Important: Red Hat Security Advisory: java-1.8.0-openjdk security update

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...

Denial Of Service (DoS)

OpenJDK is vulnerable to denial of service DoS. The vulnerability exists through an out of bounds access in optimized String indexof implementation...

Denial Of Service (DoS)

OpenJDK is vulnerable to denial of service DoS. The vulnerability exists it is possible to cause excessive memory allocation in CMap when reading TrueType font...

Cross-site Scripting (XSS)

OpenJDK is vulnerable to cross-site scripting XSS. The vulnerability exists through insufficient filtering of HTML event attributes in Javadoc...

Authentication Bypass

OpenJDK is vulnerable to authentication bypass. The vulnerability exists through incorrect handling of HTTP proxy responses in HttpURLConnection...

Information Disclosure

openjdk is vulnerable to information disclosure. Improper handling of Kerberos proxy credentials allows remote attackers to obtain the credentials and gain access to affected applications...

Denial Of Service (DoS)

openjdk is vulnerable to denial of service. An unexpected exception thrown by pattern processing malicious regular expression allows an attacker to crash the application...

Denial Of Service (DoS)

OpenJDK is vulnerable to Regular Expression Denial of Service ReDoS. It is due to unexpected exception thrown during regular expression processing in Nashorn...

Denial Of Service (DoS)

OpenJDK is vulnerable to denial of service DoS. The attack exists because it does not perform glyph bitmap image dimension check in FreetypeFontScaler...

Remote Code Execution (RCE) Via Partial Denial Of Service (DoS)

OpenJDK is vulnerable to remote code execution RCE. It is possible because it causes an unexpected exception thrown during Font object deserialization, leading to a partial denial of service DoS of Java SE. A client using a Java sandbox or using a Java web service with data supplies to APIs can b...

Denial Of Service (DoS)

openjdk is vulnerable to denial of service. An unexpected exception thrown by XPathParser processing malicious XPath expression allows an attacker to crash the application...

Denial Of Service (DoS)

openjdk is vulnerable to denial of service. A NULL pointer dereference in DrawGlyphList allows an attacker to crash the application...

Denial Of Service (DoS)

OpenJDK is vulnerable to denial of service DoS. The vulnerability exists through an unexpected exception thrown by XPath processing crafted XPath expression...

Denial Of Service (DoS)

OpenJDK is vulnerable to denial of service DoS. The vulnerability exists through an Integer overflow in bounds check in SunGraphics2D...

Denial Of Service

OpenJDK is vulnerable to denial of service DoS. It is due to an incorrect handling of nested jar: URLs in Jar URL handler...

Denial Of Service (DoS)

openjdk is vulnerable to denial of service. Missing restrictions on use of custom SocketImpl allows a remote attacker to crash the application...

java-11-openjdk security update

1:11.0.5.10-0.0.1 - link atomic for ix86 build Livy Ge 1:11.0.5.10-0 - Update to shenandoah-jdk-11.0.5+10 GA - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz1753423 1:11.0.5.9-0.0.ea - Update to shenandoah-jdk-11.0.5+9...

RHEL 7 : java-1.8.0-openjdk (RHSA-2019:3128)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3128 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...

Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2019-3128)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3128 advisory. 1:1.8.0.232.b09-0 - Update to aarch64-shenandoah-jdk8u232-b09. - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by...