RHSA-2021:0530: Moderate: java-1.8.0-ibm security update
IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.This update upgrades IBM Java SE 8 to version 8 SR6-FP20.Security Fix(es): OpenJDK: Incomplete check for invalid characters in URI to path conversion (Libraries, 8242685) (CVE-2020-14797) OpenJDK: High memory usage during deserialization of Proxy class with many interfaces (Serialization, 8236862) (CVE-2020-14779) OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680) (CVE-2020-14796) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What security vulnerabilities are addressed in RHSA-2021:0530?
RHSA-2021:0530 addresses an incomplete check for invalid characters in URI to path conversion in OpenJDK.
How do I resolve RHSA-2021:0530?
To resolve RHSA-2021:0530, you need to upgrade IBM Java SE to version 8 SR6-FP20.
Which versions of IBM Java SE are affected by RHSA-2021:0530?
RHSA-2021:0530 affects IBM Java SE version 8 up to 1.8.0-ibm-1.8.0.6.20-1.el8_3.
Is RHSA-2021:0530 critical for my systems?
RHSA-2021:0530 contains security fixes that are critical to maintaining the integrity of systems using affected IBM Java versions.
What package versions need to be upgraded for RHSA-2021:0530?
The packages that need to be upgraded for RHSA-2021:0530 include java, java-demo, java-devel, java-headless, java-jdbc, java-plugin, java-src, and java-webstart.