CLSA-2026-1783944511

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783944511.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1783944511
Upstream
CVE (8)
Published
2026-07-15T14:15:23Z
Modified
2026-10-26T09:43:23Z
Summary
java-11-openjdk: Fix of 11 CVEs
Details
  • Upgrade to openjdk-11.0.31+11 (GA). The following CVEs were fixed:
  • CVE-2026-22016: enhance Path Factories redux
  • CVE-2026-34282: enhance TLS connection handling
  • CVE-2025-66293: update libpng (out-of-bounds read in png_image_read_composite)
  • CVE-2026-22695: update libpng (heap over-read in png_image_finish_read)
  • CVE-2026-22801: update libpng (integer truncation in simplified write API)
  • CVE-2026-25646: update libpng (heap buffer overflow in png_set_quantize)
  • CVE-2026-33416: update libpng (use-after-free in png_set_tRNS)
  • CVE-2026-33636: update libpng (out-of-bounds read/write in Neon palette expansion)
References

Affected packages

TuxCare:CentOS-Stream:8
java-11-openjdk

Package

Name
java-11-openjdk
Purl
pkg:rpm/tuxcare/java-11-openjdk?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:11.0.31.0.11-1.el8.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783944511.json"
java-11-openjdk-demo

Package

Name
java-11-openjdk-demo
Purl
pkg:rpm/tuxcare/java-11-openjdk-demo?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:11.0.31.0.11-1.el8.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783944511.json"
java-11-openjdk-devel

Package

Name
java-11-openjdk-devel
Purl
pkg:rpm/tuxcare/java-11-openjdk-devel?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:11.0.31.0.11-1.el8.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783944511.json"
java-11-openjdk-headless

Package

Name
java-11-openjdk-headless
Purl
pkg:rpm/tuxcare/java-11-openjdk-headless?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:11.0.31.0.11-1.el8.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783944511.json"
java-11-openjdk-javadoc

Package

Name
java-11-openjdk-javadoc
Purl
pkg:rpm/tuxcare/java-11-openjdk-javadoc?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:11.0.31.0.11-1.el8.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783944511.json"
java-11-openjdk-javadoc-zip

Package

Name
java-11-openjdk-javadoc-zip
Purl
pkg:rpm/tuxcare/java-11-openjdk-javadoc-zip?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:11.0.31.0.11-1.el8.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783944511.json"
java-11-openjdk-jmods

Package

Name
java-11-openjdk-jmods
Purl
pkg:rpm/tuxcare/java-11-openjdk-jmods?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:11.0.31.0.11-1.el8.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783944511.json"
java-11-openjdk-src

Package

Name
java-11-openjdk-src
Purl
pkg:rpm/tuxcare/java-11-openjdk-src?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:11.0.31.0.11-1.el8.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783944511.json"
java-11-openjdk-static-libs

Package

Name
java-11-openjdk-static-libs
Purl
pkg:rpm/tuxcare/java-11-openjdk-static-libs?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:11.0.31.0.11-1.el8.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783944511.json"