CVE-2020-2590

NameCVE-2020-2590
DescriptionVulnerability in the Java SE, Java SE Embedded product of Oracle Java ...
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDLA-2128-1, DSA-4605-1, DSA-4621-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
openjdk-11 (PTS)bullseye11.0.24+8-2~deb11u1fixed
bullseye (security)11.0.30+7-1~deb11u1fixed
sid11.0.31+11-1fixed
openjdk-8 (PTS)sid8u482-ga-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
openjdk-11sourcebuster11.0.6+10-1~deb10u1DSA-4605-1
openjdk-11source(unstable)11.0.6+10-1
openjdk-13source(unstable)13.0.2+8-1
openjdk-7sourcejessie7u251-2.6.21-1~deb8u1DLA-2128-1
openjdk-7source(unstable)(unfixed)
openjdk-8sourcestretch8u242-b08-1~deb9u1DSA-4621-1
openjdk-8source(unstable)8u242-b08-1

Search for package or bug name: Reporting problems