[CLSA-2026:1794415973] java-1.8.0-openjdk: Fix of 30 CVEs
Type:
security
Severity:
Critical
Release date:
2026-11-11 16:53:17 UTC
Description:
- Update to shenandoah-jdk8u512-b09 (8u512 GA, Oracle CPU 2026-10), built by merging jdk8u512-b09 into shenandoah8u512-b01 (clean merge); the shenandoah-jdk8u repository has not tagged 8u512 GA yet. - Drop jdk8186464-rh1433262-zip64_failure.patch, now upstream (JDK-8186464). - Security fixes from OpenJDK 8u512: - CVE-2026-83374: Security, enhance PKCS5 padding (JDK-8380715) - CVE-2026-83376: JSSE, enhance TLS certificate handling (JDK-8382178) - CVE-2026-83380: JAAS, enhance LDAP logins (JDK-8383047) - CVE-2026-83381: Security, enhance SASL authentication (JDK-8383076) - CVE-2026-83387: JDBC, enhance WebRowSets (JDK-8383301) - CVE-2026-83395: Networking, enhance HTTP client response handling (JDK-8383439) - CVE-2026-83400: JAXP, enhance XML processing (JDK-8384031) - CVE-2026-87290: JAXP, enhance XPath expressions (JDK-8383699) - CVE-2026-87292: Networking, enhance network clients (JDK-8383756) - CVE-2026-87293: RMI, enhance RMI connections (JDK-8383956) - CVE-2026-87294: Security, enhance certificate name checks (JDK-8383679) - CVE-2026-87367: JAXP, enhance template handling (JDK-8384654) - CVE-2026-91334: ImageIO, enhance JPEG loading (JDK-8384445) - CVE-2026-91335: AWT, enhance image handling (JDK-8384664) - CVE-2026-91373: JSSE, enhance TLS handshakes (JDK-8384771) - CVE-2026-91395: Utility, enhance Pack200 unpacking (JDK-8385219) - CVE-2026-91396: Utility, improve Pack200 handling (JDK-8385229) - CVE-2026-91397: Serviceability, enhance diagnostic sessions (JDK-8385249) - CVE-2026-91398: Networking, enhance SOCKS5 support (JDK-8385260) - CVE-2026-91400: Sound, enhance MIDI file handling (JDK-8385476) - CVE-2026-91410: Libraries, enhance zipfs - CVE-2026-91411: JGSS, enhance JGSS - CVE-2026-91415: 2D, enhance font rendering (JDK-8386187, JDK-8384781) - CVE-2026-91417: CORBA, enhance CORBA (JDK-8386175) - CVE-2026-91418: ImageIO, enhance GIF loading (JDK-8386552) - CVE-2026-91451: Networking, enhance HTTP server parsing (JDK-8386515) - CVE-2026-91452: Networking, enhance HTTP server (JDK-8386525) - CVE-2026-91453: Lightweight HTTP Server, improve HTTP headers (JDK-8386535) - CVE-2026-91461: JSSE, enhance TLS extensions (JDK-8386923) - CVE-2026-91462: JGSS, enhance krb5 tokens (JDK-8387152) - CVE-2026-91463: JGSS, enhance krb5 client (JDK-8387217) - CVE-2026-91464: JGSS, enhance Kerberos validation (JDK-8387238) - CVE-2026-101516: Libraries, enhance certificate constraint checking (JDK-8384021) - CVE-2026-91403: JSSE trusts impacted eMudhra intermediate CA certificates (JDK-8395142)
Updated packages:
  • java-1.8.0-openjdk-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:7de8a8c21300c5784905bc2873eff301f92232d563700e1f172d9ad9ed69f788
  • java-1.8.0-openjdk-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:77a7f761bfd2f248d8f6ab6bb874044cf91d712a35404ce37dbaf2212ab416c0
  • java-1.8.0-openjdk-accessibility-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:4b0ecc752906d1e26c30709940aa068dd3ad6584c1746c6913914af036d654df
  • java-1.8.0-openjdk-accessibility-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:9befadb1eb093ce6284b893822f4ab0250d2bc6339b59744903373443f511b5b
  • java-1.8.0-openjdk-accessibility-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:00e7ed0ff7066634dd4ddbaa39a27918554fb7965456d1555dc30ca041627da9
  • java-1.8.0-openjdk-accessibility-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:b7ed14d4f35e6111310b63c24a613ab8cd4066669fec92632f7971770892df06
  • java-1.8.0-openjdk-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:674a1600cdb4cb88fd0e4c740b373a203717e679418ea0c4c7493c016bc8c02c
  • java-1.8.0-openjdk-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:a27ac9bae72ff477470dba9fb6f7dac6e78b2b7654ae900f6069143aba76f205
  • java-1.8.0-openjdk-demo-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:e1bd0cf957b13624913a3b7e03ce57a7e1d458aefb41d85de0884e309ebe18fe
  • java-1.8.0-openjdk-demo-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:26fdd8279b0a232d0fce53bd8e7219b475d0458fe80333f15e4129c790c8b97f
  • java-1.8.0-openjdk-demo-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:124f1a725abcb3abd80859d6632b6dadfa4ed3b09e1e14ea13118d6839c222a1
  • java-1.8.0-openjdk-demo-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:d2dc330026a05b44422df434086be07f19b80f386e4c47ff8babcb9cd04713a5
  • java-1.8.0-openjdk-devel-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:db71401c53701fed83148ee7b7c642653fb52212c59af74e0d8165b0663a1538
  • java-1.8.0-openjdk-devel-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:661eb7945968e85451489ec80603b6511fad16d09139bdbe31812a43f0cf6f34
  • java-1.8.0-openjdk-devel-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:60601af511460b6877fc3bdc978d62fee9c6ba7eed77124a0f9e66256d784e50
  • java-1.8.0-openjdk-devel-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:469a0d1065c8d47db43214432e2cc65b68bb4d0dd1227da87ff6f59117dd2029
  • java-1.8.0-openjdk-headless-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:288afc56e33a5406e490a5f52d4ffc49f16e9c57c59bee124c6c172fac69d50b
  • java-1.8.0-openjdk-headless-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:392710ff5bb2f224feaebee0b315d582ffdc767316a389ddbe354f84bf1ac805
  • java-1.8.0-openjdk-headless-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:a2c4eab360d8fcbeadd100f9dd88b0cd93c91a9d12be11f846b957b0a46c85de
  • java-1.8.0-openjdk-headless-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:817e51a8d9830c37fa5a1886579e81f19294e0e6c96219ad07cd42526fee7402
  • java-1.8.0-openjdk-javadoc-1.8.0.512.b09-1.el7_9.tuxcare.els1.noarch.rpm
    sha:b9cb0f400a487d531c7f156c8543bc3e3509e8122283145d38c496ad6e7550b2
  • java-1.8.0-openjdk-javadoc-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.noarch.rpm
    sha:7be4d666cbbd88d97ef8696b7d3ef36ef04ab4cc70115961391f72c40eeae4e2
  • java-1.8.0-openjdk-javadoc-zip-1.8.0.512.b09-1.el7_9.tuxcare.els1.noarch.rpm
    sha:0e4e318b6264fd8d8ad39a1fed76146d4834a43b979cb08eba5e9430c35df1b5
  • java-1.8.0-openjdk-javadoc-zip-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.noarch.rpm
    sha:a67b0472c483da1ba3ad78ca071861c2fca7a9b6ff3ab7cd8f0b50e8c1f12823
  • java-1.8.0-openjdk-src-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:ffb5381187d591555c13af0a037c9c1cc1fa4c055a0f5cd1369b57bcbff0603b
  • java-1.8.0-openjdk-src-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:73244b7a42cdb11a6d208b2dd6195fe13aa729e41a0d9e22d8c9ef5ba646bc53
  • java-1.8.0-openjdk-src-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.i686.rpm
    sha:57f74a36fb79b79581443f8a6adc23725bfd1093bf2b679086bf8223fd7d7448
  • java-1.8.0-openjdk-src-debug-1.8.0.512.b09-1.el7_9.tuxcare.els1.x86_64.rpm
    sha:8bf63ffe4bb1061a13e62ac87df8665f3b86a661955596e4d4d73e33ffc46880
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.