BELL-SA-2026:11: Liberica JDK vulnerability fixed
Published: October 29, 2026Last modified: October 29, 2026
Description
A major vulnerability was discovered in Liberica JDK product family. The following packages are affected: JDK, JDK Lite, Full JDK, JRE, Full JRE. Please follow the instructions in the Solution section to make sure that your system includes all the necessary updates. For additional details about the vulnerability please follow the link in the CVE description.
Solution
The following components must be updated to versions listed below ("Fixed" column). For update instructions please refer to the installation guides of the latest versions of the components.
Liberica JDK 27.0.1.0.3 build 5
https://docs.bell-sw.com/liberica-jdk/27.0.1.0.3b5/general/install-guide/
Liberica JDK 25.0.5.0.3 build 5
https://docs.bell-sw.com/liberica-jdk/25.0.5.0.3b5/general/install-guide/
Liberica JDK 21.0.13.0.3 build 5
https://docs.bell-sw.com/liberica-jdk/21.0.13.0.3b5/general/install-guide/
Liberica JDK 17.0.21.0.3 build 5
https://docs.bell-sw.com/liberica-jdk/17.0.21.0.3b5/general/install-guide/
Liberica JDK 11.0.33.0.3 build 7
https://docs.bell-sw.com/liberica-jdk/11.0.33.0.3b7/general/install-guide/
Liberica JDK 8u513 build 9
https://docs.bell-sw.com/liberica-jdk/8u513b9/general/install-guide/
In general, it is sufficient to update all Liberica JDK instances in the system by installing the corresponding updated version of the product (8u513+9, 11.0.33.0.3, 17.0.21.0.3, 21.0.13.0.3, 25.0.5.0.3, 27.0.1.0.3).
| Product | Release | Package | Version |
|---|---|---|---|
| Liberica JDK | 8 | jdk | 8u513+9 |
| jdk-full | 8u513+9 | ||
| jdk-lite | 8u513+9 | ||
| jre | 8u513+9 | ||
| jre-full | 8u513+9 | ||
| 11 | jdk | 11.0.33.0.3+7 | |
| jdk-full | 11.0.33.0.3+7 | ||
| jdk-lite | 11.0.33.0.3+7 | ||
| jre | 11.0.33.0.3+7 | ||
| jre-full | 11.0.33.0.3+7 | ||
| 17 | jdk | 17.0.21.0.3+5 | |
| jdk-full | 17.0.21.0.3+5 | ||
| jdk-lite | 17.0.21.0.3+5 | ||
| jre | 17.0.21.0.3+5 | ||
| jre-full | 17.0.21.0.3+5 | ||
| 21 | jdk | 21.0.13.0.3+5 | |
| jdk-full | 21.0.13.0.3+5 | ||
| jdk-lite | 21.0.13.0.3+5 | ||
| jre | 21.0.13.0.3+5 | ||
| jre-full | 21.0.13.0.3+5 | ||
| 25 | jdk | 25.0.5.0.3+5 | |
| jdk-full | 25.0.5.0.3+5 | ||
| jdk-lite | 25.0.5.0.3+5 | ||
| jre | 25.0.5.0.3+5 | ||
| jre-full | 25.0.5.0.3+5 | ||
| 27 | jdk | 27.0.1.0.3+5 | |
| jdk-full | 27.0.1.0.3+5 | ||
| jdk-lite | 27.0.1.0.3+5 | ||
| jre | 27.0.1.0.3+5 | ||
| jre-full | 27.0.1.0.3+5 |