{"id":"CLSA-2026-1785332252","summary":"java-11-openjdk: Fix of 25 CVEs","details":"- Upgrade to openjdk-11.0.32+9 (GA). The following CVEs were fixed:\n- CVE-2026-47063: enhance jar handling\n- CVE-2026-46917: improve DTLS handshaking\n- CVE-2026-47027: enhance jar file processing\n- CVE-2026-47021: enhance XBM image support\n- CVE-2026-60147: improve certification checking\n- CVE-2026-46968: enhance TLS certificate handling\n- CVE-2026-47010: enhance JPEG handling\n- CVE-2026-47059: enhance AWT ImagingLib\n- CVE-2026-47057: improve Nashorn index handling\n- CVE-2026-47058: enhance DataView implementation\n- Rebase FIPS patch from the rh-openjdk fips branch (06df8f9bd4) for 11.0.32","modified":"2026-10-26T09:43:15.928287619Z","published":"2026-08-25T13:26:41Z","upstream":["CVE-2026-46917","CVE-2026-46968","CVE-2026-47010","CVE-2026-47021","CVE-2026-47027","CVE-2026-47057","CVE-2026-47058","CVE-2026-47059","CVE-2026-47063","CVE-2026-60147"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1785332252.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66293"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22003"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22007"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22013"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22016"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22018"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22021"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22695"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22801"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23865"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25646"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33416"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33636"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34268"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34282"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46917"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46968"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47010"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47021"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47027"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47057"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47058"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47059"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47063"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-60147"}],"affected":[{"package":{"name":"java-11-openjdk","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/java-11-openjdk?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785332252.json"}},{"package":{"name":"java-11-openjdk-demo","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/java-11-openjdk-demo?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785332252.json"}},{"package":{"name":"java-11-openjdk-devel","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/java-11-openjdk-devel?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785332252.json"}},{"package":{"name":"java-11-openjdk-headless","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/java-11-openjdk-headless?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785332252.json"}},{"package":{"name":"java-11-openjdk-javadoc","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/java-11-openjdk-javadoc?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785332252.json"}},{"package":{"name":"java-11-openjdk-javadoc-zip","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/java-11-openjdk-javadoc-zip?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785332252.json"}},{"package":{"name":"java-11-openjdk-jmods","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/java-11-openjdk-jmods?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785332252.json"}},{"package":{"name":"java-11-openjdk-src","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/java-11-openjdk-src?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785332252.json"}},{"package":{"name":"java-11-openjdk-static-libs","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/java-11-openjdk-static-libs?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1785332252.json"}}],"schema_version":"1.9.0"}