[ALSA-2026:88352] Important: java-17-openjdk security update for AlmaLinux 8
Type:
security
Severity:
important
Release date:
2026-10-29
Description:
The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * JDK: Enhance PKCS5 padding (CVE-2026-83374) * JDK: Enhance TLS certificate handling (CVE-2026-83376) * JDK: Enhance LDAP logins (CVE-2026-83380) * JDK: Enhance SASL Authentication (CVE-2026-83381) * JDK: Enhance WebRowSets (CVE-2026-83387) * JDK: Enhance HTTP Client Response Handling (CVE-2026-83395) * JDK: Enhance XML Processing (CVE-2026-83400) * JDK: Enhance XPath Expressions (CVE-2026-87290) * JDK: Enhance Network Clients (CVE-2026-87292) * JDK: Enhance Certificate Name Checks (CVE-2026-87294) * JDK: Enhance Template Handling (CVE-2026-87367) * JDK: Enhance HTTP Client (CVE-2026-91332) * JDK: Enhance JPEG loading (CVE-2026-91334) * JDK: Enhance Image Handling (CVE-2026-91335) * JDK: Enhance TLS handshakes (CVE-2026-91373) * JDK: Enhance jstatd (CVE-2026-91374) * JDK: Enhance jmod handling (CVE-2026-91375) * JDK: Enhance JShell (CVE-2026-91379) * JDK: Enhance Preferences (CVE-2026-91380) * JDK: Enhance Image Processing (CVE-2026-91382) * JDK: Enhance HTTP client caching (CVE-2026-91394) * JDK: Enhance diagnostic sessions (CVE-2026-91397) * JDK: Enhance SOCKS5 support (CVE-2026-91398) * JDK: Enhance MIDI file handling (CVE-2026-91400) * JDK: Enhance zipfs (CVE-2026-91410) * JDK: Enhance font rendering (CVE-2026-91415) * JDK: Enhance GIF loading (CVE-2026-91418) * JDK: Enhance HTTP server parsing (CVE-2026-91451) * JDK: Enhance HTTP server (CVE-2026-91452) * JDK: Improve HTTP headers (CVE-2026-91453) * JDK: Enhance TLS Extensions (CVE-2026-91461) * JDK: Enhance krb5 tokens (CVE-2026-91462) * JDK: Enhance krb5 client (CVE-2026-91463) * JDK: Enhance Kerberos validation (CVE-2026-91464) * JDK: Enhance C2 comparisons (CVE-2026-91487) * JDK: Enhance Certificate Constraint Checking (CVE-2026-101516) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 java-17-openjdk-devel-fastdebug-17.0.21.0.9-2.1.el8.aarch64.rpm 0a29c5247edc66faf535c4f283c2c7bcedd4d60ec40d83dd6b5ddef1b69bb9bc
aarch64 java-17-openjdk-17.0.21.0.9-2.1.el8.aarch64.rpm 170074d5a537d3ee8752e21da4e960903c23481d2752f3a2ef1582ba03a620df
aarch64 java-17-openjdk-src-17.0.21.0.9-2.1.el8.aarch64.rpm 1f5198780a29897977f46714d4d0d0f4880ae9e2a24ee796dbd9133eb4f5ad42
aarch64 java-17-openjdk-jmods-slowdebug-17.0.21.0.9-2.1.el8.aarch64.rpm 1f7df7011f22c21623781727b0bfb2ed40f6387c81d69074e30c202f14f76d07
aarch64 java-17-openjdk-headless-17.0.21.0.9-2.1.el8.aarch64.rpm 23218c275bbcff37b907c06bef81889f6d55d12ad89ff5b766200d12408d42ba
aarch64 java-17-openjdk-src-slowdebug-17.0.21.0.9-2.1.el8.aarch64.rpm 27968453d23a770eed70d48fa904140080fa74c7a287be2377d38bce042d0ff5
aarch64 java-17-openjdk-demo-fastdebug-17.0.21.0.9-2.1.el8.aarch64.rpm 34aa8f95a9e26f0284b8df1eb8bb594fc8d442a4bce40c491654ac60d2e6c258
aarch64 java-17-openjdk-slowdebug-17.0.21.0.9-2.1.el8.aarch64.rpm 49840fbbfd4a6eefc81e9594ee2a4d9fa92bd884a2e7befddfd669a6209d466c
aarch64 java-17-openjdk-static-libs-slowdebug-17.0.21.0.9-2.1.el8.aarch64.rpm 54bec1bd822431c6800ae3b006adfb8b206140f56b339802b9bfd23e9db08ad0
aarch64 java-17-openjdk-javadoc-zip-17.0.21.0.9-2.1.el8.aarch64.rpm 59a223108ee5de178621a22ca93c9b877e8a803c78e25cce88426e3616ffa569
aarch64 java-17-openjdk-headless-fastdebug-17.0.21.0.9-2.1.el8.aarch64.rpm 6e6e878e875976835b76f4e7a2700f1203a2feabc28730e170a0226847ddbf41
aarch64 java-17-openjdk-javadoc-17.0.21.0.9-2.1.el8.aarch64.rpm 72d46754ff759a0f67f5274511f9c960b6d976be96cceb6d37bcfafce82ab286
aarch64 java-17-openjdk-devel-17.0.21.0.9-2.1.el8.aarch64.rpm 7497a0b698f1b6fefd35bee360caab554a1b2c24c57c5ee5c2cde4534d716ee8
aarch64 java-17-openjdk-jmods-17.0.21.0.9-2.1.el8.aarch64.rpm 787622aaafcfbde1d976be180e2da548b2db68c5e110944e2294e5f9177863db
aarch64 java-17-openjdk-src-fastdebug-17.0.21.0.9-2.1.el8.aarch64.rpm aa806ccbcc1011f18ede9b8f2cd8d302b10554754e10b8a644fdcab3d890b04e
aarch64 java-17-openjdk-static-libs-fastdebug-17.0.21.0.9-2.1.el8.aarch64.rpm b8edf03e09a0a18a8ced02e055e7aa413fc9c11a8129530c5dcf61f80250ccc3
aarch64 java-17-openjdk-jmods-fastdebug-17.0.21.0.9-2.1.el8.aarch64.rpm cb5bab21489776fe6c14e6096ae4da397863ce0988839665273f8dbe2a0ffb22
aarch64 java-17-openjdk-devel-slowdebug-17.0.21.0.9-2.1.el8.aarch64.rpm d0d8faaab444eb35d777c1d7b829169c862828de6c9e2e40071cee92c018fed9
aarch64 java-17-openjdk-demo-slowdebug-17.0.21.0.9-2.1.el8.aarch64.rpm d26aa3e68201e64a311f1acf5c80e571fd257517b2450f338e011abff1d9548c
aarch64 java-17-openjdk-demo-17.0.21.0.9-2.1.el8.aarch64.rpm dde28b482623d3127984a19425a8e97c21c2e212719766a3e28330397d9f897a
aarch64 java-17-openjdk-fastdebug-17.0.21.0.9-2.1.el8.aarch64.rpm ec62f0492c5f9e5b76e0d9798eec29d2613598928dcd4923420a3a2e75a6b125
aarch64 java-17-openjdk-static-libs-17.0.21.0.9-2.1.el8.aarch64.rpm f1085febd6874d70bc1e52f237cbce4dc9d456614c805e0695d4fb8f5def217e
aarch64 java-17-openjdk-headless-slowdebug-17.0.21.0.9-2.1.el8.aarch64.rpm fb2a872e77b59ef3dcd45525c4205d0a22ce246aa78e7ab82feeef13e43d2f1b
ppc64le java-17-openjdk-javadoc-zip-17.0.21.0.9-2.1.el8.ppc64le.rpm 00a8f1723fdc6d75670185967901b95e953d2322ce1af75dcc2ebbe9cfb57b75
ppc64le java-17-openjdk-slowdebug-17.0.21.0.9-2.1.el8.ppc64le.rpm 02d904ae046151edc949378b2f72860a5cefc06ee0343b0f5e3f4f2d983e69be
ppc64le java-17-openjdk-jmods-fastdebug-17.0.21.0.9-2.1.el8.ppc64le.rpm 08c64eda32dddccb84db7d7ff9cf68de5869fe0762752dc41af5d296ff65749f
ppc64le java-17-openjdk-devel-17.0.21.0.9-2.1.el8.ppc64le.rpm 1a814a4ef583cef0fad736cdbca3e26fc0e7b60336d50eae4076e12b228195d2
ppc64le java-17-openjdk-headless-17.0.21.0.9-2.1.el8.ppc64le.rpm 24be577b74583070a2c9d2f341194e19b06c5217722ac34c0e85a5df43b8e781
ppc64le java-17-openjdk-headless-fastdebug-17.0.21.0.9-2.1.el8.ppc64le.rpm 4a35d838f12cb1b90396c2b4fd60bc245f794a5294e623621f28b014d9b8e37e
ppc64le java-17-openjdk-demo-slowdebug-17.0.21.0.9-2.1.el8.ppc64le.rpm 5183ae30de2f8b1b9a0bd7cb932614c91d4543cbfc1f16b28076be9a915c2acd
ppc64le java-17-openjdk-static-libs-17.0.21.0.9-2.1.el8.ppc64le.rpm 5e3807c88bc1d0c404c8c8ba84a22783010827141d638139272cae9a6dccfcfc
ppc64le java-17-openjdk-devel-fastdebug-17.0.21.0.9-2.1.el8.ppc64le.rpm 80b8bc3fed788b93d3745b91322ec438b2757e25d9d9010752f419151399cd2e
ppc64le java-17-openjdk-static-libs-slowdebug-17.0.21.0.9-2.1.el8.ppc64le.rpm bcb9a8db161abc6a054103f0074242a5943e1fa6a02106a7d22a6b3f95676270
ppc64le java-17-openjdk-javadoc-17.0.21.0.9-2.1.el8.ppc64le.rpm ca0f8039fd538ac62b2af08a20fa7a456e9a4fe37009bf065a5378d67df617aa
ppc64le java-17-openjdk-src-17.0.21.0.9-2.1.el8.ppc64le.rpm cbb4c57edfd691c15655229d875ee213af50d394b480a0176ee92668a5e5d142
ppc64le java-17-openjdk-src-slowdebug-17.0.21.0.9-2.1.el8.ppc64le.rpm cc3ad059d8d406e58d0a95dd5ff243a542e9e8b7838ae792725b19f2e2361384
ppc64le java-17-openjdk-jmods-17.0.21.0.9-2.1.el8.ppc64le.rpm cf3972ff98a3f816b04039bd1c82222cdf8f6f227958343675f36a4132ab2e2d
ppc64le java-17-openjdk-demo-17.0.21.0.9-2.1.el8.ppc64le.rpm d04f9214cf71e527ebf1a9aaedb17a43b27d3e7cb237024572becc9d6df3a74b
ppc64le java-17-openjdk-jmods-slowdebug-17.0.21.0.9-2.1.el8.ppc64le.rpm d08eac25e6a1ce7f308f19695869ab9a2e488198863093b823355ad8b75e2fa3
ppc64le java-17-openjdk-fastdebug-17.0.21.0.9-2.1.el8.ppc64le.rpm d24a5f31a38352174a726a9f2319165fba5d0952b9e1dc9ec5a30cf458a2ebc5
ppc64le java-17-openjdk-headless-slowdebug-17.0.21.0.9-2.1.el8.ppc64le.rpm d7c882dcc6d0a3bc394644bab267d0d7b4d4a2bf59f81684d49c48a534685f31
ppc64le java-17-openjdk-devel-slowdebug-17.0.21.0.9-2.1.el8.ppc64le.rpm dc32c4e81901f3fefed4fe47ce57c2e12a552bc78974a1236482ca03530318c7
ppc64le java-17-openjdk-demo-fastdebug-17.0.21.0.9-2.1.el8.ppc64le.rpm df02025e35cc3a1b3323ada48b4b0395e6c90eb055ad4969d81aec89df125787
ppc64le java-17-openjdk-src-fastdebug-17.0.21.0.9-2.1.el8.ppc64le.rpm e2637119f6236c048b2ee0a8eebadb99fff1227afe3b151acf81d08a1c42f099
ppc64le java-17-openjdk-static-libs-fastdebug-17.0.21.0.9-2.1.el8.ppc64le.rpm ea356204af494195db6ed1c70015941c5a6aea2347ac2badb29f805b5f419613
ppc64le java-17-openjdk-17.0.21.0.9-2.1.el8.ppc64le.rpm eae2dff392748dd4c9f67f7873d7d57a9f8f8df5292e0b13bff2241692d9b928
s390x java-17-openjdk-javadoc-zip-17.0.21.0.9-2.1.el8.s390x.rpm 07d40e792230db2934509f27db0e60e537cf3ccac4f2b270995c797f95ff8784
s390x java-17-openjdk-demo-17.0.21.0.9-2.1.el8.s390x.rpm 0964ee3896c331eee8e256df1012cebdbdd6b749c85a7d18fcab89ff24d29063
s390x java-17-openjdk-javadoc-17.0.21.0.9-2.1.el8.s390x.rpm 114a90c0e9ddb8f885571f06a68a208307f7fc26c291dc6cecd676ebd3ef7fd5
s390x java-17-openjdk-src-17.0.21.0.9-2.1.el8.s390x.rpm 1afc8df9d9e9c2b6819023d2ee61436a2cc68bddeee61656a2801faf76c67f9f
s390x java-17-openjdk-headless-17.0.21.0.9-2.1.el8.s390x.rpm 25fac6320b319f701aaf07d52481c8ce04a352e78b4eefca2ab274f8b30911ac
s390x java-17-openjdk-jmods-slowdebug-17.0.21.0.9-2.1.el8.s390x.rpm 55c36bef455f6438415a5ba3e6dfa85b71c9bd6574cfebfee3cb4da70e9f4358
s390x java-17-openjdk-17.0.21.0.9-2.1.el8.s390x.rpm 6f6ac8b1cb3f1b05b87de042f4059fae8b97e218cd56c1f0ec905a8a1cac22a5
s390x java-17-openjdk-static-libs-17.0.21.0.9-2.1.el8.s390x.rpm 7bc73867e1fe1dbfca846ddc3c617dc1d199927aef998508ec9b9c89865fe98c
s390x java-17-openjdk-devel-17.0.21.0.9-2.1.el8.s390x.rpm 997ecb7a928d23ee824ff4a9299f244c2ca8df017d93f28437b3559a3d2808ae
s390x java-17-openjdk-jmods-17.0.21.0.9-2.1.el8.s390x.rpm 9a058e760c6da2e093985ac2b2b4b486aa90dd8d99dbd6991f05101b91eaeea4
s390x java-17-openjdk-demo-slowdebug-17.0.21.0.9-2.1.el8.s390x.rpm a7fb529c60761e664f413d7ca85b600d59a439b4a62c49e65250f3427105ae4a
s390x java-17-openjdk-devel-slowdebug-17.0.21.0.9-2.1.el8.s390x.rpm b2a3306f4154f618035fba4082fbbfb79da77f7d173c25ebccf01b0587919223
s390x java-17-openjdk-slowdebug-17.0.21.0.9-2.1.el8.s390x.rpm b3c666339f9630e4dd13331972eeaa51d303820162f8ae4a60333169b9bf9925
s390x java-17-openjdk-src-slowdebug-17.0.21.0.9-2.1.el8.s390x.rpm b926f6353447b23e2c15647071d5a1e5591f67adee91cccf0282aaa1fc26c4ef
s390x java-17-openjdk-static-libs-slowdebug-17.0.21.0.9-2.1.el8.s390x.rpm e15c862bf62a4a2907dc6ad5ec69830e38d00d6ee07835514567a859bf0ef3e4
s390x java-17-openjdk-headless-slowdebug-17.0.21.0.9-2.1.el8.s390x.rpm f1ebc3298d8b9b0d9a612966b0fbd9a652d1d6dab75e448ae53e0c0f8cca3b7d
x86_64 java-17-openjdk-fastdebug-17.0.21.0.9-2.1.el8.x86_64.rpm 0305241df40ea0d085218e4dc39b283a1b2f7060c9e844ed3ed54a6e365eb1f6
x86_64 java-17-openjdk-src-slowdebug-17.0.21.0.9-2.1.el8.x86_64.rpm 048dff86c3a237f09023f7f0435c8e056947838992071675fa0cdd2804f61776
x86_64 java-17-openjdk-demo-fastdebug-17.0.21.0.9-2.1.el8.x86_64.rpm 193ca6e812a4fa192df71bce9c7f9909e7755a2fc0c463de5f7538a5ed69a3da
x86_64 java-17-openjdk-jmods-fastdebug-17.0.21.0.9-2.1.el8.x86_64.rpm 210d3f51fff2b78e8cc22511657d0e28f1f784cb670def1c7428128069f13733
x86_64 java-17-openjdk-javadoc-17.0.21.0.9-2.1.el8.x86_64.rpm 45406a8a76c9a835358151112a517f71e03f49cbd373b7b4d3d5e89c66ec9cbf
x86_64 java-17-openjdk-src-17.0.21.0.9-2.1.el8.x86_64.rpm 4f1838af702e927f0d9f6d1ea1c9b3dcd770331952e479e89aae0450ee3328a0
x86_64 java-17-openjdk-jmods-17.0.21.0.9-2.1.el8.x86_64.rpm 4f9d53ffb0099390800b9c2e10087f7b13a4ca19a6c906920816ed00e85d093c
x86_64 java-17-openjdk-headless-17.0.21.0.9-2.1.el8.x86_64.rpm 54ffb109c81741f7d3c876db5d0bcc6b917131ceafb89c06f49bc66a2ffe8f1c
x86_64 java-17-openjdk-demo-17.0.21.0.9-2.1.el8.x86_64.rpm 5c2c26655e5a85c57803ccec8d6134db5831707c239b845e47c429700ead0057
x86_64 java-17-openjdk-static-libs-slowdebug-17.0.21.0.9-2.1.el8.x86_64.rpm 61de0f9270456472dbc83adbfde0679e97adb3f3791689abea0a3e6571d6cf30
x86_64 java-17-openjdk-devel-slowdebug-17.0.21.0.9-2.1.el8.x86_64.rpm 70094ade1b8e9490793aaac5b57f21f4570e811c55a4953f8d5e93021802dd9f
x86_64 java-17-openjdk-slowdebug-17.0.21.0.9-2.1.el8.x86_64.rpm 72a08c03bd772f82c6dff8e63895c30e8fba8eadd4cdb6f5ed3610df84bfab52
x86_64 java-17-openjdk-headless-fastdebug-17.0.21.0.9-2.1.el8.x86_64.rpm 79e9765f4082b307dbd17b2a8f683484dc96df3be62018ea8163f70ef4895fc6
x86_64 java-17-openjdk-static-libs-fastdebug-17.0.21.0.9-2.1.el8.x86_64.rpm 7cb45a5558b05053db739cccb6a38a9462536fb8e2dd43f431885fe8216cc308
x86_64 java-17-openjdk-devel-17.0.21.0.9-2.1.el8.x86_64.rpm 7d06f133ce55b3bd817fb158ddc40d299087335ee0007936113eb2c997db396e
x86_64 java-17-openjdk-demo-slowdebug-17.0.21.0.9-2.1.el8.x86_64.rpm 7d99492278ec4548dcfcc7f35b2709b14d589664b09354ea0eee0b4b774296cf
x86_64 java-17-openjdk-javadoc-zip-17.0.21.0.9-2.1.el8.x86_64.rpm 7da89e2f3c8957ae77fe3461373c8f4a504711c90a2a7bc9a522b98ab797f2a5
x86_64 java-17-openjdk-src-fastdebug-17.0.21.0.9-2.1.el8.x86_64.rpm 888f9aeaafa6c9f067f0556965d590aee4a55817423278cb05ac762d2230c4bc
x86_64 java-17-openjdk-jmods-slowdebug-17.0.21.0.9-2.1.el8.x86_64.rpm 95a6c162c9343c94fcbe4e36c487922e821002d7d6e1d490f11414eaa911552a
x86_64 java-17-openjdk-headless-slowdebug-17.0.21.0.9-2.1.el8.x86_64.rpm 9e1f23859bec5ffa777a35182ff2702ae750c7e2147a157aa7284c157bdf15c7
x86_64 java-17-openjdk-devel-fastdebug-17.0.21.0.9-2.1.el8.x86_64.rpm b6574311e63bcf0092835e33ee7225b1b4629e6bac1deb4b2b160f26db8daf5e
x86_64 java-17-openjdk-17.0.21.0.9-2.1.el8.x86_64.rpm bf6ef3676cf2359aaffa4f9601b5ad4b7c0c6ffe4f7e39bd4e1a7c61c3c61497
x86_64 java-17-openjdk-static-libs-17.0.21.0.9-2.1.el8.x86_64.rpm d735bce24267ba8c08ea85b51ccd4b7c7264658a309ece17c51e9f2dacf39c2d
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.