[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247862

 
 

909

 
 

194603

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2020:2970-01 -- Redhat java-11-openjdk

ID: oval:org.secpod.oval:def:66558Date: (C)2020-10-30   (M)2024-02-19
Class: PATCHFamily: unix




The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix: * OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access * OpenJDK: Incomplete bounds checks in Affine Transformations * OpenJDK: Incorrect handling of access control context in ForkJoinPool * OpenJDK: Excessive memory usage in ImageIO TIFF plugin * OpenJDK: Incomplete interface type checks in Graal compiler * OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature * OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. Enhancement: * Add -static-libs subpackage with statically linked OpenJDK libraries

Platform:
CentOS 8
Product:
java-11-openjdk
Reference:
RHSA-2020:2970-01
CVE-2020-14556
CVE-2020-14562
CVE-2020-14573
CVE-2020-14577
CVE-2020-14583
CVE-2020-14593
CVE-2020-14621
CVE    7
CVE-2020-14562
CVE-2020-14573
CVE-2020-14577
CVE-2020-14621
...
CPE    2
cpe:/o:centos:centos:8
cpe:/a:openjdk:java-11-openjdk

© SecPod Technologies