[CLSA-2026:1785264990] java-11-openjdk: Fix of 10 CVEs
Type:
security
Severity:
Important
Release date:
2026-07-28 18:56:50 UTC
Description:
- Upgrade to openjdk-11.0.32+9 (GA). The following CVEs were fixed: - CVE-2026-47063: enhance jar handling - CVE-2026-46917: improve DTLS handshaking - CVE-2026-47027: enhance jar file processing - CVE-2026-47021: enhance XBM image support - CVE-2026-60147: improve certification checking - CVE-2026-46968: enhance TLS certificate handling - CVE-2026-47010: enhance JPEG handling - CVE-2026-47059: enhance AWT ImagingLib - CVE-2026-47057: improve Nashorn index handling - CVE-2026-47058: enhance DataView implementation - Rebase FIPS patch from the rh-openjdk fips branch (06df8f9bd4) for 11.0.32
Updated packages:
  • java-11-openjdk-11.0.32.0.9-1.el8.tuxcare.els1.x86_64.rpm
    sha:0577e0e37c00f2210308393007d9f24673f7b3d41fef9cc3415df7f8d7ce8c13
  • java-11-openjdk-demo-11.0.32.0.9-1.el8.tuxcare.els1.x86_64.rpm
    sha:cab8fe012b434c33c96d0fe3c2b081d74499bf1fe3fce2eaa43927f770c893d3
  • java-11-openjdk-devel-11.0.32.0.9-1.el8.tuxcare.els1.x86_64.rpm
    sha:a6a48b28e96f616d26f813eb3e92cb850c42da77a41e452bf0e511ea6010293f
  • java-11-openjdk-headless-11.0.32.0.9-1.el8.tuxcare.els1.x86_64.rpm
    sha:655a472939ea61d250a5703bb78ee0df23b9d9f5c622b4a53633025726b6836f
  • java-11-openjdk-javadoc-11.0.32.0.9-1.el8.tuxcare.els1.x86_64.rpm
    sha:f5cb71e209b61ca5ca93af4e8bcd437709eab6410a3f9212840108a973715ec4
  • java-11-openjdk-javadoc-zip-11.0.32.0.9-1.el8.tuxcare.els1.x86_64.rpm
    sha:472753f94ccedb7d6175cbdadede350fe700c01d8a7d7a3d153ddc1d9df60eee
  • java-11-openjdk-jmods-11.0.32.0.9-1.el8.tuxcare.els1.x86_64.rpm
    sha:c87faf4b0466db5aee6b351ba808427b77e345b7bb2d224dca4ed91f13a9e402
  • java-11-openjdk-src-11.0.32.0.9-1.el8.tuxcare.els1.x86_64.rpm
    sha:07b1ba4f88e870783c86dd0878f0872ae2d2d030e72cd01d82af1bd17b1071ea
  • java-11-openjdk-static-libs-11.0.32.0.9-1.el8.tuxcare.els1.x86_64.rpm
    sha:63ad21a1535a930f83f11a2f40a886da7ac396ed2125597e3c18f2e411055f80
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.