{"id":"CLSA-2026-1785264990","summary":"java-11-openjdk: Fix of 10 CVEs","details":"- Upgrade to openjdk-11.0.32+9 (GA). The following CVEs were fixed:\n- CVE-2026-47063: enhance jar handling\n- CVE-2026-46917: improve DTLS handshaking\n- CVE-2026-47027: enhance jar file processing\n- CVE-2026-47021: enhance XBM image support\n- CVE-2026-60147: improve certification checking\n- CVE-2026-46968: enhance TLS certificate handling\n- CVE-2026-47010: enhance JPEG handling\n- CVE-2026-47059: enhance AWT ImagingLib\n- CVE-2026-47057: improve Nashorn index handling\n- CVE-2026-47058: enhance DataView implementation\n- Rebase FIPS patch from the rh-openjdk fips branch (06df8f9bd4) for 11.0.32","modified":"2026-10-26T09:43:19.127423211Z","published":"2026-07-28T18:56:50Z","upstream":["CVE-2026-46917","CVE-2026-46968","CVE-2026-47010","CVE-2026-47021","CVE-2026-47027","CVE-2026-47057","CVE-2026-47058","CVE-2026-47059","CVE-2026-47063","CVE-2026-60147"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1785264990.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46917"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46968"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47010"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47021"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47027"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47057"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47058"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47059"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47063"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-60147"}],"affected":[{"package":{"name":"java-11-openjdk","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1785264990.json"}},{"package":{"name":"java-11-openjdk-demo","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-demo?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1785264990.json"}},{"package":{"name":"java-11-openjdk-devel","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-devel?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1785264990.json"}},{"package":{"name":"java-11-openjdk-headless","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-headless?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1785264990.json"}},{"package":{"name":"java-11-openjdk-javadoc","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-javadoc?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1785264990.json"}},{"package":{"name":"java-11-openjdk-javadoc-zip","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-javadoc-zip?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1785264990.json"}},{"package":{"name":"java-11-openjdk-jmods","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-jmods?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1785264990.json"}},{"package":{"name":"java-11-openjdk-src","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-src?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1785264990.json"}},{"package":{"name":"java-11-openjdk-static-libs","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-static-libs?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1785264990.json"}}],"schema_version":"1.9.0"}