FlawAtlas
Search the atlas
SUSE-SU-2021:0670-1 Not scored

Security update for java-1_8_0-ibm

This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 6 Fix Pack 25 [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803] * CVE-2020-27221: Potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding. * CVE-2020-14803: Unauthenticated attacker with network access via multiple protocols allows to compromise Java SE.

Exploit probability Not scored
Published March 1, 2021
Required by Not available
Last source change May 2, 2025

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Enterprise Storage 6 java-1_8_0-ibm
SUSE:Linux Enterprise Module for Legacy 15 SP2 java-1_8_0-ibm
SUSE:Linux Enterprise Server 15 SP1-BCL java-1_8_0-ibm
SUSE:Linux Enterprise Server 15 SP1-LTSS java-1_8_0-ibm
SUSE:Linux Enterprise Server 15-LTSS java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 15 java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 java-1_8_0-ibm
SUSE:Manager Proxy 4.0 java-1_8_0-ibm
SUSE:Manager Retail Branch Server 4.0 java-1_8_0-ibm
SUSE:Manager Server 4.0 java-1_8_0-ibm

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2021:0670-1

This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 6 Fix Pack 25 [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803] * CVE-2020-27221: Potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding. * CVE-2020-14803: Unauthenticated attacker with network access via multiple protocols allows to compromise Java SE.

View original source

05 / REFERENCES

Further evidence