ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2021.0298
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2021-0298)
Resumen:	The remote host is missing an update for the 'copy-jdk-configs, java-1.8.0-openjdk, java-11-openjdk' package(s) announced via the MGASA-2021-0298 advisory.
Descripción:	Summary: The remote host is missing an update for the 'copy-jdk-configs, java-1.8.0-openjdk, java-11-openjdk' package(s) announced via the MGASA-2021-0298 advisory. Vulnerability Insight: For java-1.8.0 ## Security fixes - JDK-8227467: Better class method invocations - JDK-8244473: Contextualize registration for JNDI - JDK-8244543: Enhanced handling of abstract classes - JDK-8249906, CVE-2021-2163: Enhance opening JARs - JDK-8250568, CVE-2021-2161: Less ambiguous processing - JDK-8253799: Make lists of normal filenames ## Other significant changes - JDK-8236730: Weak Named Curves in TLS, CertPath, and Signed JAR Disabled by Default - JDK-8244286: Tools Warn If Weak Algorithms Are Used - JDK-8256490: Disable TLS 1.0 and 1.1 - JDK-8242147: New System Properties to Configure the TLS Signature Schemes - JDK-8177368: Several incorporation steps are silently failing when an error should be reported. For java-11 ## Security fixes - JDK-8244473: Contextualize registration for JNDI - JDK-8244543: Enhanced handling of abstract classes - JDK-8249906, CVE-2021-2163: Enhance opening JARs - JDK-8250568, CVE-2021-2161: Less ambiguous processing - JDK-8253799: Make lists of normal filenames - JDK-8257001: Improve HTTP Client Support ## Other significant changes - LDAP Channel Binding Support for Java GSS/Kerberos - Disable TLS 1.0 and 1.1 - jdeps --print-module-deps Reports Transitive Dependencies - XML declaration is not followed by a newline - SystemTap tapsets updated to support OpenJDK 11 Affected Software/OS: 'copy-jdk-configs, java-1.8.0-openjdk, java-11-openjdk' package(s) on Mageia 8. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2021-2161 Debian Security Information: DSA-4899 (Google Search) https://www.debian.org/security/2021/dsa-4899 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5ACX4JEVYH6H4PSMGMYWTGABPOFPH3TS/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MVDY4T5XMSYDQT6RRKPMRCV4MVGS7KXF/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MAULPCQFLAMBJIS27YLNNX6IHRFJMVP4/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CFXOKM2233JVGYDOWW77BN54X3GZTIBK/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UD3JEP4HPLK7MNZHVUMKIJPBP74M3A2V/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CG7EWXSO6JUCVHP7R3SOZQ7WPNBOISJH/ https://security.gentoo.org/glsa/202209-05 https://docs.azul.com/core/zulu-openjdk/release-notes/april-2021.html#fixed-common-vulnerabilities-and-exposures https://www.oracle.com/security-alerts/cpuapr2021.html https://lists.debian.org/debian-lts-announce/2021/04/msg00021.html Common Vulnerability Exposure (CVE) ID: CVE-2021-2163
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.