[ALSA-2026:42899] Important: java-25-openjdk security update
Type:
security
Severity:
important
Release date:
2026-08-06
Description:
The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. Security Fix(es): * JDK: Enhance TLS certificate handling (CVE-2026-46968) * JDK: Improve DTLS handshaking (CVE-2026-46917) * JDK: Enhance JPEG handling (CVE-2026-47010) * JDK: Enhance XBM image support (CVE-2026-47021) * JDK: Enhance Jar file processing (CVE-2026-47027) * JDK: Improve certification checking (CVE-2026-60147) * JDK: Enhance AWT ImagingLib (CVE-2026-47059) * JDK: Enhance Jar handling (CVE-2026-47063) * JDK: Update LCMS to 2.19 (CVE-2026-41254) Enhancement(s): * For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single "portable" build has a release number ('p') and each RPM has its own release number ('r'). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (AlmaLinux-211046, AlmaLinux-211048) Bug Fix(es): * The performance of the Math.pow function regressed between OpenJDK 8 and OpenJDK 11. This was due to an absence of constant folding when applicable (for example, Math.pow(2,1) being replaced by 2). This release reintroduces this optimization. (AlmaLinux-211050, AlmaLinux-211052) * On AlmaLinux 9 systems, the alternatives list a JDK and architecture pair (for example, "java-11-openjdk.x86_64") followed by the path to the binary in brackets. AlmaLinux 10 systems have a simpler format that just lists the path. Because the OpenJDK 25 packages for AlmaLinux 9 were originally based on those from AlmaLinux 10, they used the simpler format. With this release, the format for OpenJDK 25 packages on AlmaLinux 9 is updated to be closer to other JDKs on that platform. (AlmaLinux-212650) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 java-25-openjdk-static-libs-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm 1260aec03a8e1ccb14167959f106047dec98d1d16578c8797a132e0cdcf27493
aarch64 java-25-openjdk-static-libs-slowdebug-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm 14aae0b97db7068f9092c40a430b137359568ac98390c7430efc18e853f60b7f
aarch64 java-25-openjdk-devel-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm 256bd184da164521c9150cac7465f7c17fc4399d2910debedc257202611ea34c
aarch64 java-25-openjdk-headless-slowdebug-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm 311d3f0ae217bee04320d3375dc546f72f8abd3ad6d4c8e20bd28d098a725bf1
aarch64 java-25-openjdk-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm 31f41214b66f0ed28455400eaf9620fed3378356e511480040d50f5b7e2f05cf
aarch64 java-25-openjdk-src-fastdebug-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm 32a4ef6d6ba51a9a06b735818d14eca407f6d43150d1dbaaf88a40a50c636738
aarch64 java-25-openjdk-javadoc-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm 38e234ea8ba4cb462b9a5679016ef100a485131cb8972e98fdeb5b4be3f8c952
aarch64 java-25-openjdk-jmods-fastdebug-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm 3ca4ca51c224397783a28030e92df43c0b7cf8177ceeb0e009e927d44a3cb84d
aarch64 java-25-openjdk-src-slowdebug-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm 435ce2bc48621d302cdb9a66e881905154278803a09a1f69a9c16fdf9567cb07
aarch64 java-25-openjdk-static-libs-fastdebug-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm 528ed458fdc70d2498d0d2e274dd591d6596f92e62cfa673eb38ed731919912d
aarch64 java-25-openjdk-demo-fastdebug-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm 5fe342da16b5b08bc9fc92a9930f1be20fce974ba0dcad5602af24105f6996ed
aarch64 java-25-openjdk-fastdebug-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm 8c85c4d3d9b18366890a2ccee21c3950dff00d073572e322e2bd926c77a0ed0f
aarch64 java-25-openjdk-crypto-adapter-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm 906a676918c66726061464ed40cbe088cbc5258a2905db97f481d4c721531b0e
aarch64 java-25-openjdk-jmods-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm 9602592a65fc9d7ba2538b27ca476030a550f0d7b7e05ba33878c96b32de041f
aarch64 java-25-openjdk-headless-fastdebug-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm 9717878ce5f859779fadb7a44f72018cfb9128b5e22a0a4404a0570fb1dbc72e
aarch64 java-25-openjdk-slowdebug-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm 9906e61bc28ce7f14aaa8cff63d4fbd3aecd6a0dfb5ade026cc9d1581ac6b155
aarch64 java-25-openjdk-crypto-adapter-fastdebug-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm a7d0afcdee5abbf955a17de0d7e74683586f11c7d6e23445977df1fba424a523
aarch64 java-25-openjdk-headless-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm b5affbdd3e96915dfe60c27bd3d61f7d5cc67295448aecc229f0d595adb2b3d2
aarch64 java-25-openjdk-devel-fastdebug-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm b8c438fcf6f8390f3bd7a68c93abde1e3c682f3cfdb09d98da9191103ad0a347
aarch64 java-25-openjdk-javadoc-zip-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm cc44d683f9e80c97e9d213585ff70c99d5b8c90436ce24a1fa091186b5621a06
aarch64 java-25-openjdk-src-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm cc49878f0634577b5f8473f06f1f5128aee734ec29b0235980d0eba33f4d8983
aarch64 java-25-openjdk-demo-slowdebug-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm cd42254c715bccc846c8a9f60a68868b52b02c186d9f4d2daef31f830f355d30
aarch64 java-25-openjdk-crypto-adapter-slowdebug-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm d215430551b0b17f83ce963c8e80e353e38c37c7634c7d82aea02beb06e77e1d
aarch64 java-25-openjdk-jmods-slowdebug-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm df1a411d7f2c2942877abb40ec40dec7fef59a921f644520a7af7b08a5ccda81
aarch64 java-25-openjdk-demo-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm e5a1462b1b3b069d5b7335b0e08edff360654625f4170d9259a5a528d6bf2b1e
aarch64 java-25-openjdk-devel-slowdebug-25.0.4.0.7-1.1.el9.alma.1.aarch64.rpm f288a43dfe1b2028c511f4ff0c870f2dea9dc6f03c83ea9f2a7e68c85ca6421f
ppc64le java-25-openjdk-src-slowdebug-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm 07283b7091323ea590d2f441e00a646cb970ba998d292e23f01c6b308afcf2d5
ppc64le java-25-openjdk-crypto-adapter-slowdebug-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm 0db2d3927987aedee9a33276a32817ef486b76e0ea316d9c6026c71e045fe9bb
ppc64le java-25-openjdk-javadoc-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm 0e7d7efd81a3c0f2e81bf8f611f60f4f4e67939877fac1b17400e4329d68a52a
ppc64le java-25-openjdk-static-libs-fastdebug-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm 1210cd3aa9be5d2fa0627f08af80c8c792d703410a9481070e0ad5513ccdb676
ppc64le java-25-openjdk-src-fastdebug-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm 1f8d3ba799eeb55a5d2d55cf91652113c9b70602ddefa98ce52bc3c804769e1f
ppc64le java-25-openjdk-static-libs-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm 227cd65fada5deb5721a0768770e269d2da31e0568a32ed7471d9f8da934c715
ppc64le java-25-openjdk-headless-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm 320ecc46d0f21d5280506ec3cb3161f30d0d5ac5ee02df8021ef8724b02739ee
ppc64le java-25-openjdk-crypto-adapter-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm 32519802cfb22c7c80a130acf727071884f2e373fd99d5556c03ac9df4647098
ppc64le java-25-openjdk-devel-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm 32e40460727017c5297e8d6e17e6b9e5e40e8a3f20b04aaa83456adac99bca91
ppc64le java-25-openjdk-crypto-adapter-fastdebug-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm 408154d7e995ccb85913fd51062352f8574bdda4aa240bd57f566656e0729502
ppc64le java-25-openjdk-static-libs-slowdebug-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm 4c267964aca85ab921900ac0be032da33d1e965bcc96f79dc7ebfc08dfefb713
ppc64le java-25-openjdk-demo-slowdebug-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm 523a64ac546f0dcf95271fd113c711e575d21a5d4bb62fa58fbdfaa46b39e7af
ppc64le java-25-openjdk-jmods-fastdebug-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm 551afd4b3983b755862762f85fe0ca611c94efc0148f7c24c2eb6f504860aef6
ppc64le java-25-openjdk-headless-slowdebug-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm 646db513d3ed5046ec8686793c1a0456df621471f8e057950be1cd657ac53d52
ppc64le java-25-openjdk-headless-fastdebug-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm 67304d6fa7139d694619a0d39971f1d8fb32de26856115db9d5326bd80422434
ppc64le java-25-openjdk-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm 70e096b066a7f2c85bf5026e7d11079b042c90091da3e25fe8ae3dd515e316f4
ppc64le java-25-openjdk-devel-slowdebug-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm 8f24ede6cbe930e04053dcc38e4fd547b4a0604243dc0dde145f536fdcaf4295
ppc64le java-25-openjdk-jmods-slowdebug-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm 904eb2839a05b6713467afdebfdce0386286f30dfdcee66cb29c891b48041f04
ppc64le java-25-openjdk-demo-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm 9139d9f7818f15bf24d2ef03c378142a0038ff8464caec275248acbce5105fa8
ppc64le java-25-openjdk-fastdebug-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm a160b9ce46506c967dc1ccb234fe953ddb385108a5d519a125f53223dd1d5d36
ppc64le java-25-openjdk-slowdebug-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm a42cb60f98e7dda662170770523c117faf0cb39b79d6b7c830cf05f796bcadd4
ppc64le java-25-openjdk-demo-fastdebug-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm a9cefb6e74ab45a0955b1f6f17889101db7d1a61f5ed30dc0319f107a6cce1c6
ppc64le java-25-openjdk-devel-fastdebug-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm ab8019af48b6bcb7040a11d8dc6dc102edb4967d0f45ecb5e482b1f8ea1deff2
ppc64le java-25-openjdk-javadoc-zip-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm c97077f68950784c56b8ed0ed0bbf20af77292681de1aaeb351016a4c99f5c9e
ppc64le java-25-openjdk-jmods-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm e5de6b656d13c08d284ee971b59c0c47ea56fac56a52939612f5604d29bbbdd5
ppc64le java-25-openjdk-src-25.0.4.0.7-1.1.el9.alma.1.ppc64le.rpm fea081cabd02d138b33e8a9ea43ef7ddeaa6c4d4545cb968b09b0625cb82433a
s390x java-25-openjdk-crypto-adapter-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm 0ea98aec0891d06fb04693d94d588bda45c347948a46fe2c4ca014a6687753e2
s390x java-25-openjdk-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm 21c175c2f283cc1228751517e48f8488c271c561c245caa03d30933fe5001064
s390x java-25-openjdk-devel-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm 2af82ba4cc739f7696eb4d04365386405b00b99f720c6df6735860643c1f5406
s390x java-25-openjdk-devel-slowdebug-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm 2d4aeb7bfd047754d213165be96a741dd3f9f77b8bea1a21fb142148cb8963d1
s390x java-25-openjdk-javadoc-zip-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm 2e5d04953d633a9cd36bc4ee16c332c86ed5bb25d665bceaf1e21415dab8a05d
s390x java-25-openjdk-slowdebug-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm 355cca316d94e5bea18a1f4dc5fe49472e3b479390bd03e8adf9b31aa73c9f93
s390x java-25-openjdk-src-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm 6d230e3bb92a504ea430fa69fccbac725e3454998d4e7a7183665a5c3d34fdf9
s390x java-25-openjdk-static-libs-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm 8d84c0158442a26d3d3f4542777cf097c9213bddd3ba350ca7cff36559c7a048
s390x java-25-openjdk-demo-slowdebug-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm a284f8b49458c604417ee0872df4473de5cd5fc8759e0dc5b991226aedf0194c
s390x java-25-openjdk-headless-slowdebug-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm a672d08a266526f64e176d6b46c31390423c90c201c96814a9bf5dd09c4b41cf
s390x java-25-openjdk-static-libs-slowdebug-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm a6c4b5789e3aa3460f44ec84016d4c7f1d68c0c109172b7f09dc6d84fd0e4830
s390x java-25-openjdk-demo-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm bab2a1366b5111dc1a1a80e4c5428c94accf4d5c39a8c66a6cf6c9e8de44ffd1
s390x java-25-openjdk-crypto-adapter-slowdebug-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm c69d02e8326a4d35b9677b096dedd6a03f2b011eee15c7155c77c1dbc33d9a9c
s390x java-25-openjdk-headless-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm c809667cdcb9869e8cba9462f60ee8e6bb966d02137031bd8bfb335d662e5286
s390x java-25-openjdk-jmods-slowdebug-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm cea5ce4a4d82f243aa91990da2120d8cee2b23e50a31e19cc96c2a5cf518c661
s390x java-25-openjdk-javadoc-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm ec6b3369982fa878bb03775c43d63171bebe3845ce1963c99942d4fd492c5592
s390x java-25-openjdk-jmods-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm f948ac8bf9f328920f184c4d1a6c0f500f2e5c690a8cf0baa5e48e2914513430
s390x java-25-openjdk-src-slowdebug-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm faf5879227174572c4c359ba9acec8658d6e872eaf5a2dc45cfc28732e5bf003
x86_64 java-25-openjdk-src-fastdebug-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm 0162cf95eeb0cefd84dc796b84f45c0e826c185ff5b4d17daef266d4d64b093d
x86_64 java-25-openjdk-devel-fastdebug-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm 047087585a0c4211628e654a892d3e2e9c4329fed6a11179a2e50080f52f5029
x86_64 java-25-openjdk-devel-slowdebug-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm 09817506e66abc2a2f3023dc1ad3bb188976e98151b3613647c5c0deaf4cb9e0
x86_64 java-25-openjdk-demo-slowdebug-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm 0ccdb500cd3ac194f6827d8f0c9daab79622caf5fa916f7f544698d498185dd0
x86_64 java-25-openjdk-crypto-adapter-fastdebug-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm 144b2be6fd70f43b2f7922ef5653ce72cdec37ab0d869f00586c6a3f355da988
x86_64 java-25-openjdk-headless-fastdebug-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm 458ef017a01eae42828d72000704b4628d0f2dbd44be00003147a0a4008cb839
x86_64 java-25-openjdk-demo-fastdebug-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm 65dcb3a3ef8349d68aa2e60450dfd8f7fe48eb0ffda852d4e5379d7132bd7c9e
x86_64 java-25-openjdk-jmods-fastdebug-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm 685ec59e77ddb384ff964d5a1a4d856a5ddebeae13146eb52c5df3d92658d284
x86_64 java-25-openjdk-devel-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm 71006bb0aa223921218b43992bbb3209ecf2f32760396373846c1eb257cf6839
x86_64 java-25-openjdk-src-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm 79614c6310d4e3d2eb3dc8b2cd75267c7a8f67b6a415fe3edf19be58e18ad2ba
x86_64 java-25-openjdk-headless-slowdebug-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm 83d6dda87d6997c76b462e642894e4b339b387353781f665a39b2970aa781d1c
x86_64 java-25-openjdk-javadoc-zip-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm 96b9831d60ad3d6ac5224ac02e2a66cefd55f5756b3fff2a911654bb9229075e
x86_64 java-25-openjdk-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm 992a9d1340a4cb08c84f70e455468d0dee50a2d7436f94c47d793239b6a68ee7
x86_64 java-25-openjdk-crypto-adapter-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm 9dc827f7c705c19fa0879f23ff46a1a0e1284c8979aa458d514e561fc2a499c7
x86_64 java-25-openjdk-static-libs-fastdebug-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm 9ea4041a4155c52e8b51d65bcaab13c62fe142074258621d0f70fd98e4e7b3e4
x86_64 java-25-openjdk-slowdebug-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm 9f33bc3c2de85f84136f02fa4c5081160abaaa74af6907743b06fb4665719c95
x86_64 java-25-openjdk-static-libs-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm a1da945133be6df764fd0d876eb9f5eb9f4bb5142d07568c46f29dad5e9a2c58
x86_64 java-25-openjdk-javadoc-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm c393f00411a7e3bd69dbd77558b82f48a1b6971034a0d5b6b8e63649376dde31
x86_64 java-25-openjdk-jmods-slowdebug-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm c79628de69befd70e17f5abbf3035c6e4d5b77fd9a83d7f185931419b63b1b22
x86_64 java-25-openjdk-jmods-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm d153539678983748fde0d964716251c5d5e6ebf24a2b32b128f4ccbda076bb1e
x86_64 java-25-openjdk-headless-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm d6346c078622f05ee08390d961c5cf91184d168703d84b7e5bf732bff1b85ba9
x86_64 java-25-openjdk-demo-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm e1f6603e5a81340b6d23729e624a469e5404548404d920069f511d3f300eef54
x86_64 java-25-openjdk-fastdebug-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm e3da43a380d3dd7d3a77faed18c2ece6acd6a96e7b8f1a9dd7554094e7433cdd
x86_64 java-25-openjdk-crypto-adapter-slowdebug-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm ee80f175db5123d7581fee229a4e025cfdc2416345b02462bd20908738bbac7d
x86_64 java-25-openjdk-static-libs-slowdebug-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm f6db1261fe20b912fd02c2ee3fbe2e3389f95cfcdb943f25be47e8616483eecd
x86_64 java-25-openjdk-src-slowdebug-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm f7f33426cacda7b2c12ed344543ae633592bdaa9fbeffd340974cf095f8bd4d7
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.