{"id":"CLSA-2026-1783944511","summary":"java-11-openjdk: Fix of 11 CVEs","details":"- Upgrade to openjdk-11.0.31+11 (GA). The following CVEs were fixed:\n- CVE-2026-22016: enhance Path Factories redux\n- CVE-2026-34282: enhance TLS connection handling\n- CVE-2025-66293: update libpng (out-of-bounds read in png_image_read_composite)\n- CVE-2026-22695: update libpng (heap over-read in png_image_finish_read)\n- CVE-2026-22801: update libpng (integer truncation in simplified write API)\n- CVE-2026-25646: update libpng (heap buffer overflow in png_set_quantize)\n- CVE-2026-33416: update libpng (use-after-free in png_set_tRNS)\n- CVE-2026-33636: update libpng (out-of-bounds read/write in Neon palette expansion)","modified":"2026-10-26T09:43:23.536933334Z","published":"2026-07-15T14:15:23Z","upstream":["CVE-2025-66293","CVE-2026-22016","CVE-2026-22695","CVE-2026-22801","CVE-2026-25646","CVE-2026-33416","CVE-2026-33636","CVE-2026-34282"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1783944511.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-30749"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-50059"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-50106"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66293"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22016"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22695"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22801"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25646"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33416"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33636"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34282"}],"affected":[{"package":{"name":"java-11-openjdk","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.31.0.11-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783944511.json"}},{"package":{"name":"java-11-openjdk-demo","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-demo?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.31.0.11-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783944511.json"}},{"package":{"name":"java-11-openjdk-devel","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-devel?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.31.0.11-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783944511.json"}},{"package":{"name":"java-11-openjdk-headless","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-headless?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.31.0.11-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783944511.json"}},{"package":{"name":"java-11-openjdk-javadoc","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-javadoc?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.31.0.11-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783944511.json"}},{"package":{"name":"java-11-openjdk-javadoc-zip","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-javadoc-zip?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.31.0.11-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783944511.json"}},{"package":{"name":"java-11-openjdk-jmods","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-jmods?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.31.0.11-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783944511.json"}},{"package":{"name":"java-11-openjdk-src","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-src?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.31.0.11-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783944511.json"}},{"package":{"name":"java-11-openjdk-static-libs","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-static-libs?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.31.0.11-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783944511.json"}}],"schema_version":"1.9.0"}