report
  https://access.redhat.com/security/cve/CVE-2020-14579
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-14579
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-14579
• report
  https://access.redhat.com/security/cve/CVE-2020-14583
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-14583
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-14583