[ALSA-2026:9693] Important: java-25-openjdk security update
Type:
security
Severity:
important
Release date:
2026-04-24
Description:
The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. Security Fix(es): * JDK: Enhance crypto algorithm support (CVE-2026-22007) * JDK: Improved Arena allocations (CVE-2026-22008) * JDK: Improve Kerberos credentialing (CVE-2026-22013) * JDK: Enhance Path Factories Redux (CVE-2026-22016) * JDK: Enhance Zip file reading (CVE-2026-22018) * JDK: Enhance certificate chain validation (CVE-2026-22021) * JDK: Updating FreeType 2.14.1 (CVE-2026-23865) * JDK: Enhance TLS connection handling (CVE-2026-34282) * JDK: Enhance key generation (CVE-2026-34268) This release also updates a number of third-party libraries included in the JDK. The libraries themselves are affected by the following CVEs, but this is not a statement that the JDK itself is affected: * giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740) * libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636) * libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) Bug Fix(es): * When copying files, OpenJDK 25 prefers to use the copy_file_range native function for performance reasons, only falling back to sendfile when this fails. However, in previous OpenJDK 25 releases, a response of EOPNOTSUPP (operation not supported) did not cause the JDK to fall back to sendfile. This is rectified in this release. (AlmaLinux-169939, AlmaLinux-169937) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 java-25-openjdk-headless-25.0.3.0.9-1.el9.alma.1.aarch64.rpm 0029cf1adce73c58fd24925f2c60fbc4e8ee6641e200ec6b0348fe1ae52ee9c0
aarch64 java-25-openjdk-crypto-adapter-25.0.3.0.9-1.el9.alma.1.aarch64.rpm 173f48dd6a2b321b4b2d10db4902fa6c145effbbf5eaf04e9745ba5432615445
aarch64 java-25-openjdk-static-libs-25.0.3.0.9-1.el9.alma.1.aarch64.rpm 17e63c3d8dbe1a983c69100d185e108629e18a63f0d49e60040246f3bd70cb07
aarch64 java-25-openjdk-src-slowdebug-25.0.3.0.9-1.el9.alma.1.aarch64.rpm 2ba142e071500e4396f29d07a3dbd345ad387f9c0d5e91afa5ff6b5d5ba89737
aarch64 java-25-openjdk-headless-slowdebug-25.0.3.0.9-1.el9.alma.1.aarch64.rpm 2fbe4cd638a79137fc6069c7406fbf58aa9fe33f05d7fa791676ddc261076c95
aarch64 java-25-openjdk-jmods-25.0.3.0.9-1.el9.alma.1.aarch64.rpm 40b507991be33d7a5318db708c47cef772c89acef13aeedef121cc64b491f182
aarch64 java-25-openjdk-static-libs-slowdebug-25.0.3.0.9-1.el9.alma.1.aarch64.rpm 50b3ab4e9459db7b06463cc761df04c28d31aea63fc2a63855d18596a94329dd
aarch64 java-25-openjdk-headless-fastdebug-25.0.3.0.9-1.el9.alma.1.aarch64.rpm 50eebc2595753c2a7e6dc078ca047222d8cef862d0ff20a18e05aa21eee1fa52
aarch64 java-25-openjdk-demo-slowdebug-25.0.3.0.9-1.el9.alma.1.aarch64.rpm 6abb89caf8cac1a2be557b8f55bcff20481d5d0937521773e23506bc475d0512
aarch64 java-25-openjdk-devel-fastdebug-25.0.3.0.9-1.el9.alma.1.aarch64.rpm 82458947756f1169c0a16c44bf222e931fd56be04afa0013a8237d36af27fa7d
aarch64 java-25-openjdk-fastdebug-25.0.3.0.9-1.el9.alma.1.aarch64.rpm 88f60271aa0c9926b0eef2e7122fd887ce4f383da3321e39d2c21858191deedc
aarch64 java-25-openjdk-crypto-adapter-slowdebug-25.0.3.0.9-1.el9.alma.1.aarch64.rpm 9968c1f50b601d803ba1d73b9a3624738c9b26d67e36e2a0a1f08fb95f97267f
aarch64 java-25-openjdk-devel-slowdebug-25.0.3.0.9-1.el9.alma.1.aarch64.rpm 998978ce0a3300a6938c7924657285a85c37d0ae56e4a0bf63a24988b2f911d3
aarch64 java-25-openjdk-devel-25.0.3.0.9-1.el9.alma.1.aarch64.rpm 9a6adb108f6133897a7ee3f7c899df3982c1d608fccf5938c5c6e648f243cda1
aarch64 java-25-openjdk-demo-fastdebug-25.0.3.0.9-1.el9.alma.1.aarch64.rpm 9ab2f272c1a94bd9309fef43276341445371d9c6f9d04f9fea54bc87193b77dc
aarch64 java-25-openjdk-25.0.3.0.9-1.el9.alma.1.aarch64.rpm 9f3a2cde34eab2308ff3f40ca11158ddf6e41f32a07636e68837888433464988
aarch64 java-25-openjdk-demo-25.0.3.0.9-1.el9.alma.1.aarch64.rpm a216cab2104d3a41482c07fe9c01dc3ef4b098dbe2c1784edd4acb7eed48fd2a
aarch64 java-25-openjdk-slowdebug-25.0.3.0.9-1.el9.alma.1.aarch64.rpm ae424cb6edc9a1eda97cc571029731af5ad2b5de9ed74a8b2b38ac41e4e3012e
aarch64 java-25-openjdk-jmods-slowdebug-25.0.3.0.9-1.el9.alma.1.aarch64.rpm af42b7e9f64384fcd9648cb4f86a3f9a3b8efa58b3197eca591e1cb9226a9d2d
aarch64 java-25-openjdk-jmods-fastdebug-25.0.3.0.9-1.el9.alma.1.aarch64.rpm c17298f436424cd8a7ed4e2230b5a45b4f0be56bb784a0ebbc7a43b75c1df54b
aarch64 java-25-openjdk-javadoc-25.0.3.0.9-1.el9.alma.1.aarch64.rpm c907b8bb77bf940a9dc77fd9e8859a3dce3f249b23d1098d60d5957409a19a99
aarch64 java-25-openjdk-crypto-adapter-fastdebug-25.0.3.0.9-1.el9.alma.1.aarch64.rpm d2bf8f23e0dc5bb38979d9d56c2d848480bf2bab757a9149697f472b32de67cb
aarch64 java-25-openjdk-javadoc-zip-25.0.3.0.9-1.el9.alma.1.aarch64.rpm d75c685a56d0bad0c2c755d38351132a087ef611d6368884ea103d45795c13ad
aarch64 java-25-openjdk-static-libs-fastdebug-25.0.3.0.9-1.el9.alma.1.aarch64.rpm df9e7d4b92fb6fd71fb896fd0cfa5c28217735f7841120018c00c0f96b494bf3
aarch64 java-25-openjdk-src-fastdebug-25.0.3.0.9-1.el9.alma.1.aarch64.rpm e7d6ebd5c1e5bd9a6ff69266d3569fa8c39b6b75a2d3c7e48b4771681ced8fe7
aarch64 java-25-openjdk-src-25.0.3.0.9-1.el9.alma.1.aarch64.rpm fdc2ac7a27cb2200905008e1eaf1b38addce795593fc317d675a6416ebae84eb
ppc64le java-25-openjdk-devel-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm 0f2525fbb71550a37670185bf962de113b474c3fb6559ce52b656fc690ce9bf6
ppc64le java-25-openjdk-crypto-adapter-slowdebug-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm 1015ff3d3889c952d5bacd3163a4056b784cbfaede00dff5d23ad900b320cf25
ppc64le java-25-openjdk-crypto-adapter-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm 105f44b9e151cf179b5250d6103c41954386f1c236e3c8be26f956b15699f8c2
ppc64le java-25-openjdk-src-slowdebug-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm 1f87fdc5e3f3e7c78e8253c9ddd50bc421d0b4d43fc9389689bae65e53904c1c
ppc64le java-25-openjdk-slowdebug-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm 28eb785ac1e48881e2c7c594ddf29cf1b91d75535e774a0a839a254273b51867
ppc64le java-25-openjdk-devel-fastdebug-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm 34f59c32ea3827e7c647f3c4a92664885dd387e51c1e54aeda68abccc8c61403
ppc64le java-25-openjdk-headless-slowdebug-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm 391ca2cfd93a392fff69d07e22d7fd0a0d8b39625b24cad46875d2b2d5c64fc6
ppc64le java-25-openjdk-javadoc-zip-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm 393719b3bfb4e904911f3878034c1dae9ed344d20213e13d8aa11959371929eb
ppc64le java-25-openjdk-devel-slowdebug-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm 398a0a927b40d05fa24bb931b2108d770b3291566700291bb7fbc76bbcadb1b3
ppc64le java-25-openjdk-javadoc-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm 39e46f8087c1fa77daa7c240da91b96f9b636203f41dfeaffcf9ad1e01deb636
ppc64le java-25-openjdk-src-fastdebug-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm 3bca62440e31884d60ef850f2596bf75da1607045c837778167af9f8416a3da4
ppc64le java-25-openjdk-demo-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm 523e8a1b02f6efcd82f6c1ee686db2b338fe066e92591296fcf8aae1f94bd11b
ppc64le java-25-openjdk-src-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm 5661d72e8d814b96b97bb3be05a15981878473d89d51b32aefdef6a12be3b4ce
ppc64le java-25-openjdk-jmods-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm 56eea81d003b0195ee520a121247cb32c7be7ac12ad6fd00ec0d1bceb3f50794
ppc64le java-25-openjdk-headless-fastdebug-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm 6e293cc32fca70acdfa7f4171697d15ac83b39aca9058bfa63a5e9e690891217
ppc64le java-25-openjdk-static-libs-fastdebug-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm 83a018eb7394563abf3cf606221f173bd249a323bfc3c5ff33df8dfc1a676b99
ppc64le java-25-openjdk-static-libs-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm 9a69499334af8ca5b258a9b5f359fd8e8b53dd00d89c3bb7eef81893a147e935
ppc64le java-25-openjdk-jmods-fastdebug-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm ad8ac18bd8648a9380abecb0cafab12ede71eb17f8a8f71845d82b206c4ff844
ppc64le java-25-openjdk-jmods-slowdebug-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm af2b97df1a62ab6726bd7757d9e886e4890b0c161cd200c943c3ce4f0e246581
ppc64le java-25-openjdk-demo-fastdebug-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm af80930a957068069bd1203cb674b94c266f7da8054dcfe91149be74dece51ef
ppc64le java-25-openjdk-headless-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm c001a1c74d65734f4f2d6a39a7e8651c5a2577ded31b6ec785732dbb8d3290f8
ppc64le java-25-openjdk-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm c23068705f3cc271bc380c02758e64a912f3a0ab9dcb83b5e1dc30f4fb58da75
ppc64le java-25-openjdk-demo-slowdebug-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm d0d2468246da037b4ea68bbfd3d552ac67df8886e2620addfb12d44e5e2f2fcf
ppc64le java-25-openjdk-fastdebug-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm d67b4f80572eadd9dd991ad6a083df97ad77e907e25723857b3e9df13602c735
ppc64le java-25-openjdk-crypto-adapter-fastdebug-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm f5536375e255c8838dbc3065e45cd1391e78f565123ac8b2a3da456ab13226a3
ppc64le java-25-openjdk-static-libs-slowdebug-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm fab436d24e7de5066aacca948791d6d88594767e7371251145f73b844c80442f
s390x java-25-openjdk-javadoc-zip-25.0.3.0.9-1.el9.alma.1.s390x.rpm 057468ec7b712ec74d3d7935240387409293f778096580965bb4139cc42828d2
s390x java-25-openjdk-crypto-adapter-25.0.3.0.9-1.el9.alma.1.s390x.rpm 0d7b95c6f527cc94764583b79f9672ea2465204ecf11d12bea53f129d7640764
s390x java-25-openjdk-jmods-25.0.3.0.9-1.el9.alma.1.s390x.rpm 12d3ed3ba4ee6e3baf875bbcbbbad70c4ecb4171bb17b9c933b651ba793ec401
s390x java-25-openjdk-crypto-adapter-slowdebug-25.0.3.0.9-1.el9.alma.1.s390x.rpm 13ad3ced1e4203586f22dae45c37418bc80a84ff3014d2f93b2af61806b86278
s390x java-25-openjdk-headless-slowdebug-25.0.3.0.9-1.el9.alma.1.s390x.rpm 1a57008c783551876fc988604c26434a5c26d229136b92fe2f8365a6408e341c
s390x java-25-openjdk-devel-25.0.3.0.9-1.el9.alma.1.s390x.rpm 37acb35fda7bcb244c8b7b0d6114efd64bc8c79b0d7e826c4f9143820e723ada
s390x java-25-openjdk-src-slowdebug-25.0.3.0.9-1.el9.alma.1.s390x.rpm 44b9688af8371e2786a157d50d44b2f3b4c626452b557718ae767a9ec6f6a3a6
s390x java-25-openjdk-javadoc-25.0.3.0.9-1.el9.alma.1.s390x.rpm 47ab2506a579e1274a99bb1dc3c801ba12aec15f416df980876cb4750420d9d8
s390x java-25-openjdk-static-libs-25.0.3.0.9-1.el9.alma.1.s390x.rpm 4ba760a5ca22175953cb8ebaa5d00a698ba49ec58e619da6abb90cd59b3d0e76
s390x java-25-openjdk-slowdebug-25.0.3.0.9-1.el9.alma.1.s390x.rpm 561a79bc47229c42ba568cc1dd99d866307b75a58a6dceca833649ff5de28463
s390x java-25-openjdk-demo-25.0.3.0.9-1.el9.alma.1.s390x.rpm 5702d9ba4a81b5e9477ebd88608766162c4dffa9a3528d09b9060ca4681afedd
s390x java-25-openjdk-demo-slowdebug-25.0.3.0.9-1.el9.alma.1.s390x.rpm 5a04640a87c91f73294ca2a472915796e5d75058308223ba26107ff9bf61a1fb
s390x java-25-openjdk-25.0.3.0.9-1.el9.alma.1.s390x.rpm 69d7e9c1bc3cbce3accdd671292f1abb02cb078c69a081dbbdbf350a611cae79
s390x java-25-openjdk-headless-25.0.3.0.9-1.el9.alma.1.s390x.rpm 801f0f1d6cbbd929f43d2456f0a72c338c7757222e15bb56cf520bf671342397
s390x java-25-openjdk-src-25.0.3.0.9-1.el9.alma.1.s390x.rpm a173b2dd77b50e9dae14333e81988b2f1ea71aa13573716fd950fb658a59fdc3
s390x java-25-openjdk-devel-slowdebug-25.0.3.0.9-1.el9.alma.1.s390x.rpm c74f3e8df01ee9b10c045ad370ca92552d2ca5311a79aa69b6aec9d5cee270c8
s390x java-25-openjdk-static-libs-slowdebug-25.0.3.0.9-1.el9.alma.1.s390x.rpm d3b907be520756f02bb53979e93fad866fe80c4fbbdd9761ffe19721cf1a1d71
s390x java-25-openjdk-jmods-slowdebug-25.0.3.0.9-1.el9.alma.1.s390x.rpm dcfbd561392d1c0bcf0c79c5cd4ca387e15e29093448020495eed4dbd26d9c22
x86_64 java-25-openjdk-javadoc-zip-25.0.3.0.9-1.el9.alma.1.x86_64.rpm 1e0790dd901fc09e9abd47f494af4e968843e9d9f7e35bbb1040685a4110e45b
x86_64 java-25-openjdk-jmods-fastdebug-25.0.3.0.9-1.el9.alma.1.x86_64.rpm 1fe8b0a75a8bc9dfe79a0c8160493d1419d04ec5ce53d4eec29545a51b41682a
x86_64 java-25-openjdk-crypto-adapter-slowdebug-25.0.3.0.9-1.el9.alma.1.x86_64.rpm 39848d18e1422558f213ff5a1faac96e0c14c0591a45233ded1d06bbacfe3c45
x86_64 java-25-openjdk-devel-25.0.3.0.9-1.el9.alma.1.x86_64.rpm 460bdc6b78c30e7dda5c707bb88c7dd02aa8963d4ecb1d4c217b3537eb9f5642
x86_64 java-25-openjdk-headless-slowdebug-25.0.3.0.9-1.el9.alma.1.x86_64.rpm 53fa8bdff6b0f4e4e926085d45acb08934c30efa727e8f287c0e29c5626139ea
x86_64 java-25-openjdk-javadoc-25.0.3.0.9-1.el9.alma.1.x86_64.rpm 5fa11f98e27aaa28482705e9909d613bb347d836fdbdd2d6ae564564cf94e074
x86_64 java-25-openjdk-fastdebug-25.0.3.0.9-1.el9.alma.1.x86_64.rpm 60528381e996d605be5679c05f26fbc70832f7281742dd3e885d40c6d881975a
x86_64 java-25-openjdk-static-libs-slowdebug-25.0.3.0.9-1.el9.alma.1.x86_64.rpm 688cba1f78159615f6f388fce8801c4d708623a4a0f59c30c271296195c65886
x86_64 java-25-openjdk-static-libs-25.0.3.0.9-1.el9.alma.1.x86_64.rpm 7078303dcf424915c0096cf41c72d16ced51dc75e98e7b1bc73f29a7aa56d57c
x86_64 java-25-openjdk-headless-fastdebug-25.0.3.0.9-1.el9.alma.1.x86_64.rpm 78f5b94c316b541de42f878fff469b6f4aca3ca8d3d002da462ed1cc1d832f8e
x86_64 java-25-openjdk-jmods-slowdebug-25.0.3.0.9-1.el9.alma.1.x86_64.rpm 7fd9e5eb55c812006ff980328723ed9a38ce8ebb903d31117658d4492542d760
x86_64 java-25-openjdk-src-fastdebug-25.0.3.0.9-1.el9.alma.1.x86_64.rpm 836731c3558513e46a93a5b8c10c214360018c4e6c00a63a802bcccb2532d285
x86_64 java-25-openjdk-25.0.3.0.9-1.el9.alma.1.x86_64.rpm 849a928b8c0ab9f169e683378454ce6c415fa56acf3b1786697797a20fe3db5f
x86_64 java-25-openjdk-demo-fastdebug-25.0.3.0.9-1.el9.alma.1.x86_64.rpm 8af9ecfdb6a55c3ba48fcd009c4f0a5e9ca4149aceec30022566c498f42113d9
x86_64 java-25-openjdk-demo-slowdebug-25.0.3.0.9-1.el9.alma.1.x86_64.rpm 8d11b9b7ac363994e5c3dc88f28a1f7cd077c92f7b942fd48fa819141a51ea1d
x86_64 java-25-openjdk-static-libs-fastdebug-25.0.3.0.9-1.el9.alma.1.x86_64.rpm a3e0bfa748086eb50b4ecd4fbce15863e3aa8db1df331b9ec65aaf42b54ac14b
x86_64 java-25-openjdk-slowdebug-25.0.3.0.9-1.el9.alma.1.x86_64.rpm b2bfb1a26d329133786a67e350ad86866cba6d2fcfa83d79f23ea8ff34d8e280
x86_64 java-25-openjdk-devel-slowdebug-25.0.3.0.9-1.el9.alma.1.x86_64.rpm bbe4098fef7a0b58a24a7b22d8e6493b6b3c6288758136f91fec2b393336920f
x86_64 java-25-openjdk-src-25.0.3.0.9-1.el9.alma.1.x86_64.rpm bf2c502b90787e098f8ee62a2d12d695ff105f5ea0ecef11db8a8cdaa0a753d9
x86_64 java-25-openjdk-demo-25.0.3.0.9-1.el9.alma.1.x86_64.rpm c08c5198638527be7f6ad998f6f003bbbb198d45cb034a98f5422eae54f690a2
x86_64 java-25-openjdk-headless-25.0.3.0.9-1.el9.alma.1.x86_64.rpm c3d345384e1099398a717bb5916504c59b87e4c4f73eebac9f9284f45a9c9992
x86_64 java-25-openjdk-jmods-25.0.3.0.9-1.el9.alma.1.x86_64.rpm c5c451027c9d26eb8bdd3ad9915dce83b82bd8a2d1faab894be43c338af1dd83
x86_64 java-25-openjdk-src-slowdebug-25.0.3.0.9-1.el9.alma.1.x86_64.rpm d7710584d4936872ee0196e1f1b0bf7d6529df6ebefb55f78ed9734c5f860cfc
x86_64 java-25-openjdk-crypto-adapter-25.0.3.0.9-1.el9.alma.1.x86_64.rpm e6dba6acc2fa10a816ac97ab79cd965d9644a7211d354e9ae33090e64e8c4af3
x86_64 java-25-openjdk-crypto-adapter-fastdebug-25.0.3.0.9-1.el9.alma.1.x86_64.rpm e7e1956de6a54650a9c2785a44c1e2202ae2d5ab44dfb573c2721294b492b155
x86_64 java-25-openjdk-devel-fastdebug-25.0.3.0.9-1.el9.alma.1.x86_64.rpm ff7c87250be38bf1be71d0973b3d45a4cbeec2c1a76776dfdd39a15d1cd2d2b3
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.