diff --git a/java-11/Dockerfile b/java-11/Dockerfile
index 6ff312c..4f3ea17 100644
--- a/java-11/Dockerfile
+++ b/java-11/Dockerfile
@@ -34,7 +34,9 @@ jdk.security.auth,\
 # sun.misc.Unsafe and friends
 jdk.unsupported,\
 # jdk specific network options
-jdk.net\
+jdk.net,\
+# zip, jar file systems
+jdk.zipfs\
  --output jre
 
 # We extract JRE's hard dependencies, libz and SSL certs, from the fat JRE image.
diff --git a/java-11/build.gradle.kts b/java-11/build.gradle.kts
index a5a0c29..14f7da0 100644
--- a/java-11/build.gradle.kts
+++ b/java-11/build.gradle.kts
@@ -2,7 +2,7 @@ plugins {
   id("org.hypertrace.docker-publish-plugin")
 }
 
-var javaVersion = "11.0.8-11.41.23"
+var javaVersion = "11.0.10-11.45.27"
 
 hypertraceDocker {
   defaultImage {
diff --git a/java-14/Dockerfile b/java-14/Dockerfile
index d5ca5f4..ed84ead 100644
--- a/java-14/Dockerfile
+++ b/java-14/Dockerfile
@@ -34,7 +34,9 @@ jdk.security.auth,\
 # sun.misc.Unsafe and friends
 jdk.unsupported,\
 # jdk specific network options
-jdk.net\
+jdk.net,\
+# zip, jar file systems
+jdk.zipfs\
  --output jre
 
 # We extract JRE's hard dependencies, libz and SSL certs, from the fat JRE image.