[CLSA-2026:1785494509] java-17-openjdk: Fix of 9 CVEs
Type:
security
Severity:
Important
Release date:
2026-07-31 10:42:07 UTC
Description:
- Update to jdk-17.0.20+8 (GA) - CVE-2026-41254: Little CMS integer overflow in CubeSize (bundled LCMS updated to 2.19.1) - CVE-2026-46917: Improve DTLS handshaking - CVE-2026-46968: Enhance TLS certificate handling - CVE-2026-47010: Enhance JPEG handling - CVE-2026-47021: Enhance XBM image support - CVE-2026-47027: Enhance Jar file processing - CVE-2026-47059: Enhance AWT ImagingLib - CVE-2026-47063: Enhance Jar handling - CVE-2026-60147: Improve certification checking
Updated packages:
  • java-17-openjdk-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:3f612456b9d051c51fa74dad9bf2858bc25225e6ca47e6367d737f5d472a6d25
  • java-17-openjdk-demo-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:8f5cb25dbd9c018ccb19f9d6374ff92bf63050c973d910e1a2d42d6b9917495f
  • java-17-openjdk-demo-fastdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:93b45536a25f26c6ea70b449f3b80594326c9383843a96d415d7c63b632ddac9
  • java-17-openjdk-demo-slowdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:e5023a66d323dae3920396c373904272e58fc58e11e6d55a6cc28b0f5d54be43
  • java-17-openjdk-devel-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:afb11a22371dec9eb0045cc3a1a2b2738a42492c5212d67372b6cd245cea716a
  • java-17-openjdk-devel-fastdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:4ff36254298124ace239d829066726a03414799472c835dafff04cdd6fb27903
  • java-17-openjdk-devel-slowdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:84505dd4b63074cacd8a7c95e73936f31802d9055bde9fc2f6857ed0aaf74170
  • java-17-openjdk-fastdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:7eab84a37c5c568ba4f60709dcb2ebcab6a182646885ebcdb30e98ab83431fa2
  • java-17-openjdk-headless-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:e04ed0c1d44ac9fa59e7c64ef01fb36d8ce08d6489efc24f9b0547e93dc05502
  • java-17-openjdk-headless-fastdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:103792d9dc4cc48b8a962f207d04ce7fa571e213074c3deccfbc3638ad76f550
  • java-17-openjdk-headless-slowdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:f59cb061389768f6e21cb7d3de3b15d01976970526e03d3e1cfa341360626059
  • java-17-openjdk-javadoc-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:f3cded166e215249adc6609b8503a952f5dbee29b6196af77e0649e8ba359370
  • java-17-openjdk-javadoc-zip-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:bb7c294b9fec9c79d436c4f0bf0c0e2225286e0274fe085ae4714ed017cd0a4f
  • java-17-openjdk-jmods-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:8b773f2e6a51aed8c0a9e98a95a6d31fcd7ab13f90db3ed44636ca4e82e3bbba
  • java-17-openjdk-jmods-fastdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:00359feaac8139fc01bcb123db22c045edd2126de9da753d0cdcd95d1e93953c
  • java-17-openjdk-jmods-slowdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:b17937289363769787dd460b4e8b04e092020012dde664d282b339b0e7d668c3
  • java-17-openjdk-slowdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:8e5dcc6008f9ff9cecbcedf3c91d9d00df4b831bed47346195f64683d54b2ed7
  • java-17-openjdk-src-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:d01c2deae022f581486ec69500fe4e216201ce39938eb53493ceb0dd79b4811f
  • java-17-openjdk-src-fastdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:a6ad2ce6ec8f911bcd8e91a78c4b092f1bcd921e03fad38b140d92a48e1b897f
  • java-17-openjdk-src-slowdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:4e2522ab9442318ff11703b2d7a881dc93903faf82127eb739bb6b8776fa229b
  • java-17-openjdk-static-libs-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:3b960e8723dfdca8d7e5d1f6b9dd7336c11a4e452704ebbca071c5bb90f9269c
  • java-17-openjdk-static-libs-fastdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:37e5ab1826c5fb1790a5f593d0c6d4c748f23c6b7972bece2afdc92c698659c5
  • java-17-openjdk-static-libs-slowdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm
    sha:0c5a057c91ed24c997780e13db047543f141a96ecb91b937c114540610a968d7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.