[CLSA-2026:1785324019] java-17-openjdk: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-07-30 09:38:52 UTC
Description:
- Update to jdk-17.0.20+8 (GA) - CVE-2026-41254: fix integer overflow in the bundled Little CMS CubeSize function that could lead to information disclosure or denial of service when processing crafted colour profiles (bundled LCMS updated to 2.19.1) - CVE-2026-46917: improve DTLS handshaking - CVE-2026-46968: enhance TLS certificate handling - CVE-2026-47010: enhance JPEG handling - CVE-2026-47021: enhance XBM image support - CVE-2026-47027: enhance Jar file processing - CVE-2026-47059: enhance AWT ImagingLib - CVE-2026-47063: enhance Jar handling - CVE-2026-60147: improve certification checking
Updated packages:
  • java-17-openjdk-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:d5e38cb11242923b696088fd3dca9a64e348f717f788235f3bcc68c39fadcabf
  • java-17-openjdk-demo-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:0bcf7a741a32df5345f96081751aa3fc22ea221492be409bd49406de6afb4083
  • java-17-openjdk-demo-fastdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:b32f31d089979dfb172a6cfc4b6c33d7d8368423ee3a084668c533b9776ec115
  • java-17-openjdk-demo-slowdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:8aca3253c81acd57405a209546ea1a78b723439525c3d488de8954fb2611bec2
  • java-17-openjdk-devel-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:885abaaf0f5fdfac63de29d2a37e112453a3fd522caa10c85e48568361c151e6
  • java-17-openjdk-devel-fastdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:817ae0592ee689bf67dc65bb1c2b437a1330bae488e54870d4fe1b3b85e17021
  • java-17-openjdk-devel-slowdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:5aa711735f5c70c17f9faaf07e926a00ba091e6347e3af8d62179c8ce54024a8
  • java-17-openjdk-fastdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:9098c08cdf1775e36e336278c514c530e4faa5aaf281113336b80816a8cb9a9d
  • java-17-openjdk-headless-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:b4b4839c406041dc5f0f3f9d912464a5e782cd6e3ad1cce8e6f9b6a91651e48a
  • java-17-openjdk-headless-fastdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:94e967d397b1e3cf9a8250338bcad942a7984cfe3849979a081846e6f3649500
  • java-17-openjdk-headless-slowdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:9e8fb631ff03386f32bac2f2d5729d9a2119149e02642fd16eedc132f46c5a43
  • java-17-openjdk-javadoc-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:5c0716d81e7588301658037f2f91cfe4a6264d71d349addd6027f7d81537b7c0
  • java-17-openjdk-javadoc-zip-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:e2adb60539bcb8150468c224bc66d41f459e875a0de7ddc675cbfc99573e1b0a
  • java-17-openjdk-jmods-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:18a8977fa3d9440ed833596a2a7c02a17e336aeef6a77fb91ee020dffc99d7af
  • java-17-openjdk-jmods-fastdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:be90d8957647d2aa552ea65d85d7ed98c7e5649ace2af46ad8e9cc6dd07c727a
  • java-17-openjdk-jmods-slowdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:28b86b0c711e9768276a87616f360b4129ba5ccc25c1702a9ce9665c48535c89
  • java-17-openjdk-slowdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:123605ffb25bab6215976506be12d1b48b46116b365bb383ca97c7b9b96e06a0
  • java-17-openjdk-src-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:920ec7c847c24fa2f7620e66cda3d0958b0c7f95b0b477e5b74ca60269452b3b
  • java-17-openjdk-src-fastdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:2e7c6d0f0d2a3ae41dbddafbcde23bf4e1ab07e4b84077f1a38543d3e587905b
  • java-17-openjdk-src-slowdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:6836c1e254b4595ad2009af9fbcf0117b9cbcbddaaaea046b75310f837c6ec35
  • java-17-openjdk-static-libs-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:16b936b9d4f02564fd1bd9a6a72c45dad4525fe3a7ee0f1ff72ec7c74bbf8766
  • java-17-openjdk-static-libs-fastdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:93ab2ba4497c6b565414f5f802e18f0805955451b3d0f8afe27d4a8545917b2a
  • java-17-openjdk-static-libs-slowdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:34deb54aedcf08964b141d87f6753444251761481fb5cd62f93cebb3e8950dc6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.