Linux · Security advisory · March 4, 2021

RHSA-2021:0736: Security update for 8 packages

RHSA-2021:0736, released March 4, 2021, fixes 5 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

1 rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0388

90th percentile

Patch now 0
                                Urgent 1
                                High 0
                                Routine 4

Fixed package versions

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2020-27221	java-1.8.0-ibm: IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This upda...	9.8	0.0155	None reported
Routine	CVE-2020-2773	java-1.8.0-openjdk: The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Develo...	3.7	0.0388	None reported
Routine	CVE-2020-14803	openjdk-11-demo: Vulnerability in the Java SE product of Oracle Java SE (component:Libraries)	5.3	0.0319	None reported
Routine	CVE-2020-14781	openjdk-11-demo: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE(component: JNDI)	3.7	0.0232	None reported
Routine	CVE-2020-14782	openjdk-11-demo: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE(component: Libraries)	3.7	0.0227	None reported