[CLSA-2026:1794416495] java-1.8.0-openjdk: Fix of 29 CVEs
Type:
security
Severity:
Critical
Release date:
2026-11-11 20:24:04 UTC
Description:
- Update to shenandoah-jdk8u512-b09 (8u512 GA, Oracle CPU 2026-10), built by merging jdk8u512-b09 into shenandoah8u512-b01 (clean merge); the shenandoah-jdk8u repository has not tagged 8u512 GA yet. - Drop jdk8186464-rh1433262-zip64_failure.patch, now upstream (JDK-8186464). - Security fixes from OpenJDK 8u512: - CVE-2026-83374: Security, enhance PKCS5 padding (JDK-8380715) - CVE-2026-83376: JSSE, enhance TLS certificate handling (JDK-8382178) - CVE-2026-83380: JAAS, enhance LDAP logins (JDK-8383047) - CVE-2026-83381: Security, enhance SASL authentication (JDK-8383076) - CVE-2026-83387: JDBC, enhance WebRowSets (JDK-8383301) - CVE-2026-83395: Networking, enhance HTTP client response handling (JDK-8383439) - CVE-2026-83400: JAXP, enhance XML processing (JDK-8384031) - CVE-2026-87290: JAXP, enhance XPath expressions (JDK-8383699) - CVE-2026-87292: Networking, enhance network clients (JDK-8383756) - CVE-2026-87293: RMI, enhance RMI connections (JDK-8383956) - CVE-2026-87294: Security, enhance certificate name checks (JDK-8383679) - CVE-2026-87367: JAXP, enhance template handling (JDK-8384654) - CVE-2026-91334: ImageIO, enhance JPEG loading (JDK-8384445) - CVE-2026-91335: AWT, enhance image handling (JDK-8384664) - CVE-2026-91373: JSSE, enhance TLS handshakes (JDK-8384771) - CVE-2026-91395: Utility, enhance Pack200 unpacking (JDK-8385219) - CVE-2026-91396: Utility, improve Pack200 handling (JDK-8385229) - CVE-2026-91397: Serviceability, enhance diagnostic sessions (JDK-8385249) - CVE-2026-91398: Networking, enhance SOCKS5 support (JDK-8385260) - CVE-2026-91400: Sound, enhance MIDI file handling (JDK-8385476) - CVE-2026-91410: Libraries, enhance zipfs - CVE-2026-91411: JGSS, enhance JGSS - CVE-2026-91415: 2D, enhance font rendering (JDK-8386187, JDK-8384781) - CVE-2026-91417: CORBA, enhance CORBA (JDK-8386175) - CVE-2026-91418: ImageIO, enhance GIF loading (JDK-8386552) - CVE-2026-91451: Networking, enhance HTTP server parsing (JDK-8386515) - CVE-2026-91452: Networking, enhance HTTP server (JDK-8386525) - CVE-2026-91453: Lightweight HTTP Server, improve HTTP headers (JDK-8386535) - CVE-2026-91461: JSSE, enhance TLS extensions (JDK-8386923) - CVE-2026-91462: JGSS, enhance krb5 tokens (JDK-8387152) - CVE-2026-91463: JGSS, enhance krb5 client (JDK-8387217) - CVE-2026-91464: JGSS, enhance Kerberos validation (JDK-8387238) - CVE-2026-101516: Libraries, enhance certificate constraint checking (JDK-8384021) - CVE-2026-91403: JSSE trusts impacted eMudhra intermediate CA certificates (JDK-8395142)
Updated packages:
  • java-1.8.0-openjdk-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:17787f1b0416317183750c4a47a6d4d34df1beb998dbb14b470a397e801ea641
  • java-1.8.0-openjdk-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:1120f37be493f13f1afa140252c6ccd8f10afd7b0a70f48663467e6ab032d749
  • java-1.8.0-openjdk-accessibility-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:5465fa035fded74f042d6cfab1b896def145582eb2168d0ecb6f0899be8c5aec
  • java-1.8.0-openjdk-accessibility-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:2d9d445f19970ca7df980bad6cccd5c7e12a7d58ba535fc1f9ee0ae134b3ee3d
  • java-1.8.0-openjdk-accessibility-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:5e2fe1e3c3d894cee69f1c3f41e349a4ced19e1684795efd1973b03d996280a2
  • java-1.8.0-openjdk-accessibility-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:1fed346cd250f175708e8fda8a74c8dad19b7a52ada02a09d4e7864c8f54cef7
  • java-1.8.0-openjdk-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:ae0604bf648403a6fecfc6b2e8c17615fe065a5b5f27e0839689cc0142c0c12b
  • java-1.8.0-openjdk-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:bba517266ea8f62071dc260dbcd4d2f1e28877f8977945f386fc0e68a82be7ac
  • java-1.8.0-openjdk-demo-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:5e77df636d5e4b07c8fcbb570c7e3c3a9236e8cc0815b6162854dbf87042668f
  • java-1.8.0-openjdk-demo-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:fa748bf1fd5e5a410aed8e7a3daf3c0a2e255a3f31a9bbe773004bc661f47a20
  • java-1.8.0-openjdk-demo-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:124fc60a3904b87e8798ede7ba4a0eda52c89a214b74319178d9650d87a0591e
  • java-1.8.0-openjdk-demo-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:55b9c96c2aa1a6b4cca19394927a2b285421cf1684d4b672603bfff3af09fadb
  • java-1.8.0-openjdk-devel-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:afdbb87db73b468d61faaaa26d577a197d485e668f052aa4437f6bddd4ba5483
  • java-1.8.0-openjdk-devel-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:605365d15ad936bc0b1b360620abc496a4bf9e0df947e56858a550369f5d67a2
  • java-1.8.0-openjdk-devel-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:92e0e3a42812fc4b09f3170885a7fc34597886ca20374a51d94aa414e8a9048e
  • java-1.8.0-openjdk-devel-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:01fe853b43cf2b97f058716fb716dda0b5f8cd4fb3b63287475772c64acb2fbe
  • java-1.8.0-openjdk-headless-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:150d9766a2825709f4bb3c2f76227bebf880112711b190c1cbb42dd0481bf2a4
  • java-1.8.0-openjdk-headless-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:dd70d535c5dae1dcb2cd88e9b61db7ce97aff1dc24a1bcdfaf2ccba031382661
  • java-1.8.0-openjdk-headless-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:a20583ff72c0c59e6753ca7f96ce69e19cee2a5afa585aa1b46b28975f18b9f8
  • java-1.8.0-openjdk-headless-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:04b4da466f2e6c7c6d1fead248a7b41821bb438e9bf5ccee623b52bd374effdb
  • java-1.8.0-openjdk-javadoc-1.8.0.512.b09-1.el7_9.tuxcare.els1.noarch.rpm
    sha:0d79e49ae4f6f22bf3c421a54c208b76ef89dcaa9ffe2482e229ad5e65ba70c7
  • java-1.8.0-openjdk-javadoc-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.noarch.rpm
    sha:20aaa13a4c9a676e785ee31ddaeb3cc9b602af5132c3a079ed9ed3001dba6e21
  • java-1.8.0-openjdk-javadoc-zip-1.8.0.512.b09-1.el7_9.tuxcare.els1.noarch.rpm
    sha:8452d4c9356b8e30c4a9cc54a04f11d34f79ccaa4ad9ee645b6a10008ded2d32
  • java-1.8.0-openjdk-javadoc-zip-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.noarch.rpm
    sha:0016e4afa7ddcb262c82ab6e5856a21fc168654ada39ee6b99744406d7b2c8b3
  • java-1.8.0-openjdk-src-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:a15e58f35e3cac0382c7ee51d931a63a8ed8421809e6651dfdf8672929c07b5a
  • java-1.8.0-openjdk-src-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:5eae9da96843e0b0cdceba11e4c83342f3f73c679ed5c21d4578a510cae870bd
  • java-1.8.0-openjdk-src-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:c59f9b243a7562991d7657eeeaeba5e2c2487c29f96359df139cffbb8f51253c
  • java-1.8.0-openjdk-src-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:85a4984a03ba0edda12931b8ae53ec54fd748a212234e0ea2a4d25a73eb5b409
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.