[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249461

 
 

909

 
 

195508

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CESA-2020:2968 -- centos 7 java-1.8.0-openjdk

ID: oval:org.secpod.oval:def:205597Date: (C)2020-09-03   (M)2024-02-19
Class: PATCHFamily: unix




The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix: * OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access * OpenJDK: Incomplete bounds checks in Affine Transformations * OpenJDK: Incorrect handling of access control context in ForkJoinPool * OpenJDK: Unexpected exception raised by DerInputStream * OpenJDK: Unexpected exception raised by DerValue.equals * OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature * OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.

Platform:
CentOS 7
Product:
java-1.8.0-openjdk
Reference:
CESA-2020:2968
CVE-2020-14556
CVE-2020-14577
CVE-2020-14578
CVE-2020-14579
CVE-2020-14583
CVE-2020-14593
CVE-2020-14621
CVE    7
CVE-2020-14577
CVE-2020-14621
CVE-2020-14556
CVE-2020-14578
...
CPE    2
cpe:/o:centos:centos:7
cpe:/a:oracle:java-1.8.0-openjdk

© SecPod Technologies