Synopsis:          Important: java-1.8.0-openjdk security update
Advisory ID:       SLSA-2020:2968-1
Issue Date:        2020-07-16
CVE Numbers:       None
--

Security Fix(es):

* OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access
(Libraries, 8238920) (CVE-2020-14583)

* OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119)
(CVE-2020-14593)

* OpenJDK: Incorrect handling of access control context in ForkJoinPool
(Libraries, 8237117) (CVE-2020-14556)

* OpenJDK: Unexpected exception raised by DerInputStream (Libraries,
8237731) (CVE-2020-14578)

* OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries,
8237736) (CVE-2020-14579)

* OpenJDK: XML validation manipulation due to incomplete application of the
use-grammar-pool-only feature (JAXP, 8242136) (CVE-2020-14621)

* OpenJDK: HostnameChecker does not ensure X.509 certificate names are in
normalized form (JSSE, 8237592) (CVE-2020-14577)
--

SL7
  x86_64
    java-1.8.0-openjdk-1.8.0.262.b10-0.el7_8.i686.rpm
    java-1.8.0-openjdk-1.8.0.262.b10-0.el7_8.x86_64.rpm
    java-1.8.0-openjdk-debuginfo-1.8.0.262.b10-0.el7_8.i686.rpm
    java-1.8.0-openjdk-debuginfo-1.8.0.262.b10-0.el7_8.x86_64.rpm
    java-1.8.0-openjdk-headless-1.8.0.262.b10-0.el7_8.i686.rpm
    java-1.8.0-openjdk-headless-1.8.0.262.b10-0.el7_8.x86_64.rpm
    java-1.8.0-openjdk-accessibility-1.8.0.262.b10-0.el7_8.i686.rpm
    java-1.8.0-openjdk-accessibility-1.8.0.262.b10-0.el7_8.x86_64.rpm
    java-1.8.0-openjdk-demo-1.8.0.262.b10-0.el7_8.i686.rpm
    java-1.8.0-openjdk-demo-1.8.0.262.b10-0.el7_8.x86_64.rpm
    java-1.8.0-openjdk-devel-1.8.0.262.b10-0.el7_8.i686.rpm
    java-1.8.0-openjdk-devel-1.8.0.262.b10-0.el7_8.x86_64.rpm
    java-1.8.0-openjdk-src-1.8.0.262.b10-0.el7_8.i686.rpm
    java-1.8.0-openjdk-src-1.8.0.262.b10-0.el7_8.x86_64.rpm
  noarch
    java-1.8.0-openjdk-javadoc-1.8.0.262.b10-0.el7_8.noarch.rpm
    java-1.8.0-openjdk-javadoc-zip-1.8.0.262.b10-0.el7_8.noarch.rpm

- Scientific Linux Development Team