[CLSA-2026:1785332252] java-11-openjdk: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-07-29 13:37:44 UTC
Description:
- Upgrade to openjdk-11.0.32+9 (GA). The following CVEs were fixed: - CVE-2026-47063: enhance jar handling - CVE-2026-46917: improve DTLS handshaking - CVE-2026-47027: enhance jar file processing - CVE-2026-47021: enhance XBM image support - CVE-2026-60147: improve certification checking - CVE-2026-46968: enhance TLS certificate handling - CVE-2026-47010: enhance JPEG handling - CVE-2026-47059: enhance AWT ImagingLib - CVE-2026-47057: improve Nashorn index handling - CVE-2026-47058: enhance DataView implementation - Rebase FIPS patch from the rh-openjdk fips branch (06df8f9bd4) for 11.0.32
CVEs fixed:
Updated packages:
  • java-11-openjdk-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm
    sha:762d3ccd0295590171d58c7c4d1200072aa110abb00a7e1a5ea985070a24fa1e
  • java-11-openjdk-demo-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm
    sha:163bf1f3d4560e6b94fe6cac2cf74c3e304b3e520133798b1271bec7a61103eb
  • java-11-openjdk-devel-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm
    sha:cdfee70852919e8cceda48e2ac0a7354f4f1a1dcb9a44d02faaab7cc131e8c74
  • java-11-openjdk-headless-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm
    sha:e922f96561f43b993214cc1d898dfa78666e380fb535005de0a752bd765e54cb
  • java-11-openjdk-javadoc-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm
    sha:0b872bfd9e52706027702be1da44da066c09e465c1537ac074ecd1c28dd21c87
  • java-11-openjdk-javadoc-zip-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm
    sha:ca51486ac46172ad6adb66d10cddb8fb1a59cd75e408d4fd7a4b83f7c014e100
  • java-11-openjdk-jmods-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm
    sha:d44dd29f3f6bb359755b3054f68bb4f754b2f65d50ffe42c5b7e8c9c20882aa1
  • java-11-openjdk-src-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm
    sha:8a432154afbdeeb7376941a592935ea4b8af37c531e4d8ddf7c5b0a67ebef9e0
  • java-11-openjdk-static-libs-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm
    sha:bea701ddbca2092aefa8e2f7d675cb25acd70808849b87c1ccd1395dc7f1d7f6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.