BELL-SA-2026:5: Liberica JDK / OpenJFX vulnerabilities fixed
Published: July 28, 2026Last modified: July 27, 2026
Description
Multiple security vulnerabilities were discovered in Liberica JDK product family. The following packages are affected: JDK, JDK Lite, Full JDK, JRE, Full JRE. Please follow the instructions in the Solution section to make sure that your system includes all the necessary updates. Additional details for all the related CVEs are available at the links below.
Solution
The following components must be updated to versions listed below ("Fixed" column). For update instructions please refer to the installation guides of the latest versions of the components.
Liberica JDK 26.0.2 build 13
https://docs.bell-sw.com/liberica-jdk/26.0.2b13/general/install-guide/
Liberica JDK 25.0.4 build 9
https://docs.bell-sw.com/liberica-jdk/25.0.4b9/general/install-guide/
Liberica JDK 21.0.12 build 10
https://docs.bell-sw.com/liberica-jdk/21.0.12b10/general/install-guide/
Liberica JDK 17.0.20 build 10
https://docs.bell-sw.com/liberica-jdk/17.0.20b10/general/install-guide/
Liberica JDK 11.0.32 build 11
https://docs.bell-sw.com/liberica-jdk/11.0.32b11/general/install-guide/
Liberica JDK 8u502 build 9
https://docs.bell-sw.com/liberica-jdk/8u502b9/general/install-guide/
In general, it is sufficient to update all Liberica JDK instances in the system by installing the corresponding updated version of the product (8u502, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2).
| Product | Release | Package | Version |
|---|---|---|---|
| Liberica JDK | 8 | jdk | 8u502+9 |
| jdk-full | 8u502+9 | ||
| jdk-lite | 8u502+9 | ||
| jre | 8u502+9 | ||
| jre-full | 8u502+9 | ||
| 11 | jdk | 11.0.32+11 | |
| jdk-full | 11.0.32+11 | ||
| jdk-lite | 11.0.32+11 | ||
| jre | 11.0.32+11 | ||
| jre-full | 11.0.32+11 | ||
| 17 | jdk | 17.0.20+10 | |
| jdk-full | 17.0.20+10 | ||
| jdk-lite | 17.0.20+10 | ||
| jre | 17.0.20+10 | ||
| jre-full | 17.0.20+10 | ||
| 21 | jdk | 21.0.12+10 | |
| jdk-full | 21.0.12+10 | ||
| jdk-lite | 21.0.12+10 | ||
| jre | 21.0.12+10 | ||
| jre-full | 21.0.12+10 | ||
| 25 | jdk | 25.0.4+9 | |
| jdk-full | 25.0.4+9 | ||
| jdk-lite | 25.0.4+9 | ||
| jre | 25.0.4+9 | ||
| jre-full | 25.0.4+9 | ||
| 26 | jdk | 26.0.2+13 | |
| jdk-full | 26.0.2+13 | ||
| jdk-lite | 26.0.2+13 | ||
| jre | 26.0.2+13 | ||
| jre-full | 26.0.2+13 |