[ALSA-2026:90500] Important: java-17-openjdk security update for AlmaLinux 9
Type:
security
Severity:
important
Release date:
2026-11-01
Description:
The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * JDK: Enhance PKCS5 padding (CVE-2026-83374) * JDK: Enhance TLS certificate handling (CVE-2026-83376) * JDK: Enhance LDAP logins (CVE-2026-83380) * JDK: Enhance SASL Authentication (CVE-2026-83381) * JDK: Enhance WebRowSets (CVE-2026-83387) * JDK: Enhance HTTP Client Response Handling (CVE-2026-83395) * JDK: Enhance XML Processing (CVE-2026-83400) * JDK: Enhance XPath Expressions (CVE-2026-87290) * JDK: Enhance Network Clients (CVE-2026-87292) * JDK: Enhance Certificate Name Checks (CVE-2026-87294) * JDK: Enhance Template Handling (CVE-2026-87367) * JDK: Enhance HTTP Client (CVE-2026-91332) * JDK: Enhance JPEG loading (CVE-2026-91334) * JDK: Enhance Image Handling (CVE-2026-91335) * JDK: Enhance TLS handshakes (CVE-2026-91373) * JDK: Enhance jstatd (CVE-2026-91374) * JDK: Enhance jmod handling (CVE-2026-91375) * JDK: Enhance JShell (CVE-2026-91379) * JDK: Enhance Preferences (CVE-2026-91380) * JDK: Enhance Image Processing (CVE-2026-91382) * JDK: Enhance HTTP client caching (CVE-2026-91394) * JDK: Enhance diagnostic sessions (CVE-2026-91397) * JDK: Enhance SOCKS5 support (CVE-2026-91398) * JDK: Enhance MIDI file handling (CVE-2026-91400) * JDK: Enhance zipfs (CVE-2026-91410) * JDK: Enhance font rendering (CVE-2026-91415) * JDK: Enhance GIF loading (CVE-2026-91418) * JDK: Enhance HTTP server parsing (CVE-2026-91451) * JDK: Enhance HTTP server (CVE-2026-91452) * JDK: Improve HTTP headers (CVE-2026-91453) * JDK: Enhance TLS Extensions (CVE-2026-91461) * JDK: Enhance krb5 tokens (CVE-2026-91462) * JDK: Enhance krb5 client (CVE-2026-91463) * JDK: Enhance Kerberos validation (CVE-2026-91464) * JDK: Enhance C2 comparisons (CVE-2026-91487) * JDK: Enhance Certificate Constraint Checking (CVE-2026-101516) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 java-17-openjdk-fastdebug-17.0.21.0.9-2.2.el9.alma.1.aarch64.rpm 05cde4f8f54081208ab1c62599e0d99cfc424dad5cc7ebbc52bdf32e3470293c
aarch64 java-17-openjdk-src-17.0.21.0.9-2.2.el9.alma.1.aarch64.rpm 15033b8de83d7eeb4ed7d109f8ad96022efc3eec88c1fd3a56a52786755b31df
aarch64 java-17-openjdk-jmods-fastdebug-17.0.21.0.9-2.2.el9.alma.1.aarch64.rpm 29884ed299c060f067565cc67ead3e0ce51fe1660c98cdb236ef0cfa7d1582dd
aarch64 java-17-openjdk-slowdebug-17.0.21.0.9-2.2.el9.alma.1.aarch64.rpm 3477e517b894a6a4a8ce4a6d600b705b49851dd1e532d68bd4355d3c4ec95d56
aarch64 java-17-openjdk-devel-fastdebug-17.0.21.0.9-2.2.el9.alma.1.aarch64.rpm 34f954c1ecc791ae8d71ead4c95c3a8167ace479b04014ef4e03d80e0e71bcd3
aarch64 java-17-openjdk-static-libs-fastdebug-17.0.21.0.9-2.2.el9.alma.1.aarch64.rpm 3c5369e745f6a34fd44d201210d370314947d25f30161c828207b0b421f87154
aarch64 java-17-openjdk-jmods-slowdebug-17.0.21.0.9-2.2.el9.alma.1.aarch64.rpm 4a909c8f5d5764904d416e83cbb1770353c6ce6495594b81dac56c802a60d11e
aarch64 java-17-openjdk-demo-fastdebug-17.0.21.0.9-2.2.el9.alma.1.aarch64.rpm 51e026540b2cdd4f3c94d20439082c0ca9b7c73a6a43b9cc5447e3b09407e2fc
aarch64 java-17-openjdk-devel-17.0.21.0.9-2.2.el9.alma.1.aarch64.rpm 57928e95b6b86b9d460523466fb8498454ca547d85f296564880df4dfe28f09c
aarch64 java-17-openjdk-jmods-17.0.21.0.9-2.2.el9.alma.1.aarch64.rpm 58f006077d7f9d06ffb9bd7e25006d7cc6d2a226d7419d8a8f752fd1a8f88e87
aarch64 java-17-openjdk-devel-slowdebug-17.0.21.0.9-2.2.el9.alma.1.aarch64.rpm 5945f1f0060587d1b12f8b8efd3a7cc1a03415386d60d7448694dd3be37aae09
aarch64 java-17-openjdk-javadoc-zip-17.0.21.0.9-2.2.el9.alma.1.aarch64.rpm 5ab3687a3a8613fd455aabb4a9603865bb7286a20e43c200d1630b10cad28863
aarch64 java-17-openjdk-headless-slowdebug-17.0.21.0.9-2.2.el9.alma.1.aarch64.rpm 750208b395eeda4a97c2831275513b5e2384ddf262efe72ed52eb614792a7283
aarch64 java-17-openjdk-headless-fastdebug-17.0.21.0.9-2.2.el9.alma.1.aarch64.rpm 790e58cab0c8c611545b63a712e0d3e026f1fb58e0e80c35bf1dd6862d93aa7e
aarch64 java-17-openjdk-demo-slowdebug-17.0.21.0.9-2.2.el9.alma.1.aarch64.rpm 7992643d5098d42f66836dfb5ee0c8c18c3ec7099542d576b59da1dd73f92dc7
aarch64 java-17-openjdk-javadoc-17.0.21.0.9-2.2.el9.alma.1.aarch64.rpm 7dffda0545f94ef782c3f3c5a12086edf5ab2cb165c8ee3b053b03e38e9e09fb
aarch64 java-17-openjdk-demo-17.0.21.0.9-2.2.el9.alma.1.aarch64.rpm 947626467f804e75f5223538a3f33991b863d99a3cc5186cb933468ba25524cf
aarch64 java-17-openjdk-static-libs-17.0.21.0.9-2.2.el9.alma.1.aarch64.rpm a971c023ebced38dc45f4597668d11af81c85c7b1e6b4bba18e9b9ab187b7b50
aarch64 java-17-openjdk-headless-17.0.21.0.9-2.2.el9.alma.1.aarch64.rpm c4f754516ff712f88f898131ffb5cc2736b8a5f897fd67fe5d1a4347a861ec8b
aarch64 java-17-openjdk-17.0.21.0.9-2.2.el9.alma.1.aarch64.rpm d255d07d3fa198772c6c869945b167e7de46b11fec76df3efc21c397c92b1e2d
aarch64 java-17-openjdk-static-libs-slowdebug-17.0.21.0.9-2.2.el9.alma.1.aarch64.rpm d38cf3e2f9b02484fcdcdbae6b628d766f17d846c353eefff375d0e7598bb8e5
aarch64 java-17-openjdk-src-fastdebug-17.0.21.0.9-2.2.el9.alma.1.aarch64.rpm faa48f160d0b2175b07d7e8117ebec63e0d69fe18157d432f75d29dced2fbdbb
aarch64 java-17-openjdk-src-slowdebug-17.0.21.0.9-2.2.el9.alma.1.aarch64.rpm fccd501af7f8fcf4b9ddc12c52a1184bc8c57c7058d43d985564ba4d62d2320d
ppc64le java-17-openjdk-static-libs-17.0.21.0.9-2.2.el9.alma.1.ppc64le.rpm 1ee040539a80bb85bbe8c2f0945ef9f6d0fedaa6728d761b8aa8a15f145767fc
ppc64le java-17-openjdk-17.0.21.0.9-2.2.el9.alma.1.ppc64le.rpm 2137a7824ae6b8afef34568535a45af1d8e9f67b821a21979ba1d0bf8a9d9f75
ppc64le java-17-openjdk-jmods-fastdebug-17.0.21.0.9-2.2.el9.alma.1.ppc64le.rpm 2b1f67bfe4b83343533c5abac9b8bab0e3b33452168daad6fceaa4ac16d23318
ppc64le java-17-openjdk-headless-fastdebug-17.0.21.0.9-2.2.el9.alma.1.ppc64le.rpm 38e2be30dc2cabdf9567b967533baab3dab14b212e1da8c0c1b42b288534f361
ppc64le java-17-openjdk-javadoc-17.0.21.0.9-2.2.el9.alma.1.ppc64le.rpm 5a8d9f00d6eb164e15ca7870331a273bd4f71b34e37f71c4534b30c25f10b6ad
ppc64le java-17-openjdk-fastdebug-17.0.21.0.9-2.2.el9.alma.1.ppc64le.rpm 6f65d4d72b5290eac776aef77b91c5f188869f2bb8b1c999b575d6d4aaf7d49f
ppc64le java-17-openjdk-static-libs-slowdebug-17.0.21.0.9-2.2.el9.alma.1.ppc64le.rpm 77691c0381e4b076f1850e3a8faeb008e56ec1ba88f04ba46c10eeea37b34130
ppc64le java-17-openjdk-src-17.0.21.0.9-2.2.el9.alma.1.ppc64le.rpm 786f68c9fcdb9bbe2b0715c2ad8ffc6601a8fdfd401df0844b576f90a6c78705
ppc64le java-17-openjdk-src-fastdebug-17.0.21.0.9-2.2.el9.alma.1.ppc64le.rpm 91a83ceb3b8b34471c390511da39f462414405663cd15e58a75123773f935309
ppc64le java-17-openjdk-src-slowdebug-17.0.21.0.9-2.2.el9.alma.1.ppc64le.rpm 94b2b7b1faea06ac3f83b4d8be262d08ec1b7e07df43c5b9773d3e201ac91a44
ppc64le java-17-openjdk-headless-17.0.21.0.9-2.2.el9.alma.1.ppc64le.rpm 9bbffe0d428386a44b03564c9b1826158c33d53545cbbcbc580b590e11315835
ppc64le java-17-openjdk-jmods-slowdebug-17.0.21.0.9-2.2.el9.alma.1.ppc64le.rpm a2b67beb232cdd21684af776dc1dfe9327ce19d45d8f8d69c606655276f78c44
ppc64le java-17-openjdk-slowdebug-17.0.21.0.9-2.2.el9.alma.1.ppc64le.rpm a42f93693bc55951e1bc8f4be28e02ff66b8c30674422b11304b55522f5c7a84
ppc64le java-17-openjdk-devel-slowdebug-17.0.21.0.9-2.2.el9.alma.1.ppc64le.rpm adbc1231b3f60fd41e86c1dfec7078642df2fe5c763d76f9f109130f452b523a
ppc64le java-17-openjdk-demo-17.0.21.0.9-2.2.el9.alma.1.ppc64le.rpm ae964b07c212e1f1dc773fcfcce16324903e04d89de9ceb036aec1975d9c6c29
ppc64le java-17-openjdk-static-libs-fastdebug-17.0.21.0.9-2.2.el9.alma.1.ppc64le.rpm afa7e2e36127f84491a239dbf4c2f4d8df186568929e110549075256d9d695ef
ppc64le java-17-openjdk-devel-fastdebug-17.0.21.0.9-2.2.el9.alma.1.ppc64le.rpm c7f27eaad3f843da318cecba03cd5124590601104b2e59cb3e66fa392bcfda99
ppc64le java-17-openjdk-jmods-17.0.21.0.9-2.2.el9.alma.1.ppc64le.rpm caa8c9e3552132988b95b14bc71bccef0f8f494be7db9e070cafa2df836379d2
ppc64le java-17-openjdk-demo-slowdebug-17.0.21.0.9-2.2.el9.alma.1.ppc64le.rpm ce53c7b75d3b08dfeea98f48c083b6ba7416351e213e2cdc6e22142df0e26b50
ppc64le java-17-openjdk-demo-fastdebug-17.0.21.0.9-2.2.el9.alma.1.ppc64le.rpm ced910324d45f1fa7f2716862f58487d3d4691c8994cd41698120ae900697048
ppc64le java-17-openjdk-javadoc-zip-17.0.21.0.9-2.2.el9.alma.1.ppc64le.rpm d4bb184f02356c23c8bb29d52f9a8f5c0f59449d53e2b4140aa5db31909c3e0c
ppc64le java-17-openjdk-headless-slowdebug-17.0.21.0.9-2.2.el9.alma.1.ppc64le.rpm f56e023f8015f18acdc0abef4cae457c7a3a78b7ba940f0672225ae0d614f81f
ppc64le java-17-openjdk-devel-17.0.21.0.9-2.2.el9.alma.1.ppc64le.rpm f5e5e85be795de85871bd9001960000579a4327a918edc6696e1d92fff21630c
s390x java-17-openjdk-demo-17.0.21.0.9-2.2.el9.alma.1.s390x.rpm 021f9d54c6218cbbdc3bf2801bc5bf17a8a91a113e4bc8bd0d744b8314425047
s390x java-17-openjdk-javadoc-zip-17.0.21.0.9-2.2.el9.alma.1.s390x.rpm 1321d40359ca30a34756cd86c55b802c2d2af4a54a719e935f1bd507d86a57e1
s390x java-17-openjdk-slowdebug-17.0.21.0.9-2.2.el9.alma.1.s390x.rpm 17c788704db8b69f9aee300d1caed48936303f8af985aebb6fe78bcb66e359a2
s390x java-17-openjdk-static-libs-17.0.21.0.9-2.2.el9.alma.1.s390x.rpm 17f02ce2ffab20bc9308c903d11d753ded7f43ff21af92c44d92b57d264c07ba
s390x java-17-openjdk-src-17.0.21.0.9-2.2.el9.alma.1.s390x.rpm 1b6d29af73b8078c128176432a2af54b6d2642789f5c58227c34ab669023dc6c
s390x java-17-openjdk-src-slowdebug-17.0.21.0.9-2.2.el9.alma.1.s390x.rpm 320e99ac86eb8e744fb7c3f74cbe65c871a8cef69b6e5479b8466202ea9e1da8
s390x java-17-openjdk-headless-slowdebug-17.0.21.0.9-2.2.el9.alma.1.s390x.rpm 46abdb65ac9869bb0eae33a56e8b8254720653c95f3d07a6e53d2b79cebb757b
s390x java-17-openjdk-devel-slowdebug-17.0.21.0.9-2.2.el9.alma.1.s390x.rpm 572591976d6c2a21115647a12c7d587adac5a792bdc16a546debe6f092c6a1be
s390x java-17-openjdk-headless-17.0.21.0.9-2.2.el9.alma.1.s390x.rpm 5913c6b48dfb27b2b6e31cb42fb3e0741ecc327eb46c9993e4c6be6eede2353e
s390x java-17-openjdk-17.0.21.0.9-2.2.el9.alma.1.s390x.rpm 6e1bff444110622707be7a3a415ed2061ba04ac950b46169914b07e606fe3bc1
s390x java-17-openjdk-demo-slowdebug-17.0.21.0.9-2.2.el9.alma.1.s390x.rpm 7fcfb71d89a585b0d6c47813bb35cba8ee69925b7d13aafaa806f4ec8e9d03f7
s390x java-17-openjdk-javadoc-17.0.21.0.9-2.2.el9.alma.1.s390x.rpm 9b07c9113d37e328c4d4093daf0a8977ebf49296432821ee7c8d44c9d806df88
s390x java-17-openjdk-jmods-slowdebug-17.0.21.0.9-2.2.el9.alma.1.s390x.rpm c314e01c242c3461dc0d7cd72762a3395c8674599413f3532b01583312943023
s390x java-17-openjdk-jmods-17.0.21.0.9-2.2.el9.alma.1.s390x.rpm c584c7cf9859b0606171e3bf0ccc62d77d91d5891defb71eb51b2cbb46a7a53e
s390x java-17-openjdk-static-libs-slowdebug-17.0.21.0.9-2.2.el9.alma.1.s390x.rpm c9a0324a4bf3db03aea8c7d09fddacfd9b9acf8a4606fed492b00e9cf31da09c
s390x java-17-openjdk-devel-17.0.21.0.9-2.2.el9.alma.1.s390x.rpm d61033c29c0dec36b48733375aeaca6e671fcb8ab0475c7d76a772e47cb9d618
x86_64 java-17-openjdk-src-fastdebug-17.0.21.0.9-2.2.el9.alma.1.x86_64.rpm 0f9fd84dc3bf91cf8b66ce6ab9366d9d5896e3e606b02d4ac6086d319b21d937
x86_64 java-17-openjdk-headless-fastdebug-17.0.21.0.9-2.2.el9.alma.1.x86_64.rpm 2da682d4fef62abe7e711f592f054cfe5a1a1153be9f3156a0fd25680074f31b
x86_64 java-17-openjdk-jmods-17.0.21.0.9-2.2.el9.alma.1.x86_64.rpm 3873ad2c6e97bf75d64ddd9c14f798215c96ae3d4b60ad04d397cfa1900cc6a5
x86_64 java-17-openjdk-jmods-fastdebug-17.0.21.0.9-2.2.el9.alma.1.x86_64.rpm 3dd8000d05de0401486b5c2698ccc0c7a59fdfa1ebc49a9e686218737f265534
x86_64 java-17-openjdk-fastdebug-17.0.21.0.9-2.2.el9.alma.1.x86_64.rpm 4d50f6f3c21f3139dfb57b7c061d35f746aebd7c4894a0c44e09ee0a38b5eb19
x86_64 java-17-openjdk-devel-17.0.21.0.9-2.2.el9.alma.1.x86_64.rpm 53ea679bfa6e4a414907b2bc6006c969f34c3297dfc0f8db8551cbdd6889e624
x86_64 java-17-openjdk-javadoc-17.0.21.0.9-2.2.el9.alma.1.x86_64.rpm 5b3f43bf727d6da1f4ebcb06c9398f8279d68441b48565a52c5e05d82bc349bb
x86_64 java-17-openjdk-javadoc-zip-17.0.21.0.9-2.2.el9.alma.1.x86_64.rpm 5cf0941832fad7a8058714de39b22f1875198df49b71c7606fd33967bd31af39
x86_64 java-17-openjdk-demo-fastdebug-17.0.21.0.9-2.2.el9.alma.1.x86_64.rpm 61c22a830f0b45bab5aa65e9c83faca3a7b54fc46674e4995bba887c51be0d66
x86_64 java-17-openjdk-demo-17.0.21.0.9-2.2.el9.alma.1.x86_64.rpm 64d356571dabce23a44176b9840cacebcf3b911164052e8f23e677eb63fa5099
x86_64 java-17-openjdk-devel-fastdebug-17.0.21.0.9-2.2.el9.alma.1.x86_64.rpm 7176b07d52711a7f180c50f09997cce9c724a6b88e3e26ad90e21b87dd451450
x86_64 java-17-openjdk-slowdebug-17.0.21.0.9-2.2.el9.alma.1.x86_64.rpm 80e27ab265f3ced10c15c016cfd3b0d6a4f95079e4ab570438f8fc88ad382348
x86_64 java-17-openjdk-17.0.21.0.9-2.2.el9.alma.1.x86_64.rpm 8457ccb18ef9f86e6f6667b1508961c4d5863ac9def4c322d6fdcf1b17d87dea
x86_64 java-17-openjdk-devel-slowdebug-17.0.21.0.9-2.2.el9.alma.1.x86_64.rpm 85cc5931915e96a34e24388989d9255fa6c73d423ca3cd3c8b87b8dc380ce70b
x86_64 java-17-openjdk-src-17.0.21.0.9-2.2.el9.alma.1.x86_64.rpm 8be4573ae3b98d125438d0db71b0d47353aed20acad6d5b14a4de9885cdff349
x86_64 java-17-openjdk-jmods-slowdebug-17.0.21.0.9-2.2.el9.alma.1.x86_64.rpm 8eddeba50c4e62c7d42f33907d8fd569a0a6caf7976b5c5dd1dd128fbea6c666
x86_64 java-17-openjdk-static-libs-slowdebug-17.0.21.0.9-2.2.el9.alma.1.x86_64.rpm 9199926b2aaaeca35ee4324ec7d65ce53773d30243617f8850556ebfd5d0f86a
x86_64 java-17-openjdk-src-slowdebug-17.0.21.0.9-2.2.el9.alma.1.x86_64.rpm b1b420039fc1ddc2283d490e1b23d7625b750e6f6edc3561b5b001244b395104
x86_64 java-17-openjdk-demo-slowdebug-17.0.21.0.9-2.2.el9.alma.1.x86_64.rpm b66fb0a25b56c8fe765e528b1961aa18d66392af2ac229781b3902de4847306e
x86_64 java-17-openjdk-headless-slowdebug-17.0.21.0.9-2.2.el9.alma.1.x86_64.rpm b742c3e8f781b2cbac38f00d4ffc0039f2ea48fb8e28ae33d7d3e6080e0a3ee4
x86_64 java-17-openjdk-headless-17.0.21.0.9-2.2.el9.alma.1.x86_64.rpm c5ddb0aab806e51cbb6c94c6724f1a3ae9cf78909e882fb67006f4f1300f6e16
x86_64 java-17-openjdk-static-libs-17.0.21.0.9-2.2.el9.alma.1.x86_64.rpm cf35d22e4d3f64829a10cb63f74ea6221ef91ea6363830295e7e23ea233ee081
x86_64 java-17-openjdk-static-libs-fastdebug-17.0.21.0.9-2.2.el9.alma.1.x86_64.rpm d14d7681408451ee9c13e0a53ca139cb3b68487aca68b379b0d8f1efca9823b3
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.