Synopsis: Important: java-1.8.0-openjdk security update Advisory ID: SLSA-2020:2968-1 Issue Date: 2020-07-16 CVE Numbers: None -- Security Fix(es): * OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920) (CVE-2020-14583) * OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119) (CVE-2020-14593) * OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117) (CVE-2020-14556) * OpenJDK: Unexpected exception raised by DerInputStream (Libraries, 8237731) (CVE-2020-14578) * OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries, 8237736) (CVE-2020-14579) * OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature (JAXP, 8242136) (CVE-2020-14621) * OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592) (CVE-2020-14577) -- SL7 x86_64 java-1.8.0-openjdk-1.8.0.262.b10-0.el7_8.i686.rpm java-1.8.0-openjdk-1.8.0.262.b10-0.el7_8.x86_64.rpm java-1.8.0-openjdk-debuginfo-1.8.0.262.b10-0.el7_8.i686.rpm java-1.8.0-openjdk-debuginfo-1.8.0.262.b10-0.el7_8.x86_64.rpm java-1.8.0-openjdk-headless-1.8.0.262.b10-0.el7_8.i686.rpm java-1.8.0-openjdk-headless-1.8.0.262.b10-0.el7_8.x86_64.rpm java-1.8.0-openjdk-accessibility-1.8.0.262.b10-0.el7_8.i686.rpm java-1.8.0-openjdk-accessibility-1.8.0.262.b10-0.el7_8.x86_64.rpm java-1.8.0-openjdk-demo-1.8.0.262.b10-0.el7_8.i686.rpm java-1.8.0-openjdk-demo-1.8.0.262.b10-0.el7_8.x86_64.rpm java-1.8.0-openjdk-devel-1.8.0.262.b10-0.el7_8.i686.rpm java-1.8.0-openjdk-devel-1.8.0.262.b10-0.el7_8.x86_64.rpm java-1.8.0-openjdk-src-1.8.0.262.b10-0.el7_8.i686.rpm java-1.8.0-openjdk-src-1.8.0.262.b10-0.el7_8.x86_64.rpm noarch java-1.8.0-openjdk-javadoc-1.8.0.262.b10-0.el7_8.noarch.rpm java-1.8.0-openjdk-javadoc-zip-1.8.0.262.b10-0.el7_8.noarch.rpm - Scientific Linux Development Team