{"id":"CLSA-2025-1767028399","summary":"java-11-openjdk: Fix of 5 CVEs","details":"- Upgrade to openjdk-11.0.29+7 (GA). The following CVEs were fixed:\n- CVE-2023-48161: fix buffer overflow vulnerability\n- CVE-2024-21147: RangeCheckElimination array index overflow\n- CVE-2025-21587: fix TLS connection support to avoid unauthorized\n  access to critical data\n- CVE-2025-53057: enhance certificate handling to prevent unauthorized creation\n- CVE-2025-53066: enhance Path Factories to prevent unauthorized access","modified":"2026-05-27T11:18:18.176109582Z","published":"2025-12-29T17:13:22Z","upstream":["CVE-2023-48161","CVE-2024-21147","CVE-2025-21587","CVE-2025-53057","CVE-2025-53066"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2025-1767028399.html"}],"affected":[{"package":{"name":"java-11-openjdk","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.29.0.7-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1767028399.json"}},{"package":{"name":"java-11-openjdk-demo","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-demo?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.29.0.7-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1767028399.json"}},{"package":{"name":"java-11-openjdk-devel","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-devel?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.29.0.7-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1767028399.json"}},{"package":{"name":"java-11-openjdk-headless","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-headless?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.29.0.7-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1767028399.json"}},{"package":{"name":"java-11-openjdk-javadoc","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-javadoc?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.29.0.7-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1767028399.json"}},{"package":{"name":"java-11-openjdk-javadoc-zip","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-javadoc-zip?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.29.0.7-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1767028399.json"}},{"package":{"name":"java-11-openjdk-jmods","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-jmods?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.29.0.7-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1767028399.json"}},{"package":{"name":"java-11-openjdk-src","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-src?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.29.0.7-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1767028399.json"}},{"package":{"name":"java-11-openjdk-static-libs","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/java-11-openjdk-static-libs?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.29.0.7-1.el8.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1767028399.json"}}],"schema_version":"1.7.5"}