[CLSA-2026:1785331296] java-11-openjdk: Fix of 10 CVEs
Type:
security
Severity:
Important
Release date:
2026-07-29 13:21:54 UTC
Description:
- Upgrade to openjdk-11.0.32+9 (GA). The following CVEs were fixed: - CVE-2026-47063: enhance jar handling - CVE-2026-46917: improve DTLS handshaking - CVE-2026-47027: enhance jar file processing - CVE-2026-47021: enhance XBM image support - CVE-2026-60147: improve certification checking - CVE-2026-46968: enhance TLS certificate handling - CVE-2026-47010: enhance JPEG handling - CVE-2026-47059: enhance AWT ImagingLib - CVE-2026-47057: improve Nashorn index handling - CVE-2026-47058: enhance DataView implementation - Rebase FIPS patch from the rh-openjdk fips branch (06df8f9bd4) for 11.0.32
Updated packages:
  • java-11-openjdk-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm
    sha:17ae325ccf0366de1690a901b5c4ecd670d1bb641caff86bf073b1af8b93f180
  • java-11-openjdk-demo-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm
    sha:f8ec8572d2bd16973b1fd02906f4e71d099e1889d33d9d4a6bc13173dd465558
  • java-11-openjdk-devel-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm
    sha:321137e9652baa94a305d799e55decc7331385ac67fe224fb59de3243dde4ae0
  • java-11-openjdk-headless-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm
    sha:9d1c5826d1c100b46b96cc65417b82cc51145ffef56d9d1e0ebab8d523788c57
  • java-11-openjdk-javadoc-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm
    sha:733de23783131e9b1d204c19c730da4ec9ce7b776c0aac85df484a7a57fb43d4
  • java-11-openjdk-javadoc-zip-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm
    sha:a0f3a429e205e60f9825595fe6f5395316c7c0da21e32788d9f30a3d67c35f14
  • java-11-openjdk-jmods-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm
    sha:b827e32b9521d04483b55df5c2ef5f0cc145f181c21ef9c546558677f00eff3b
  • java-11-openjdk-src-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm
    sha:dee8e865629a2e90f746a3ef60af38ab4be717de8ae9576f9dba34eb19a0d22a
  • java-11-openjdk-static-libs-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm
    sha:319a06a2f51d2e5faef9eee267127cb856a83a523d48b1672cdd42c08bf27f94
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.