Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2020.0069
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2020-0069)
Zusammenfassung:	The remote host is missing an update for the 'java-1.8.0-openjdk' package(s) announced via the MGASA-2020-0069 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'java-1.8.0-openjdk' package(s) announced via the MGASA-2020-0069 advisory. Vulnerability Insight: The updated packages fix security vulnerabilities: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352) (CVE-2020-2590) Incorrect exception processing during deserialization in BeanContextSupport (Serialization, 8224909) (CVE-2020-2583) Incorrect isBuiltinStreamHandler causing URL normalization issues (Networking, 8228548) (CVE-2020-2593) Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951) (CVE-2020-2601) Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422) (CVE-2020-2604) Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037) (CVE-2020-2654) Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795) (CVE-2020-2659) Affected Software/OS: 'java-1.8.0-openjdk' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2020-2583 Bugtraq: 20200120 [SECURITY] [DSA 4605-1] openjdk-11 security update (Google Search) https://seclists.org/bugtraq/2020/Jan/24 Bugtraq: 20200216 [SECURITY] [DSA 4621-1] openjdk-8 security update (Google Search) https://seclists.org/bugtraq/2020/Feb/22 Debian Security Information: DSA-4605 (Google Search) https://www.debian.org/security/2020/dsa-4605 Debian Security Information: DSA-4621 (Google Search) https://www.debian.org/security/2020/dsa-4621 https://security.gentoo.org/glsa/202101-19 https://www.oracle.com/security-alerts/cpujan2020.html https://lists.debian.org/debian-lts-announce/2020/02/msg00034.html RedHat Security Advisories: RHSA-2020:0122 https://access.redhat.com/errata/RHSA-2020:0122 RedHat Security Advisories: RHSA-2020:0128 https://access.redhat.com/errata/RHSA-2020:0128 RedHat Security Advisories: RHSA-2020:0157 https://access.redhat.com/errata/RHSA-2020:0157 RedHat Security Advisories: RHSA-2020:0196 https://access.redhat.com/errata/RHSA-2020:0196 RedHat Security Advisories: RHSA-2020:0202 https://access.redhat.com/errata/RHSA-2020:0202 RedHat Security Advisories: RHSA-2020:0231 https://access.redhat.com/errata/RHSA-2020:0231 RedHat Security Advisories: RHSA-2020:0232 https://access.redhat.com/errata/RHSA-2020:0232 RedHat Security Advisories: RHSA-2020:0465 https://access.redhat.com/errata/RHSA-2020:0465 RedHat Security Advisories: RHSA-2020:0467 https://access.redhat.com/errata/RHSA-2020:0467 RedHat Security Advisories: RHSA-2020:0468 https://access.redhat.com/errata/RHSA-2020:0468 RedHat Security Advisories: RHSA-2020:0469 https://access.redhat.com/errata/RHSA-2020:0469 RedHat Security Advisories: RHSA-2020:0470 https://access.redhat.com/errata/RHSA-2020:0470 RedHat Security Advisories: RHSA-2020:0541 https://access.redhat.com/errata/RHSA-2020:0541 RedHat Security Advisories: RHSA-2020:0632 https://access.redhat.com/errata/RHSA-2020:0632 SuSE Security Announcement: openSUSE-SU-2020:0113 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html SuSE Security Announcement: openSUSE-SU-2020:0147 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00060.html https://usn.ubuntu.com/4257-1/ Common Vulnerability Exposure (CVE) ID: CVE-2020-2590 Common Vulnerability Exposure (CVE) ID: CVE-2020-2593 Common Vulnerability Exposure (CVE) ID: CVE-2020-2601 Common Vulnerability Exposure (CVE) ID: CVE-2020-2604 https://kc.mcafee.com/corporate/index?page=content&id=SB10315 https://security.netapp.com/advisory/ntap-20200122-0003/ https://www.oracle.com/security-alerts/cpujul2021.html Common Vulnerability Exposure (CVE) ID: CVE-2020-2654 Common Vulnerability Exposure (CVE) ID: CVE-2020-2659
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.