[ALSA-2026:0927] Important: java-17-openjdk security update
Type:
security
Severity:
important
Release date:
2026-01-24
Description:
The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * JDK: Improve JMX connections (CVE-2026-21925) * JDK: Improve HttpServer Request handling (CVE-2026-21933) * JDK: Enhance Certificate Checking (CVE-2026-21945) * libpng: LIBPNG buffer overflow (CVE-2025-64720) * libpng: LIBPNG heap buffer overflow (CVE-2025-65018) Bug Fix(es): * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142862, AlmaLinux-142881, AlmaLinux-142882, AlmaLinux-142883, AlmaLinux-142884, AlmaLinux-142885, AlmaLinux-142886, AlmaLinux-142887, AlmaLinux-142888) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 java-17-openjdk-javadoc-17.0.18.0.8-1.el8.aarch64.rpm 0e612a94da5dbc2dac1c4e27fa6190aa2409c857070e6c6dffc039a95065c587
aarch64 java-17-openjdk-src-17.0.18.0.8-1.el8.aarch64.rpm 184a22157575e0c13a2e500c2695d807cff54e53afa1f7dec538aa1daa5df599
aarch64 java-17-openjdk-devel-fastdebug-17.0.18.0.8-1.el8.aarch64.rpm 236658c376ead5496176e4bd290d7ad571c4a3adca942428a7fc52cf8c6ec2ac
aarch64 java-17-openjdk-jmods-fastdebug-17.0.18.0.8-1.el8.aarch64.rpm 2ea61dd02662955ab57a5143b8b0322cad08d67c53bf0d264e5b92ff74476d28
aarch64 java-17-openjdk-src-fastdebug-17.0.18.0.8-1.el8.aarch64.rpm 3ca05aa2c0491eda404a3083ed119d7fbfcaa9e11ba5e92f49674f321fc92869
aarch64 java-17-openjdk-demo-17.0.18.0.8-1.el8.aarch64.rpm 43d58a05f4a6335b4a2cbe626f2b487c4b20cbed7c0c398914a3b47e3306cd3f
aarch64 java-17-openjdk-headless-slowdebug-17.0.18.0.8-1.el8.aarch64.rpm 443b9b6792b10ff918d89104e1422ada4559d65959bab25042f8252dbda0aea1
aarch64 java-17-openjdk-demo-slowdebug-17.0.18.0.8-1.el8.aarch64.rpm 44d9911ecd1e2cfc0514a10fa27812b9f58e8cac5bb581cbbe8b5d5a9a280ead
aarch64 java-17-openjdk-devel-17.0.18.0.8-1.el8.aarch64.rpm 4c14f45f444331b823bee5d087cdf8829af955774d0f3b0d71663536e2e4366a
aarch64 java-17-openjdk-javadoc-zip-17.0.18.0.8-1.el8.aarch64.rpm 5136ba0f7d84db4ca3bd36846ca066205187a94a5378f9d0cbe174c285038be8
aarch64 java-17-openjdk-17.0.18.0.8-1.el8.aarch64.rpm 546427ba8d5eee799c16be2d9c28d82c3cff785d33da7ecf9eda90c6309fd185
aarch64 java-17-openjdk-static-libs-fastdebug-17.0.18.0.8-1.el8.aarch64.rpm 5c8c23d5c051996f8dd5dc27e02aa892bdaf2d93be431006280e79332f475f25
aarch64 java-17-openjdk-slowdebug-17.0.18.0.8-1.el8.aarch64.rpm 61f118b414f3c6a47569880bcf714cf9dde99815aa23da30cd02ea65bd1b3e72
aarch64 java-17-openjdk-fastdebug-17.0.18.0.8-1.el8.aarch64.rpm 6c16d9cbf6387efe3ef1051422874ced36a49baa6c7fddc401eab98601a1c349
aarch64 java-17-openjdk-jmods-17.0.18.0.8-1.el8.aarch64.rpm 6f5f7b59fbc870d72d4a4de365fd88acc9a3eb94ab1833391d58378232263165
aarch64 java-17-openjdk-devel-slowdebug-17.0.18.0.8-1.el8.aarch64.rpm 719df46e26c920659c766c5f1ce9e9d5f829ae294006717c12875ca2294752e1
aarch64 java-17-openjdk-demo-fastdebug-17.0.18.0.8-1.el8.aarch64.rpm 89a382e0d32b0faf3bf8a80ca4612d864ecf1a88e4150ed9f763d4e2412673f8
aarch64 java-17-openjdk-headless-fastdebug-17.0.18.0.8-1.el8.aarch64.rpm 8a7acd2866ea7b0b3c89d7f572d624746a4952b2b065af85eb9b24368648e430
aarch64 java-17-openjdk-src-slowdebug-17.0.18.0.8-1.el8.aarch64.rpm 95630d29ffcc6f18ac1ebdb8a95f4ee5ff740b26449b46a01bdaa060c1bceee5
aarch64 java-17-openjdk-headless-17.0.18.0.8-1.el8.aarch64.rpm 9cbad5884ccb63f0dc6e4368d89955ace1451ba5c49f1ebc24442c9ae7885ad0
aarch64 java-17-openjdk-static-libs-17.0.18.0.8-1.el8.aarch64.rpm c0d041c7ddb01b374cbd2604983fb39858d291a0d65959a2135823b9f2b52827
aarch64 java-17-openjdk-static-libs-slowdebug-17.0.18.0.8-1.el8.aarch64.rpm dd99f26b82bb004f45ee5c55c776b26bf6073a6db8386715fe1a84f83aa9e1a7
aarch64 java-17-openjdk-jmods-slowdebug-17.0.18.0.8-1.el8.aarch64.rpm fb1f39629a1a825f8f9121316bb5192c8c8b8cd51c45b4f2c96a5ba2f820f35b
ppc64le java-17-openjdk-devel-17.0.18.0.8-1.el8.ppc64le.rpm 0463d69418e34f4f74cf24ee2a60daab210c076496c0330a0d40a07f33ad3179
ppc64le java-17-openjdk-jmods-fastdebug-17.0.18.0.8-1.el8.ppc64le.rpm 15f27ca9cf30f13de12b38cba9b193f71fb043bcf99b05be9447b2548cbf1035
ppc64le java-17-openjdk-javadoc-zip-17.0.18.0.8-1.el8.ppc64le.rpm 21b1fd37219f2fde9dc127909fa6077053784ffdf192a5a8ea356f314835f54a
ppc64le java-17-openjdk-headless-slowdebug-17.0.18.0.8-1.el8.ppc64le.rpm 3ecd28474220e607c47f1155e736905ef3369de1e67327180e88861e0ca8daae
ppc64le java-17-openjdk-headless-17.0.18.0.8-1.el8.ppc64le.rpm 43583cdcd960de51182e78828304c52b93000cc7fe29d646c8a6dc3e876cc0ed
ppc64le java-17-openjdk-demo-fastdebug-17.0.18.0.8-1.el8.ppc64le.rpm 50cc152fdc70b72f3ca492ee20815c86f83a76a1004a6799f476a251afb24603
ppc64le java-17-openjdk-jmods-slowdebug-17.0.18.0.8-1.el8.ppc64le.rpm 65e5c800061df1242f3b82b5d8eed19d3866f77e9809cfbeaa289e934787206d
ppc64le java-17-openjdk-src-17.0.18.0.8-1.el8.ppc64le.rpm 72a93772bab74ea6e33188c02340bb4ec2c65d04562b43691b4277b8b9751c04
ppc64le java-17-openjdk-devel-fastdebug-17.0.18.0.8-1.el8.ppc64le.rpm 73f15cb6656bd9bc5375487d333bc4197a4efcf06d48f53685d92bf8d3971555
ppc64le java-17-openjdk-static-libs-17.0.18.0.8-1.el8.ppc64le.rpm 7c664a37690e27014b964c481c85a21c6c21f5f7c73e5670adea51b33258516d
ppc64le java-17-openjdk-jmods-17.0.18.0.8-1.el8.ppc64le.rpm 914a748d52b5d6e754105a3726cf774219c385023afe33cd6f1442c6239fd47f
ppc64le java-17-openjdk-fastdebug-17.0.18.0.8-1.el8.ppc64le.rpm 935ef71d6d0233e220b29e0decbac9681613bd79688fd44f2624ab175995a0cf
ppc64le java-17-openjdk-slowdebug-17.0.18.0.8-1.el8.ppc64le.rpm 9bf24006fe9d8c2662409b65eafc4c6e2034f2a64b2ea7dcdbee901431ff0312
ppc64le java-17-openjdk-demo-17.0.18.0.8-1.el8.ppc64le.rpm 9bf43b3c837c39effd74cf88f492c8074c642c5e10917dcd4792900546bfb1a4
ppc64le java-17-openjdk-17.0.18.0.8-1.el8.ppc64le.rpm 9ce3dec54c3b1a3295f13f39ac0b78c8cc52dab28b2fd605950ab5959e274655
ppc64le java-17-openjdk-src-fastdebug-17.0.18.0.8-1.el8.ppc64le.rpm c6fad462cb1d5ae3feece9cbc7b54c6f754b3fb8398379221bdc1bc22f9a266c
ppc64le java-17-openjdk-headless-fastdebug-17.0.18.0.8-1.el8.ppc64le.rpm d6d155412fe0f069dc775fbae7507cc7ae90b2e91d2c8af42a4951448ebfd534
ppc64le java-17-openjdk-demo-slowdebug-17.0.18.0.8-1.el8.ppc64le.rpm da27ac850efba98416c9d7e9c2814a0969128f05c48137dbf5a381dd9d2602b8
ppc64le java-17-openjdk-javadoc-17.0.18.0.8-1.el8.ppc64le.rpm e3e118ce34bd0f45b4a7b19ced71a159ca058cab5703dae3699e6bcd9294f73e
ppc64le java-17-openjdk-static-libs-fastdebug-17.0.18.0.8-1.el8.ppc64le.rpm f9857e55a9e70dd9c7adef9d378d14117f79267beda6fe06ab758b5714dbffe3
ppc64le java-17-openjdk-devel-slowdebug-17.0.18.0.8-1.el8.ppc64le.rpm fa6f01e0e88b9c37762232fe89f75189c811a396cf034a34eb514b922096d9a2
ppc64le java-17-openjdk-src-slowdebug-17.0.18.0.8-1.el8.ppc64le.rpm feaf6f1dc1951eb4e165ec4ebc9cd9a3b7e09e86f20bde1de5be821794ba57e1
ppc64le java-17-openjdk-static-libs-slowdebug-17.0.18.0.8-1.el8.ppc64le.rpm ff97b471ee6d83a63a0c961b1dfd191cce7be7f6d78b1591b9113634df78ad1c
s390x java-17-openjdk-17.0.18.0.8-1.el8.s390x.rpm 00fdac28f7e7d6aafaa9563a22d839eff59ec226145f7c53034fd274bbdecd12
s390x java-17-openjdk-demo-17.0.18.0.8-1.el8.s390x.rpm 016098d5926832e9cd94aadd0e8c4b7cabf0834a8cb94170df3f869bbcb9b2f9
s390x java-17-openjdk-javadoc-zip-17.0.18.0.8-1.el8.s390x.rpm 0c39df36429c36c698e156453a2cc1c718634b32b34391c4ada566b3945aca1e
s390x java-17-openjdk-jmods-17.0.18.0.8-1.el8.s390x.rpm 1c7a3d7e14d219d528de4775aa27c37a2acfe1110bc8cb4d9886c1028db93241
s390x java-17-openjdk-headless-17.0.18.0.8-1.el8.s390x.rpm 63acf882716f90268b6b367431e5526ecbb38c48c96ffd48894e1e52f818794a
s390x java-17-openjdk-javadoc-17.0.18.0.8-1.el8.s390x.rpm 6ffb3917cc1849d78cfc9207fc92eb4f71080b33487963f37a6f96f10a4662d6
s390x java-17-openjdk-static-libs-slowdebug-17.0.18.0.8-1.el8.s390x.rpm 764037fc62154c7c9d21917cfe4638e82404f8c8a0d0415a780476d2d9277e50
s390x java-17-openjdk-devel-17.0.18.0.8-1.el8.s390x.rpm 7e82269d317bee7e4f9b06ef10c9dd16cb1a2970e22a80b97ca9a14b3e12c570
s390x java-17-openjdk-static-libs-17.0.18.0.8-1.el8.s390x.rpm 7f6174d5a28678766028a36d709186a4eecdc6898392d52369fb2ba4a39daedc
s390x java-17-openjdk-devel-slowdebug-17.0.18.0.8-1.el8.s390x.rpm a683b042b6c52b29b8a8f551d102a9d372aaf473d57c811e295f1cced27ce209
s390x java-17-openjdk-headless-slowdebug-17.0.18.0.8-1.el8.s390x.rpm b8dfff1e777e4c6e057fac77d7fad80867aef236f829bb8cdc061e1b00cb57e3
s390x java-17-openjdk-src-slowdebug-17.0.18.0.8-1.el8.s390x.rpm bf649f6e86669900f4e0c942a2c1db895e2c47cbb2bac694d71c1ddc350cf449
s390x java-17-openjdk-src-17.0.18.0.8-1.el8.s390x.rpm e65cc9365e4cf9a12c4c8cecf1fde780a35565166dc446fca4459184c9565835
s390x java-17-openjdk-jmods-slowdebug-17.0.18.0.8-1.el8.s390x.rpm e9ec779b97f82cc2e68bb5453495022c179d5b1ef05a66f7f571923c0de65670
s390x java-17-openjdk-slowdebug-17.0.18.0.8-1.el8.s390x.rpm ea3a51d4df635dbe1a4e4ff596ed937d15d4556a356e4dec1758f2ceb8c5c9d4
s390x java-17-openjdk-demo-slowdebug-17.0.18.0.8-1.el8.s390x.rpm f4c0e46a8d39d868122c535391ce5cb49f70e73a0e5fc51fddea11763f46820a
x86_64 java-17-openjdk-static-libs-slowdebug-17.0.18.0.8-1.el8.x86_64.rpm 2538b2d2dc404231088c5b253ba4fcca4289fdf4630e6e4fe08664c7ecc78aac
x86_64 java-17-openjdk-static-libs-fastdebug-17.0.18.0.8-1.el8.x86_64.rpm 49054eb4a674d0c52c062561fe43bf3d2880273d4db8f87484e4eed0dad4dea5
x86_64 java-17-openjdk-headless-17.0.18.0.8-1.el8.x86_64.rpm 49a7f61646eca5d1ae508b70fe243ea94653ca7ee9d2984413c046dcb24d3f2a
x86_64 java-17-openjdk-jmods-17.0.18.0.8-1.el8.x86_64.rpm 4b5254daf4cf82a8280d7498606e846ee3e6ebd59d84e462f90aa4f7a8638b5d
x86_64 java-17-openjdk-src-slowdebug-17.0.18.0.8-1.el8.x86_64.rpm 552aa4046f822c277ae3a9ff150563fcd716694369e6f37545fad26b09a690e8
x86_64 java-17-openjdk-javadoc-zip-17.0.18.0.8-1.el8.x86_64.rpm 60060b86f7696cb351efe8cb42290029ecffd9efdb296e38a29a4f052ada619b
x86_64 java-17-openjdk-src-17.0.18.0.8-1.el8.x86_64.rpm 60e62c158d749d56b4fac1de631250200bd0c9d4a07792f425212e0eef77842c
x86_64 java-17-openjdk-devel-fastdebug-17.0.18.0.8-1.el8.x86_64.rpm 63b7647be3f8d951ffb2f614c4bc6860fd9f3cdf06937269b09e0350806c3efe
x86_64 java-17-openjdk-headless-slowdebug-17.0.18.0.8-1.el8.x86_64.rpm 67177a11a196f99e52260ac3f493e292a0ab6a94d054e14f2f78609bf7af9955
x86_64 java-17-openjdk-demo-slowdebug-17.0.18.0.8-1.el8.x86_64.rpm 859c7385cda93674a0039bec4ac10bbc8613705f447a60292839ebfc6ed6fd91
x86_64 java-17-openjdk-devel-slowdebug-17.0.18.0.8-1.el8.x86_64.rpm 86ce87a28d5e381b0b390fa16565a79897b7e518e3ce9cd6d9b3b93848021b21
x86_64 java-17-openjdk-devel-17.0.18.0.8-1.el8.x86_64.rpm 8b80fc994e3b215ae28f10512b23484536b3b50bcda995264a46a20469130792
x86_64 java-17-openjdk-slowdebug-17.0.18.0.8-1.el8.x86_64.rpm 8bded8951214cedb6ca587cfd8b9472ef11f082d70384900c593a1ac20f5ca5e
x86_64 java-17-openjdk-javadoc-17.0.18.0.8-1.el8.x86_64.rpm 95610c402161eef8c0b58fed622e20629052ae68153e80f1a8fa196ed8e7c68c
x86_64 java-17-openjdk-static-libs-17.0.18.0.8-1.el8.x86_64.rpm 958772893600a54c38e03f76c484cee5c6ddbe5680831babf93d126be101085f
x86_64 java-17-openjdk-demo-17.0.18.0.8-1.el8.x86_64.rpm 9595dd7da158b8af9387b4bccd7de874668cc8be58bb2898060b54805ecc8afa
x86_64 java-17-openjdk-jmods-fastdebug-17.0.18.0.8-1.el8.x86_64.rpm a282dc61eb220d83b108a14cc1e8bd62a33bbf5f2b58ba6a219d97027f342a7a
x86_64 java-17-openjdk-headless-fastdebug-17.0.18.0.8-1.el8.x86_64.rpm a72c5c3cf6ab24d0dcff07e93c393b240c95c64e887333de021745347dd7530b
x86_64 java-17-openjdk-demo-fastdebug-17.0.18.0.8-1.el8.x86_64.rpm af5b19d1d0cc8064b2fd7d3009e66ffdb675f500de2f74317eb2245852d8bc9b
x86_64 java-17-openjdk-17.0.18.0.8-1.el8.x86_64.rpm c61e05d1209cb18899ad9ea71310f3be4f0a115e0336e6185cec4a7c910904dc
x86_64 java-17-openjdk-fastdebug-17.0.18.0.8-1.el8.x86_64.rpm c98bc3a43e25afc48a75fa6e22d6b1efad985e61e595c27817c412ab2a5cc60b
x86_64 java-17-openjdk-src-fastdebug-17.0.18.0.8-1.el8.x86_64.rpm ddf03fcc33205eefd999ccd3bbd2922ccc71f9e36495efa3a1d287fb834bd3b7
x86_64 java-17-openjdk-jmods-slowdebug-17.0.18.0.8-1.el8.x86_64.rpm deb2c2265acd797a189ce678bcb3ae783e790584a8e3757765205f14f54843ab
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.