RHSA-2020:0046: Security update for 8 packages

RHSA-2020:0046, released January 7, 2020, fixes 14 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

8.4

Base score, 0 to 10

Highest EPSS

0.0373

89th percentile

Priority of the 14 CVEs

Patch now 0
                                Urgent 0
                                High 1
                                Routine 13

Fixed package versions

Product	Release	Fixed in
java-1.8.0-ibm	RHEL 8	1:1.8.0.6.0-3.el8_1
java-1.8.0-ibm-demo	RHEL 8	1:1.8.0.6.0-3.el8_1
java-1.8.0-ibm-devel	RHEL 8	1:1.8.0.6.0-3.el8_1
java-1.8.0-ibm-headless	RHEL 8	1:1.8.0.6.0-3.el8_1
java-1.8.0-ibm-jdbc	RHEL 8	1:1.8.0.6.0-3.el8_1
java-1.8.0-ibm-plugin	RHEL 8	1:1.8.0.6.0-3.el8_1
java-1.8.0-ibm-src	RHEL 8	1:1.8.0.6.0-3.el8_1
java-1.8.0-ibm-webstart	RHEL 8	1:1.8.0.6.0-3.el8_1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2019-17631	java-1.8.0-ibm: IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This upda...	8.4	0.0207	None reported
Routine	CVE-2019-2981	java-1.8.0-openjdk: The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Develo...	3.7	0.0373	None reported
Routine	CVE-2019-2983	java-11-openjdk: The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Develop...	3.7	0.0373	None reported
Routine	CVE-2019-2973	java-1.8.0-openjdk: The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Develo...	3.7	0.0372	None reported
Routine	CVE-2019-2962	java-1.8.0-openjdk: The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Develo...	3.7	0.0352	None reported
Routine	CVE-2019-2964	java-1.8.0-openjdk: The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Develo...	3.7	0.0352	None reported
Routine	CVE-2019-2992	java-1.8.0-openjdk: The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Develo...	3.7	0.0345	None reported
Routine	CVE-2019-2975	java-1.8.0-openjdk: The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Develo...	4.8	0.0331	None reported
Routine	CVE-2019-2945	java-1.8.0-openjdk: The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Develo...	3.1	0.0327	None reported
Routine	CVE-2019-2978	java-1.8.0-openjdk: The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Develo...	3.7	0.0327	None reported
Routine	CVE-2019-2988	java-1.8.0-openjdk: The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Develo...	3.7	0.0327	None reported
Routine	CVE-2019-2989	java-1.8.0-openjdk: The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Develo...	6.8	0.0322	None reported
Routine	CVE-2019-2999	java-1.8.0-openjdk: The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Develo...	4.7	0.0260	None reported
Routine	CVE-2019-2996	java-1.8.0-ibm: IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This upda...	4.2	0.0220	None reported

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.