Linux · Security advisory · February 16, 2021

RHSA-2021:0530: Security update for 8 packages

RHSA-2021:0530, released February 16, 2021, fixes 3 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0376
89th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 0 Routine 3

Fixed package versions

ProductReleaseFixed in
java-1.8.0-ibmRHEL 81:1.8.0.6.20-1.el8_3
java-1.8.0-ibm-demoRHEL 81:1.8.0.6.20-1.el8_3
java-1.8.0-ibm-develRHEL 81:1.8.0.6.20-1.el8_3
java-1.8.0-ibm-headlessRHEL 81:1.8.0.6.20-1.el8_3
java-1.8.0-ibm-jdbcRHEL 81:1.8.0.6.20-1.el8_3
java-1.8.0-ibm-pluginRHEL 81:1.8.0.6.20-1.el8_3
java-1.8.0-ibm-srcRHEL 81:1.8.0.6.20-1.el8_3
java-1.8.0-ibm-webstartRHEL 81:1.8.0.6.20-1.el8_3

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2020-14779 openjdk-11-demo: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE(component: Serialization) 3.7 0.0376 None reported
Routine CVE-2020-14796 openjdk-11-demo: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE(component: Libraries) 3.1 0.0249 None reported
Routine CVE-2020-14797 openjdk-11-jdk-headless: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE(component: Libraries) 3.7 0.0220 None reported
Showing 1 to 3 of 3 1