Synopsis:          Important: java-11-openjdk security update
Advisory ID:       SLSA-2020:2969-1
Issue Date:        2020-07-16
CVE Numbers:       None
--

Security Fix(es):

* OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access
(Libraries, 8238920) (CVE-2020-14583)

* OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119)
(CVE-2020-14593)

* OpenJDK: Incorrect handling of access control context in ForkJoinPool
(Libraries, 8237117) (CVE-2020-14556)

* OpenJDK: Excessive memory usage in ImageIO TIFF plugin (ImageIO, 8233239)
(CVE-2020-14562)

* OpenJDK: Incomplete interface type checks in Graal compiler (Hotspot,
8236867) (CVE-2020-14573)

* OpenJDK: XML validation manipulation due to incomplete application of the
use-grammar-pool-only feature (JAXP, 8242136) (CVE-2020-14621)

* OpenJDK: HostnameChecker does not ensure X.509 certificate names are in
normalized form (JSSE, 8237592) (CVE-2020-14577)
--

SL7
  x86_64
    java-11-openjdk-11.0.8.10-0.el7_8.i686.rpm
    java-11-openjdk-11.0.8.10-0.el7_8.x86_64.rpm
    java-11-openjdk-debuginfo-11.0.8.10-0.el7_8.i686.rpm
    java-11-openjdk-debuginfo-11.0.8.10-0.el7_8.x86_64.rpm
    java-11-openjdk-headless-11.0.8.10-0.el7_8.i686.rpm
    java-11-openjdk-headless-11.0.8.10-0.el7_8.x86_64.rpm
    java-11-openjdk-demo-11.0.8.10-0.el7_8.i686.rpm
    java-11-openjdk-demo-11.0.8.10-0.el7_8.x86_64.rpm
    java-11-openjdk-devel-11.0.8.10-0.el7_8.i686.rpm
    java-11-openjdk-devel-11.0.8.10-0.el7_8.x86_64.rpm
    java-11-openjdk-javadoc-11.0.8.10-0.el7_8.i686.rpm
    java-11-openjdk-javadoc-11.0.8.10-0.el7_8.x86_64.rpm
    java-11-openjdk-javadoc-zip-11.0.8.10-0.el7_8.i686.rpm
    java-11-openjdk-javadoc-zip-11.0.8.10-0.el7_8.x86_64.rpm
    java-11-openjdk-jmods-11.0.8.10-0.el7_8.i686.rpm
    java-11-openjdk-jmods-11.0.8.10-0.el7_8.x86_64.rpm
    java-11-openjdk-src-11.0.8.10-0.el7_8.i686.rpm
    java-11-openjdk-src-11.0.8.10-0.el7_8.x86_64.rpm

- Scientific Linux Development Team