[ALSA-2026:88349] Important: java-21-openjdk security update for AlmaLinux 8 and 9
Type:
security
Severity:
important
Release date:
2026-10-30
Description:
The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * JDK: Enhance PKCS5 padding (CVE-2026-83374) * JDK: Enhance TLS certificate handling (CVE-2026-83376) * JDK: Improve C2 loop transformations (CVE-2026-83378) * JDK: Enhance LDAP logins (CVE-2026-83380) * JDK: Enhance SASL Authentication (CVE-2026-83381) * JDK: Enhance WebRowSets (CVE-2026-83387) * JDK: Enhance HTTP Client Response Handling (CVE-2026-83395) * JDK: Enhance XML Processing (CVE-2026-83400) * JDK: Enhance XPath Expressions (CVE-2026-87290) * JDK: Enhance HTTP Server (CVE-2026-87291) * JDK: Enhance Network Clients (CVE-2026-87292) * JDK: Enhance Certificate Name Checks (CVE-2026-87294) * JDK: Enhance Template Handling (CVE-2026-87367) * JDK: Enhance HTTP Client (CVE-2026-91332) * JDK: Improve ciphertext handling (CVE-2026-91333) * JDK: Enhance JPEG loading (CVE-2026-91334) * JDK: Enhance Image Handling (CVE-2026-91335) * JDK: Enhance TLS handshakes (CVE-2026-91373) * JDK: Enhance jstatd (CVE-2026-91374) * JDK: Enhance jmod handling (CVE-2026-91375) * JDK: Enhance JShell (CVE-2026-91379) * JDK: Enhance Preferences (CVE-2026-91380) * JDK: Enhance HTTP client caching (CVE-2026-91394) * JDK: Enhance diagnostic sessions (CVE-2026-91397) * JDK: Enhance SOCKS5 support (CVE-2026-91398) * JDK: Enhance MIDI file handling (CVE-2026-91400) * JDK: Enhance zipfs (CVE-2026-91410) * JDK: Enhance font rendering (CVE-2026-91415) * JDK: Enhance GIF loading (CVE-2026-91418) * JDK: Enhance HTTP server parsing (CVE-2026-91451) * JDK: Enhance HTTP server (CVE-2026-91452) * JDK: Improve HTTP headers (CVE-2026-91453) * JDK: Enhance TLS Extensions (CVE-2026-91461) * JDK: Enhance krb5 tokens (CVE-2026-91462) * JDK: Enhance krb5 client (CVE-2026-91463) * JDK: Enhance Kerberos validation (CVE-2026-91464) * JDK: Enhance C2 comparisons (CVE-2026-91487) * JDK: Enhance Certificate Constraint Checking (CVE-2026-101516) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 java-21-openjdk-static-libs-21.0.13.0.9-1.2.el9.alma.1.aarch64.rpm 09aec86d8d9dba671fdcefd296961079d1a703cd7bca3387110d0256a0a21455
aarch64 java-21-openjdk-src-21.0.13.0.9-1.2.el9.alma.1.aarch64.rpm 24c326218ff7b4650bfafdf5df9c69a01cf0dfc60387f93e01cbe3718a7d26e9
aarch64 java-21-openjdk-fastdebug-21.0.13.0.9-1.2.el9.alma.1.aarch64.rpm 285fe286fca276ac9dfb09b58e7c24f75e2d4477acfc3e46b375a03415914729
aarch64 java-21-openjdk-jmods-21.0.13.0.9-1.2.el9.alma.1.aarch64.rpm 3da0a8ea84c5a105d1e96b921d9c6616f0fb766b7e2a1a2972bbdc7b005b5c4d
aarch64 java-21-openjdk-demo-slowdebug-21.0.13.0.9-1.2.el9.alma.1.aarch64.rpm 670dbefb8dd45ed5d7b27fe0af33f895d26ee5e3084140c0bcc181a27f41fcaa
aarch64 java-21-openjdk-static-libs-fastdebug-21.0.13.0.9-1.2.el9.alma.1.aarch64.rpm 7198b48fb9bb7ed0ecf77cec8c996208a9082e2ce3cea89bfad5a3a13c34317f
aarch64 java-21-openjdk-devel-21.0.13.0.9-1.2.el9.alma.1.aarch64.rpm 7512a880a091a266f37890f7d2210ed4f3dee38e4fa94e82da219297b5002cc9
aarch64 java-21-openjdk-static-libs-slowdebug-21.0.13.0.9-1.2.el9.alma.1.aarch64.rpm 7fe38d48f6c551b0b7aa5eb998d1d03a4fbb782bb084cf3271e71bc1e3488bf0
aarch64 java-21-openjdk-src-slowdebug-21.0.13.0.9-1.2.el9.alma.1.aarch64.rpm 858121b03e44b7d8b09a148487b08e2efe68c3d060345c4402fe4adf53112682
aarch64 java-21-openjdk-devel-slowdebug-21.0.13.0.9-1.2.el9.alma.1.aarch64.rpm 875599aa277ec0d9385e09c564d91bdc5d6223ee9b1c75fa846f62119e3a93dd
aarch64 java-21-openjdk-javadoc-21.0.13.0.9-1.2.el9.alma.1.aarch64.rpm 87f4b8a7e699f2672d88a27d39aeb6b338f31f8321861a5a2aeeeea2aaa657d5
aarch64 java-21-openjdk-headless-fastdebug-21.0.13.0.9-1.2.el9.alma.1.aarch64.rpm 9a7e0ae034a013ebe638a0dbd26a1218264c81cd63973869c9d4a31df5fae8a4
aarch64 java-21-openjdk-slowdebug-21.0.13.0.9-1.2.el9.alma.1.aarch64.rpm a94e82561dcedfb6574e077c576387ff56e11b6d049428b01e82fc4d943bdac1
aarch64 java-21-openjdk-headless-slowdebug-21.0.13.0.9-1.2.el9.alma.1.aarch64.rpm c1dc3c899d90d1d53d09416c17b14a30557de899d9556760717355e4385e7a53
aarch64 java-21-openjdk-javadoc-zip-21.0.13.0.9-1.2.el9.alma.1.aarch64.rpm d45451b7516b2e51acc9643f1c06bf3f3fdd46b7b02e66c843dfad5ecc2046a9
aarch64 java-21-openjdk-headless-21.0.13.0.9-1.2.el9.alma.1.aarch64.rpm d4e1d9983453571006173a2c47770c0b0ea9de6596f1830362be7f50a6fe4a35
aarch64 java-21-openjdk-jmods-slowdebug-21.0.13.0.9-1.2.el9.alma.1.aarch64.rpm db6bafca5c35166aab51df2d8566124a0374766601369903c5d485b2d7a841af
aarch64 java-21-openjdk-demo-fastdebug-21.0.13.0.9-1.2.el9.alma.1.aarch64.rpm e5dc110893d8c3e06fa183b94c718711ff15699d083ee5b38df1890f7023a6a1
aarch64 java-21-openjdk-demo-21.0.13.0.9-1.2.el9.alma.1.aarch64.rpm f1a4babe0ef2f1511949228270d0627368fa2dea511095d7ec0208072b1f1c56
aarch64 java-21-openjdk-jmods-fastdebug-21.0.13.0.9-1.2.el9.alma.1.aarch64.rpm f427b7e38b073c228305af23024c0018a6f4be9f71277ae43d1db36bb5b95a68
aarch64 java-21-openjdk-src-fastdebug-21.0.13.0.9-1.2.el9.alma.1.aarch64.rpm f470f576474d0c30df9c74d8b88915a387df00e298f3ce09497bff5b3dcadefe
aarch64 java-21-openjdk-21.0.13.0.9-1.2.el9.alma.1.aarch64.rpm f5e9e4c6380826fb4a85bfad5b4c659bb454aad3bf50dae9c10d80192b4aeeb1
aarch64 java-21-openjdk-devel-fastdebug-21.0.13.0.9-1.2.el9.alma.1.aarch64.rpm fb933d30f8be166c7b04f880a76e356d52f19a35b6b43ce972a6b0a9cb2e046c
ppc64le java-21-openjdk-src-slowdebug-21.0.13.0.9-1.2.el9.alma.1.ppc64le.rpm 0bc74a27596bafc87e0905a77fc76e315d0bcb48ed0b17a91fbbdf5fd85902e3
ppc64le java-21-openjdk-devel-fastdebug-21.0.13.0.9-1.2.el9.alma.1.ppc64le.rpm 0bd2b815e984d81642430ffc3cdb4ae6a0f6220ea8952aa842882c7e32463191
ppc64le java-21-openjdk-21.0.13.0.9-1.2.el9.alma.1.ppc64le.rpm 183d8d010713ff69ed53be8637890e24da27d0bafa3e8fc5ce7915198a04b0c8
ppc64le java-21-openjdk-javadoc-21.0.13.0.9-1.2.el9.alma.1.ppc64le.rpm 2270fb3b41946be418968deac61be882d757a35551a61b112a553593bff4a830
ppc64le java-21-openjdk-devel-slowdebug-21.0.13.0.9-1.2.el9.alma.1.ppc64le.rpm 284498b39bd08fdc1c78d6ab6c63de4257ea8d36eb9dc4a71d5e22df290e9cf4
ppc64le java-21-openjdk-headless-21.0.13.0.9-1.2.el9.alma.1.ppc64le.rpm 29e23106a42ce976fee28b97fb081829e70d7679a0b70aeb5eeb42a7d13f6735
ppc64le java-21-openjdk-headless-slowdebug-21.0.13.0.9-1.2.el9.alma.1.ppc64le.rpm 3eecb733e7bde2d6255f33ec80466d2a6500d6cdf62cc0f566a288219b008f1d
ppc64le java-21-openjdk-jmods-fastdebug-21.0.13.0.9-1.2.el9.alma.1.ppc64le.rpm 619631b72e2605b57d005b960f6e6bcaa083b42e1dd420975ced448203d6044d
ppc64le java-21-openjdk-devel-21.0.13.0.9-1.2.el9.alma.1.ppc64le.rpm 629b5ca81e7ba54ab403dd38beef7edbc8de86b62320c35658885d08d15dfcab
ppc64le java-21-openjdk-jmods-21.0.13.0.9-1.2.el9.alma.1.ppc64le.rpm 646024ca1bbf235c90a48795243a03d3b9160a66bc33462c8afbb363804253b8
ppc64le java-21-openjdk-static-libs-fastdebug-21.0.13.0.9-1.2.el9.alma.1.ppc64le.rpm 7d5d03d0aa7c1ecf4ca9d6bf82cf88f7e0e7389e0e039308a95ab3016abf34e7
ppc64le java-21-openjdk-static-libs-slowdebug-21.0.13.0.9-1.2.el9.alma.1.ppc64le.rpm 960a153c6a9280a7eac6d67a84d9f4e2d0a4414cfdadb5db97932955dd7f81d4
ppc64le java-21-openjdk-demo-slowdebug-21.0.13.0.9-1.2.el9.alma.1.ppc64le.rpm 9c17e02b6719377967817ee63ed1fc26067f076164aa40616b33af37e4bca324
ppc64le java-21-openjdk-headless-fastdebug-21.0.13.0.9-1.2.el9.alma.1.ppc64le.rpm 9dcc13a36df86bd0500d0649f340bd856dc4aaa64ef5cf42c7efcc2dafbad05e
ppc64le java-21-openjdk-src-21.0.13.0.9-1.2.el9.alma.1.ppc64le.rpm 9ffd55bc91621d4f738da1858554194d62335f3a686f29a8120e0b11e8a58a40
ppc64le java-21-openjdk-src-fastdebug-21.0.13.0.9-1.2.el9.alma.1.ppc64le.rpm a06fe8d2094d3dec8f0ba9fb2fa7c17da452998c953a0ad09c51aaaed53efe65
ppc64le java-21-openjdk-demo-fastdebug-21.0.13.0.9-1.2.el9.alma.1.ppc64le.rpm b24a80f7ca8ddf47eaa32f1e3fef12aac0059cefcfdf5e61f749968aa3616c24
ppc64le java-21-openjdk-javadoc-zip-21.0.13.0.9-1.2.el9.alma.1.ppc64le.rpm c6d3472a00ecd7a8647101d77d649a83e2ff26396212d17615c0fb26e9b3e879
ppc64le java-21-openjdk-static-libs-21.0.13.0.9-1.2.el9.alma.1.ppc64le.rpm da2f7975687d9310e3582fdd7f49acb8bfb463c6d4396496f4c56ff225ee7b2d
ppc64le java-21-openjdk-demo-21.0.13.0.9-1.2.el9.alma.1.ppc64le.rpm e46e9c80e1683c0ea6ba9a1dac10b7c56ceb905139f330c1364a309dfa508734
ppc64le java-21-openjdk-slowdebug-21.0.13.0.9-1.2.el9.alma.1.ppc64le.rpm edd054c4ba061312534facf17f25e8487215dffec01e530c6a95918302d48651
ppc64le java-21-openjdk-fastdebug-21.0.13.0.9-1.2.el9.alma.1.ppc64le.rpm ef863fa02565c7cf52098a9ae0a3e16871500b907e7e159e03cde6dfa8050200
ppc64le java-21-openjdk-jmods-slowdebug-21.0.13.0.9-1.2.el9.alma.1.ppc64le.rpm efed7ad8ba14d491cd331e4b4a73f825a7913374e29832efa08230b53cb517f1
s390x java-21-openjdk-demo-slowdebug-21.0.13.0.9-1.2.el9.alma.1.s390x.rpm 05e203ac440440c20359faf4fef66c193ba4c0fd14f4730cea6e1d5776151a80
s390x java-21-openjdk-headless-slowdebug-21.0.13.0.9-1.2.el9.alma.1.s390x.rpm 072028fcfcffda55287b59d4cd9e581b80f13ea8971e0e65df4b7db9f6653b01
s390x java-21-openjdk-jmods-21.0.13.0.9-1.2.el9.alma.1.s390x.rpm 1548137b02bbb65df0babbb34061abcdbe256af72b369565153a76610e4cff08
s390x java-21-openjdk-devel-21.0.13.0.9-1.2.el9.alma.1.s390x.rpm 2a6a7a79652e4aa0b6cfb7c9948fd4e2e1fe7539f1e737b3197fc1de68a37df6
s390x java-21-openjdk-javadoc-21.0.13.0.9-1.2.el9.alma.1.s390x.rpm 3866110e72f17f36ff72d6c2e7d3ee0f3a8c01ccd277e4ccf10e9acbdb7b751e
s390x java-21-openjdk-jmods-slowdebug-21.0.13.0.9-1.2.el9.alma.1.s390x.rpm 3d316ad6f9ae476c0c3ef43ea2a9208e9533fb797a974cd4e1fcbbda75fc8e7c
s390x java-21-openjdk-static-libs-21.0.13.0.9-1.2.el9.alma.1.s390x.rpm 4bf98b81281006885611535ff9d75d1c8daf674cabd8ed86cdac857e6589e556
s390x java-21-openjdk-slowdebug-21.0.13.0.9-1.2.el9.alma.1.s390x.rpm 4ff064a70369f72082db9b603c5ce979052aab56367b2863337fd8759ba7b6ba
s390x java-21-openjdk-static-libs-slowdebug-21.0.13.0.9-1.2.el9.alma.1.s390x.rpm 59f20bb4bedeabcb02f71bd82912a92628c2352c9fa06ecf84dda128b26caf43
s390x java-21-openjdk-src-21.0.13.0.9-1.2.el9.alma.1.s390x.rpm 70fd00dea425b2007750016e1eced6d3b7c1dbc23d5b80afd162c0a32a99cf35
s390x java-21-openjdk-javadoc-zip-21.0.13.0.9-1.2.el9.alma.1.s390x.rpm 8bf00d27b942994f6abd0388267ee8b2a3b439d802dcc30724de71a9b05370e5
s390x java-21-openjdk-devel-slowdebug-21.0.13.0.9-1.2.el9.alma.1.s390x.rpm b39a8093036a87227e07343a915d721032a2c3a564227f43f8847000adae3ace
s390x java-21-openjdk-headless-21.0.13.0.9-1.2.el9.alma.1.s390x.rpm bc3c17c3c8bc530b93b687744bb420c95608fe9f6c8dc1fc05df43500d2067cb
s390x java-21-openjdk-21.0.13.0.9-1.2.el9.alma.1.s390x.rpm cbb8dca73d4956d2df8cce6faa76e8de89d6debb9933b3f044a44dd05c857e0d
s390x java-21-openjdk-demo-21.0.13.0.9-1.2.el9.alma.1.s390x.rpm de17ad2585b512d669c6596684f5dce58106b0a754ab0670f239a0383bfd527b
s390x java-21-openjdk-src-slowdebug-21.0.13.0.9-1.2.el9.alma.1.s390x.rpm e32ba5946049c571cb3b1562024bed4abe9efe1e787a461889ae04acc6101b48
x86_64 java-21-openjdk-demo-21.0.13.0.9-1.2.el9.alma.1.x86_64.rpm 087a8e24abdf422c6af954b369a11112072fb342a4b7e6738ce80de641812ecb
x86_64 java-21-openjdk-fastdebug-21.0.13.0.9-1.2.el9.alma.1.x86_64.rpm 098690c6e22fc42d9e5d5fa3c2f52713d4146b940520083940e332e6be64168a
x86_64 java-21-openjdk-demo-fastdebug-21.0.13.0.9-1.2.el9.alma.1.x86_64.rpm 1b1a781d2d1a9b8b3978496c428221cfdf7de58fc932846d74ebf29b472d0325
x86_64 java-21-openjdk-devel-slowdebug-21.0.13.0.9-1.2.el9.alma.1.x86_64.rpm 2b2843a09e9aad7790edf710081dcf05f42727465b7b2082067f252d216cc686
x86_64 java-21-openjdk-slowdebug-21.0.13.0.9-1.2.el9.alma.1.x86_64.rpm 2c60d1ff316a16cce1510e561ab3ae49ef85b804c365def2c1ab3c6b2fd6b3a9
x86_64 java-21-openjdk-jmods-slowdebug-21.0.13.0.9-1.2.el9.alma.1.x86_64.rpm 562da9385fd39eeb4e38c541663edaf6a5d9c263e060fd61ce19de8ecf122778
x86_64 java-21-openjdk-static-libs-21.0.13.0.9-1.2.el9.alma.1.x86_64.rpm 5f6bae154c6b79b04ba95b2111ec0a425b5fff64337097b688a90b82ae48b09a
x86_64 java-21-openjdk-headless-slowdebug-21.0.13.0.9-1.2.el9.alma.1.x86_64.rpm 63cc8bdfe8e24c3b7e663939c95172699e562195c342f8bd9610d5d463eecc8e
x86_64 java-21-openjdk-static-libs-slowdebug-21.0.13.0.9-1.2.el9.alma.1.x86_64.rpm 762003338dcfab2d7e1bab7cce9df836787f01989f431d4eac21b3349391166f
x86_64 java-21-openjdk-21.0.13.0.9-1.2.el9.alma.1.x86_64.rpm 7a5bc3334146fe003628f3ee29c1a341b7d2a9e7829714c07a4763714bd47d96
x86_64 java-21-openjdk-headless-21.0.13.0.9-1.2.el9.alma.1.x86_64.rpm 89781dc5c7931c7a3ec9f4364145a15fd63d3a1b047af58a7bcca7bf4d9fa326
x86_64 java-21-openjdk-src-slowdebug-21.0.13.0.9-1.2.el9.alma.1.x86_64.rpm 8aeb6f998d9a30d6e417687dc4a9d22d5c656c5bb834cc8c714b9527d2c9b349
x86_64 java-21-openjdk-jmods-fastdebug-21.0.13.0.9-1.2.el9.alma.1.x86_64.rpm 9509d6bdc7079e49bbbd91ece2ac7212fa251c4dea144300ad0a75eef99bd25b
x86_64 java-21-openjdk-demo-slowdebug-21.0.13.0.9-1.2.el9.alma.1.x86_64.rpm a535b23a9d3aa487c8cd7ecf9aaebe97a9ad6fb8bd9424835427049f4260acf9
x86_64 java-21-openjdk-src-fastdebug-21.0.13.0.9-1.2.el9.alma.1.x86_64.rpm a699b14f796f01400bda932efc375d49c9a88f2f65e3bd47575dccf66f77ef9c
x86_64 java-21-openjdk-devel-fastdebug-21.0.13.0.9-1.2.el9.alma.1.x86_64.rpm b7c1b0f17b6c4e10e1d064a039f4fc7f94511c4cd78c72d3bccaf28e066274ae
x86_64 java-21-openjdk-devel-21.0.13.0.9-1.2.el9.alma.1.x86_64.rpm bbde177d1128962e0c5c04b546fd6402ade9a2b51019a0a3ca13bef86cbb1ec0
x86_64 java-21-openjdk-src-21.0.13.0.9-1.2.el9.alma.1.x86_64.rpm c42e97ec3bbde411f409b3a8572cfc9796de50b9430a48ff33f8c0fc2958e1ab
x86_64 java-21-openjdk-static-libs-fastdebug-21.0.13.0.9-1.2.el9.alma.1.x86_64.rpm c4a4f37d9a474226e01eb28d83d501082c508a16f2df266056f5429e48ac9884
x86_64 java-21-openjdk-headless-fastdebug-21.0.13.0.9-1.2.el9.alma.1.x86_64.rpm ca55b9fc12e0a87c0357a5951b1acfb3a4a5961443b108905deb32915b92de74
x86_64 java-21-openjdk-javadoc-21.0.13.0.9-1.2.el9.alma.1.x86_64.rpm cf7cef83a897b24cb4463ce9a328ef8c9d1b6fa3fadcc66d53a13ce6c6d08643
x86_64 java-21-openjdk-javadoc-zip-21.0.13.0.9-1.2.el9.alma.1.x86_64.rpm dad73bdacdaa57aec444588f96b4f4503417c20802fe7f0eafe1e8d7e4cbf85f
x86_64 java-21-openjdk-jmods-21.0.13.0.9-1.2.el9.alma.1.x86_64.rpm f4d5fb36ceea14571dd34ece0811d818c251dbf672ae6cdd660153a1d781051a
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.