Synopsis: Important: java-11-openjdk security update Advisory ID: SLSA-2020:2969-1 Issue Date: 2020-07-16 CVE Numbers: None -- Security Fix(es): * OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920) (CVE-2020-14583) * OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119) (CVE-2020-14593) * OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117) (CVE-2020-14556) * OpenJDK: Excessive memory usage in ImageIO TIFF plugin (ImageIO, 8233239) (CVE-2020-14562) * OpenJDK: Incomplete interface type checks in Graal compiler (Hotspot, 8236867) (CVE-2020-14573) * OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature (JAXP, 8242136) (CVE-2020-14621) * OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592) (CVE-2020-14577) -- SL7 x86_64 java-11-openjdk-11.0.8.10-0.el7_8.i686.rpm java-11-openjdk-11.0.8.10-0.el7_8.x86_64.rpm java-11-openjdk-debuginfo-11.0.8.10-0.el7_8.i686.rpm java-11-openjdk-debuginfo-11.0.8.10-0.el7_8.x86_64.rpm java-11-openjdk-headless-11.0.8.10-0.el7_8.i686.rpm java-11-openjdk-headless-11.0.8.10-0.el7_8.x86_64.rpm java-11-openjdk-demo-11.0.8.10-0.el7_8.i686.rpm java-11-openjdk-demo-11.0.8.10-0.el7_8.x86_64.rpm java-11-openjdk-devel-11.0.8.10-0.el7_8.i686.rpm java-11-openjdk-devel-11.0.8.10-0.el7_8.x86_64.rpm java-11-openjdk-javadoc-11.0.8.10-0.el7_8.i686.rpm java-11-openjdk-javadoc-11.0.8.10-0.el7_8.x86_64.rpm java-11-openjdk-javadoc-zip-11.0.8.10-0.el7_8.i686.rpm java-11-openjdk-javadoc-zip-11.0.8.10-0.el7_8.x86_64.rpm java-11-openjdk-jmods-11.0.8.10-0.el7_8.i686.rpm java-11-openjdk-jmods-11.0.8.10-0.el7_8.x86_64.rpm java-11-openjdk-src-11.0.8.10-0.el7_8.i686.rpm java-11-openjdk-src-11.0.8.10-0.el7_8.x86_64.rpm - Scientific Linux Development Team