[ALSA-2026:0928] Important: java-21-openjdk security update
Type:
security
Severity:
important
Release date:
2026-01-26
Description:
The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * JDK: Improve JMX connections (CVE-2026-21925) * JDK: Improve HttpServer Request handling (CVE-2026-21933) * JDK: Enhance Certificate Checking (CVE-2026-21945) * libpng: LIBPNG buffer overflow (CVE-2025-64720) * libpng: LIBPNG heap buffer overflow (CVE-2025-65018) Bug Fix(es): * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142860, AlmaLinux-142876, AlmaLinux-142877, AlmaLinux-142878, AlmaLinux-142879, AlmaLinux-142880) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 java-21-openjdk-demo-slowdebug-21.0.10.0.7-1.el8.aarch64.rpm 00143a36e2f4bf8aae1a5fbfff69fce804411f65b1ba9b64881c762e1f90abb6
aarch64 java-21-openjdk-static-libs-slowdebug-21.0.10.0.7-1.el8.aarch64.rpm 0e6528a603c5fed3fe2f0c34e420f9a28e3464d966968ae372ee605a7773abb0
aarch64 java-21-openjdk-devel-slowdebug-21.0.10.0.7-1.el8.aarch64.rpm 170631fc9379368aae15ffce6725d8aa353aa0b4c26998e261457574587de4d8
aarch64 java-21-openjdk-devel-21.0.10.0.7-1.el8.aarch64.rpm 1f25def2a287b63f9d3f52190b0fa3e235ac3dfc7966e88e36165a0ac5a8853c
aarch64 java-21-openjdk-javadoc-zip-21.0.10.0.7-1.el8.aarch64.rpm 23c045dc40d10a90dcaab965bfdd5377d061aee659a2a2cd0202110d3c449e40
aarch64 java-21-openjdk-src-fastdebug-21.0.10.0.7-1.el8.aarch64.rpm 4ca22a6a259e0c0fae7e80d32fbb75a109fb65236a0ea31e88be2c40555430ac
aarch64 java-21-openjdk-static-libs-21.0.10.0.7-1.el8.aarch64.rpm 60843d8f2be3a8ca27d4168dc1d9cabe09ddf22eb57d5295d3a5dbcefd677e61
aarch64 java-21-openjdk-jmods-slowdebug-21.0.10.0.7-1.el8.aarch64.rpm 64628d9ab357316b0620de73a30ff77b20774434a65ce7bdc59916ae2fe8daa7
aarch64 java-21-openjdk-headless-21.0.10.0.7-1.el8.aarch64.rpm 6fdb7f5d64af60a3a88456a32950a68815bdd989e2c3284fa7093d27ebfd78c2
aarch64 java-21-openjdk-headless-slowdebug-21.0.10.0.7-1.el8.aarch64.rpm 71ed9523537c48f6c39dc19006c3aa24d63c929b69e942b1e235681711873d74
aarch64 java-21-openjdk-fastdebug-21.0.10.0.7-1.el8.aarch64.rpm 78d9bf27394c84d2f58d309c1710fbef71fe8450f799b5233c698d658d1ab4e8
aarch64 java-21-openjdk-slowdebug-21.0.10.0.7-1.el8.aarch64.rpm 84b1d4ea5eec941f760c16da2dc11fc900f6f23ae6049231f57923179269e620
aarch64 java-21-openjdk-src-21.0.10.0.7-1.el8.aarch64.rpm 896ce1cc6a9ade5d481d1833e2e5d769411fd7510e1ba90b01b702a429c90dab
aarch64 java-21-openjdk-static-libs-fastdebug-21.0.10.0.7-1.el8.aarch64.rpm c59cafa7a173093f013dec85a9629bd466d94394d482c715f5d65ab51a297aba
aarch64 java-21-openjdk-demo-21.0.10.0.7-1.el8.aarch64.rpm c6a2ce400e298e7aded97ff3a699d94d085c51787fed54b84cdfb3125ddf9a64
aarch64 java-21-openjdk-javadoc-21.0.10.0.7-1.el8.aarch64.rpm cb4eba8b4a2cdb2d5e6447d882584670d9fcfd920233f0f8e9fe5307e7ca6afe
aarch64 java-21-openjdk-devel-fastdebug-21.0.10.0.7-1.el8.aarch64.rpm cc3edd9f4050597a3e066b02b6570b35e42a76af6001d00178a8deaa4ab7cec2
aarch64 java-21-openjdk-jmods-fastdebug-21.0.10.0.7-1.el8.aarch64.rpm d1636ef506eb59e2d3a425d5a6b2bdb78ab679a2f80446d7eafe8cee81575f2a
aarch64 java-21-openjdk-headless-fastdebug-21.0.10.0.7-1.el8.aarch64.rpm d6741ac99f3d6491032d93c972e6655a5941dd9bff3831a1fa2b8ab019b02253
aarch64 java-21-openjdk-21.0.10.0.7-1.el8.aarch64.rpm e5b600b0ce87109fabfef605bd1907c1361175a940865b414987985b3b4f4d67
aarch64 java-21-openjdk-src-slowdebug-21.0.10.0.7-1.el8.aarch64.rpm f0bb2375ef87b60294face945fcc3401acac86b5a897de53336862cbdbcf12d9
aarch64 java-21-openjdk-demo-fastdebug-21.0.10.0.7-1.el8.aarch64.rpm f0bb5c404d35c2cbc5bc35c519c68f25910b579c4ca9db07bac8c7962f98956f
aarch64 java-21-openjdk-jmods-21.0.10.0.7-1.el8.aarch64.rpm fc5696e0f77a931466068295fa52a1e71016ee0211685b0692564b859a9f9bf4
ppc64le java-21-openjdk-demo-21.0.10.0.7-1.el8.ppc64le.rpm 0d88de12a288e11611da1257936679afbd9c9d0027e1a5c4869a5532cfe969f4
ppc64le java-21-openjdk-devel-fastdebug-21.0.10.0.7-1.el8.ppc64le.rpm 287b3f61b360c39deb80a3162198a91b9d015db53d8aa8c97afc1cd880d670ec
ppc64le java-21-openjdk-javadoc-21.0.10.0.7-1.el8.ppc64le.rpm 2b1a62e76fe0bac91a826ebdab0b2818adc838287c54af6ea00469df23d32eb3
ppc64le java-21-openjdk-src-21.0.10.0.7-1.el8.ppc64le.rpm 3bb4e49e8aad97278caa75807b0e5729f7ebb79943383b91614a0942521b0253
ppc64le java-21-openjdk-headless-fastdebug-21.0.10.0.7-1.el8.ppc64le.rpm 3cf05235051da375e88a14e7d73ca93d9e35b32cc08c0965ce06805780997e7c
ppc64le java-21-openjdk-headless-slowdebug-21.0.10.0.7-1.el8.ppc64le.rpm 44c9edae96e29fbdf87f0aaa4757dc32375ac7f8692c8c116a0cafb928ef993c
ppc64le java-21-openjdk-slowdebug-21.0.10.0.7-1.el8.ppc64le.rpm 470ef54ca3a7cc2441fae64cd17367717db4325eeaa5b1e9b9caabc7cfe6ad9d
ppc64le java-21-openjdk-src-fastdebug-21.0.10.0.7-1.el8.ppc64le.rpm 5b763f6fae6ddc29deedb5cd23f13f7dc7b51ecc337bd8ef81e41b1763120aa1
ppc64le java-21-openjdk-demo-slowdebug-21.0.10.0.7-1.el8.ppc64le.rpm 697f74fe86193c0103ab0c2c5ea64778bc6f3ee4c12f66931e84c7aaefcaa7f4
ppc64le java-21-openjdk-static-libs-21.0.10.0.7-1.el8.ppc64le.rpm 8a9ecf4996d06bbfb95e4b00f73bf56edfa77f9dc1d2edd3517afff205192533
ppc64le java-21-openjdk-static-libs-fastdebug-21.0.10.0.7-1.el8.ppc64le.rpm 8cc4e9b256a651024385d9a94cb320286b9f7bc9b05c822c1f2769a3d8c576a4
ppc64le java-21-openjdk-static-libs-slowdebug-21.0.10.0.7-1.el8.ppc64le.rpm 97d19a09573cbf79d1d956b5366b78cb04e9b097e3e1caf986f28b799f603ed3
ppc64le java-21-openjdk-javadoc-zip-21.0.10.0.7-1.el8.ppc64le.rpm 9dedd72d6bc720d7f88a4e944dfe7853c490fda353043a2deaf593ad3e6f3115
ppc64le java-21-openjdk-headless-21.0.10.0.7-1.el8.ppc64le.rpm 9feb0ab34346112030bcd2c3f3b7212da956da94af5db56c43150786e57b1828
ppc64le java-21-openjdk-jmods-21.0.10.0.7-1.el8.ppc64le.rpm b5af7e29dbb49382cdc594fdadd9959327c769b7d95917836728f934edb97820
ppc64le java-21-openjdk-jmods-fastdebug-21.0.10.0.7-1.el8.ppc64le.rpm b6e1beaa325ad1a016a6b0e8d57dbc5790962095185227cd887b682a016f4863
ppc64le java-21-openjdk-devel-21.0.10.0.7-1.el8.ppc64le.rpm b7228ce9ac6f5b209518c66a716f05e7fda607e9ed8e3aa58e247046fe248570
ppc64le java-21-openjdk-21.0.10.0.7-1.el8.ppc64le.rpm b824d8f9c4fbaab9a081c44a7a4692cc63a286d44efc83ebca45cd62dee91abf
ppc64le java-21-openjdk-fastdebug-21.0.10.0.7-1.el8.ppc64le.rpm b90f2c76a55d3814e1b52796b55643fd10e8ebc42a6ca108aaa179bf50f45fc3
ppc64le java-21-openjdk-src-slowdebug-21.0.10.0.7-1.el8.ppc64le.rpm c947b7a3a241d14709a036fd80fc41a2c16d58b21cb105b42129afe540e48e4b
ppc64le java-21-openjdk-demo-fastdebug-21.0.10.0.7-1.el8.ppc64le.rpm cc3b0f4d989cdb7a4ef6c3e83c32817d4444bbcfcf7b1809570d1163a89f9444
ppc64le java-21-openjdk-devel-slowdebug-21.0.10.0.7-1.el8.ppc64le.rpm cd64004cfd93af0391ad35a3e5fbdc0408e589fdf3e936d2c741d47419d446d3
ppc64le java-21-openjdk-jmods-slowdebug-21.0.10.0.7-1.el8.ppc64le.rpm fef88a21faf25c90e2ca764aad87a63b3511f3c9fdccd8e32877be00ea98405c
s390x java-21-openjdk-demo-21.0.10.0.7-1.el8.s390x.rpm 034222376ee562b77e975213d6a8e57abd29efa644c63a9a3ba51349130da99e
s390x java-21-openjdk-static-libs-slowdebug-21.0.10.0.7-1.el8.s390x.rpm 099a1542b90f0b4fefe134adea0e716770e73de4b687bd9094729233618969bf
s390x java-21-openjdk-jmods-21.0.10.0.7-1.el8.s390x.rpm 1e472ad59aa050c8108d3c880aea14953c6a94501192f82d227b81492c4d3a58
s390x java-21-openjdk-slowdebug-21.0.10.0.7-1.el8.s390x.rpm 26079971158b4b6098f206d12bf76865d00c7f6e66752702d80449ce79418bbf
s390x java-21-openjdk-jmods-slowdebug-21.0.10.0.7-1.el8.s390x.rpm 299a31d13b1525c3ac8ce03e486fe6bbe8c18aeaa9db97274ceedf1d18b29898
s390x java-21-openjdk-headless-slowdebug-21.0.10.0.7-1.el8.s390x.rpm 3d043226a973a127ed4ade91b99e0436452761f863738b78862d8fb2beb132ed
s390x java-21-openjdk-headless-21.0.10.0.7-1.el8.s390x.rpm 4221e6c4a735fc3abc5c05bcef6b8db091307d48dfc3fbf1a23d51f227078a74
s390x java-21-openjdk-21.0.10.0.7-1.el8.s390x.rpm 4f66fd9d075feffcd025b260cdda2fac0e03d074cb0535cc35b83db7df449c3f
s390x java-21-openjdk-src-slowdebug-21.0.10.0.7-1.el8.s390x.rpm 764401cdc2deb089d585313ed2e42d7d738f64631caf6e8cc1de3187c4813fc3
s390x java-21-openjdk-static-libs-21.0.10.0.7-1.el8.s390x.rpm 8806e2fe5457273d59dd8fea2c138dd07285be0b0089f9c129632ebc44d9a5a4
s390x java-21-openjdk-src-21.0.10.0.7-1.el8.s390x.rpm 986ed54cbaeeef60c84ab2a76e24a4b1079998577c3e1e05ed4c0fb7cc52921e
s390x java-21-openjdk-demo-slowdebug-21.0.10.0.7-1.el8.s390x.rpm 98b8e0ebc944fe8f57ca8dde7a5b5c1b6d4d43025cab65fc815c36b8b1dff0fe
s390x java-21-openjdk-javadoc-21.0.10.0.7-1.el8.s390x.rpm a180900e60e939668d6e9a386c27468cedbecc7a1d09a6a8b6841e7dbd67ab2d
s390x java-21-openjdk-devel-21.0.10.0.7-1.el8.s390x.rpm b5396fe7c1bacff7d1deb43b2d13cb3297235b07635efd01b1395cbeaaa33991
s390x java-21-openjdk-javadoc-zip-21.0.10.0.7-1.el8.s390x.rpm dc1eee2e6c7058678744fd7e7cc638636e551c73ecc27d61d8c23b8d1dc35004
s390x java-21-openjdk-devel-slowdebug-21.0.10.0.7-1.el8.s390x.rpm e58b2c2f590d700a651e61f2526e9f25a24f66823f2c633bf237e33a5b79c3dc
x86_64 java-21-openjdk-jmods-slowdebug-21.0.10.0.7-1.el8.x86_64.rpm 0b8faecd62f86366224131ee02c9b6342a71668687deb2573bb5d8a95877f2a2
x86_64 java-21-openjdk-static-libs-fastdebug-21.0.10.0.7-1.el8.x86_64.rpm 0ccef522b3d5f7e8c60e72dd91f82ef0d543e1b2744f851f8fe0b15eed062be2
x86_64 java-21-openjdk-static-libs-slowdebug-21.0.10.0.7-1.el8.x86_64.rpm 180b52a488b2cc254faa56e60c175fd95d53b7c2e2347637de7e43a8686aef42
x86_64 java-21-openjdk-devel-fastdebug-21.0.10.0.7-1.el8.x86_64.rpm 25d645be07d6c12b3253d7e66e91802b5a56910897f2b348e44428023eaf3b29
x86_64 java-21-openjdk-headless-slowdebug-21.0.10.0.7-1.el8.x86_64.rpm 4034528b7a74b59d61f3b347e31811154b1cd2870917d528b989796cf609df2a
x86_64 java-21-openjdk-headless-21.0.10.0.7-1.el8.x86_64.rpm 446906683a455df58303601987f8ebabc5a730a8d7a5c2c6221fb5bc39009de1
x86_64 java-21-openjdk-javadoc-zip-21.0.10.0.7-1.el8.x86_64.rpm 4d0b4ffc5fce585d1a5b54b361909ad249751e7fdab976ae0265d438a1a22ad4
x86_64 java-21-openjdk-src-fastdebug-21.0.10.0.7-1.el8.x86_64.rpm 52e6846dd9bc888cba1cdda492d04023eb2569a5b9ae35ba4456eecfe601e2a1
x86_64 java-21-openjdk-src-slowdebug-21.0.10.0.7-1.el8.x86_64.rpm 91ac551034bc7c809e3939d74fe9cacf5be49c1c95fa31d5b83d7bf935b2305e
x86_64 java-21-openjdk-devel-21.0.10.0.7-1.el8.x86_64.rpm 93185e7d07aac4362c1e20911c27f6134c2b0ba7765deb9a887da2458a292f5b
x86_64 java-21-openjdk-jmods-21.0.10.0.7-1.el8.x86_64.rpm 98d5e6edf9a4a85e075d15ab6eeb4d3adb40cefc9ba4f2b65dabd347705026cd
x86_64 java-21-openjdk-slowdebug-21.0.10.0.7-1.el8.x86_64.rpm 9a9ac967a0a616e80c0d0697b9ff9cfb9d065390e13c81cf21bfbf7ee7a58d12
x86_64 java-21-openjdk-demo-21.0.10.0.7-1.el8.x86_64.rpm 9e8d011581a2e30f94876904bd531e754f7d33e3b13be801f8b70dd3d4abc286
x86_64 java-21-openjdk-javadoc-21.0.10.0.7-1.el8.x86_64.rpm a2c27fd2860715b6ed0f7102ebd03e7eb540bbf665ed59403d8c0ff17e217b43
x86_64 java-21-openjdk-headless-fastdebug-21.0.10.0.7-1.el8.x86_64.rpm abca041eba08ba87848e0b404d80ebc916de7ca2bc010225ef6418990d69f9f4
x86_64 java-21-openjdk-src-21.0.10.0.7-1.el8.x86_64.rpm af5885685968b3e39cc36d994557763a22025ee25d40abd187d37ab544884edc
x86_64 java-21-openjdk-jmods-fastdebug-21.0.10.0.7-1.el8.x86_64.rpm b1a1a9a342d34b9383feca6403ce703aefe7bfa36f9ef8ea17ba92ebe3b18a9f
x86_64 java-21-openjdk-demo-fastdebug-21.0.10.0.7-1.el8.x86_64.rpm b22246131594503c203e038239b2123d6cfd1c7d0baf957fa5e404e482bfaeba
x86_64 java-21-openjdk-fastdebug-21.0.10.0.7-1.el8.x86_64.rpm ba2a9df590d3283cdee7bb7087593acbe92205064071f6a38ac7461542e15193
x86_64 java-21-openjdk-devel-slowdebug-21.0.10.0.7-1.el8.x86_64.rpm bbb895823bbdac7f81ad00eeaf7741f7662281d565155ac8cc940d717d8f7ff9
x86_64 java-21-openjdk-demo-slowdebug-21.0.10.0.7-1.el8.x86_64.rpm bccc491739bec84e20d5275b6d54df90ae30722c1adc85f602ab3c02b2dbf253
x86_64 java-21-openjdk-21.0.10.0.7-1.el8.x86_64.rpm f59578f82a2e6d8626366b3ab4d4214801a1a1e50604a73e0f069920ec4085ea
x86_64 java-21-openjdk-static-libs-21.0.10.0.7-1.el8.x86_64.rpm f759015427e668d2320da7d56a061df425223d731550bc5b6adff329fdbe27ce
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.