CLSA-2026-1788193524

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1788193524
Upstream
CVE (3)
  • CVE-2026-60589
  • CVE-2026-61308
  • CVE-2026-70907
Published
2026-10-09T13:47:30Z
Modified
2026-10-26T09:43:47Z
Summary
java-17-openjdk: Fix of 11 CVEs
Details
  • Update to jdk-17.0.20.1+1 (RHSA-2026:55781)
  • CVE-2026-70907: enhance TLS server, so that a TLS 1.3 server cannot send a second HelloRetryRequest in the same connection
  • CVE-2026-61308: enhance HTTP connections, so that the Proxy-Authorization header is dropped once the proxy in use changes across a redirect and while a tunnel is being established
  • CVE-2026-60589: improve resource resolving, so that the XML signature resolvers parse the URI scheme instead of prefix matching on it
References

Affected packages

TuxCare:AlmaLinux:9.2
java-17-openjdk

Package

Name
java-17-openjdk
Purl
pkg:rpm/tuxcare/java-17-openjdk?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:17.0.20.1.1-1.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json"
java-17-openjdk-demo

Package

Name
java-17-openjdk-demo
Purl
pkg:rpm/tuxcare/java-17-openjdk-demo?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:17.0.20.1.1-1.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json"
java-17-openjdk-demo-fastdebug

Package

Name
java-17-openjdk-demo-fastdebug
Purl
pkg:rpm/tuxcare/java-17-openjdk-demo-fastdebug?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:17.0.20.1.1-1.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json"
java-17-openjdk-demo-slowdebug

Package

Name
java-17-openjdk-demo-slowdebug
Purl
pkg:rpm/tuxcare/java-17-openjdk-demo-slowdebug?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:17.0.20.1.1-1.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json"
java-17-openjdk-devel

Package

Name
java-17-openjdk-devel
Purl
pkg:rpm/tuxcare/java-17-openjdk-devel?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:17.0.20.1.1-1.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json"
java-17-openjdk-devel-fastdebug

Package

Name
java-17-openjdk-devel-fastdebug
Purl
pkg:rpm/tuxcare/java-17-openjdk-devel-fastdebug?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:17.0.20.1.1-1.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json"
java-17-openjdk-devel-slowdebug

Package

Name
java-17-openjdk-devel-slowdebug
Purl
pkg:rpm/tuxcare/java-17-openjdk-devel-slowdebug?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:17.0.20.1.1-1.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json"
java-17-openjdk-fastdebug

Package

Name
java-17-openjdk-fastdebug
Purl
pkg:rpm/tuxcare/java-17-openjdk-fastdebug?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:17.0.20.1.1-1.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json"
java-17-openjdk-headless

Package

Name
java-17-openjdk-headless
Purl
pkg:rpm/tuxcare/java-17-openjdk-headless?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:17.0.20.1.1-1.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json"
java-17-openjdk-headless-fastdebug

Package

Name
java-17-openjdk-headless-fastdebug
Purl
pkg:rpm/tuxcare/java-17-openjdk-headless-fastdebug?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:17.0.20.1.1-1.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json"
java-17-openjdk-headless-slowdebug

Package

Name
java-17-openjdk-headless-slowdebug
Purl
pkg:rpm/tuxcare/java-17-openjdk-headless-slowdebug?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:17.0.20.1.1-1.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json"
java-17-openjdk-javadoc

Package

Name
java-17-openjdk-javadoc
Purl
pkg:rpm/tuxcare/java-17-openjdk-javadoc?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:17.0.20.1.1-1.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json"
java-17-openjdk-javadoc-zip

Package

Name
java-17-openjdk-javadoc-zip
Purl
pkg:rpm/tuxcare/java-17-openjdk-javadoc-zip?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:17.0.20.1.1-1.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json"
java-17-openjdk-jmods

Package

Name
java-17-openjdk-jmods
Purl
pkg:rpm/tuxcare/java-17-openjdk-jmods?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:17.0.20.1.1-1.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json"
java-17-openjdk-jmods-fastdebug

Package

Name
java-17-openjdk-jmods-fastdebug
Purl
pkg:rpm/tuxcare/java-17-openjdk-jmods-fastdebug?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:17.0.20.1.1-1.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json"
java-17-openjdk-jmods-slowdebug

Package

Name
java-17-openjdk-jmods-slowdebug
Purl
pkg:rpm/tuxcare/java-17-openjdk-jmods-slowdebug?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:17.0.20.1.1-1.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json"
java-17-openjdk-slowdebug

Package

Name
java-17-openjdk-slowdebug
Purl
pkg:rpm/tuxcare/java-17-openjdk-slowdebug?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:17.0.20.1.1-1.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json"
java-17-openjdk-src

Package

Name
java-17-openjdk-src
Purl
pkg:rpm/tuxcare/java-17-openjdk-src?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:17.0.20.1.1-1.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json"
java-17-openjdk-src-fastdebug

Package

Name
java-17-openjdk-src-fastdebug
Purl
pkg:rpm/tuxcare/java-17-openjdk-src-fastdebug?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:17.0.20.1.1-1.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json"
java-17-openjdk-src-slowdebug

Package

Name
java-17-openjdk-src-slowdebug
Purl
pkg:rpm/tuxcare/java-17-openjdk-src-slowdebug?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:17.0.20.1.1-1.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json"
java-17-openjdk-static-libs

Package

Name
java-17-openjdk-static-libs
Purl
pkg:rpm/tuxcare/java-17-openjdk-static-libs?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:17.0.20.1.1-1.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json"
java-17-openjdk-static-libs-fastdebug

Package

Name
java-17-openjdk-static-libs-fastdebug
Purl
pkg:rpm/tuxcare/java-17-openjdk-static-libs-fastdebug?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:17.0.20.1.1-1.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json"
java-17-openjdk-static-libs-slowdebug

Package

Name
java-17-openjdk-static-libs-slowdebug
Purl
pkg:rpm/tuxcare/java-17-openjdk-static-libs-slowdebug?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:17.0.20.1.1-1.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788193524.json"