{"id":"ALSA-2026:88352","summary":"Important: java-17-openjdk security update for AlmaLinux 8","details":"The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  \n\nSecurity Fix(es):  \n\n  * JDK: Enhance PKCS5 padding (CVE-2026-83374)\n  * JDK: Enhance TLS certificate handling (CVE-2026-83376)\n  * JDK: Enhance LDAP logins (CVE-2026-83380)\n  * JDK: Enhance SASL Authentication (CVE-2026-83381)\n  * JDK: Enhance WebRowSets (CVE-2026-83387)\n  * JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)\n  * JDK: Enhance XML Processing (CVE-2026-83400)\n  * JDK: Enhance XPath Expressions (CVE-2026-87290)\n  * JDK: Enhance Network Clients (CVE-2026-87292)\n  * JDK: Enhance Certificate Name Checks (CVE-2026-87294)\n  * JDK: Enhance Template Handling (CVE-2026-87367)\n  * JDK: Enhance HTTP Client (CVE-2026-91332)\n  * JDK: Enhance JPEG loading (CVE-2026-91334)\n  * JDK: Enhance Image Handling (CVE-2026-91335)\n  * JDK: Enhance TLS handshakes (CVE-2026-91373)\n  * JDK: Enhance jstatd (CVE-2026-91374)\n  * JDK: Enhance jmod handling (CVE-2026-91375)\n  * JDK: Enhance JShell (CVE-2026-91379)\n  * JDK: Enhance Preferences (CVE-2026-91380)\n  * JDK: Enhance Image Processing (CVE-2026-91382)\n  * JDK: Enhance HTTP client caching (CVE-2026-91394)\n  * JDK: Enhance diagnostic sessions (CVE-2026-91397)\n  * JDK: Enhance SOCKS5 support (CVE-2026-91398)\n  * JDK: Enhance MIDI file handling (CVE-2026-91400)\n  * JDK: Enhance zipfs (CVE-2026-91410)\n  * JDK: Enhance font rendering (CVE-2026-91415)\n  * JDK: Enhance GIF loading (CVE-2026-91418)\n  * JDK: Enhance HTTP server parsing (CVE-2026-91451)\n  * JDK: Enhance HTTP server (CVE-2026-91452)\n  * JDK: Improve HTTP headers (CVE-2026-91453)\n  * JDK: Enhance TLS Extensions (CVE-2026-91461)\n  * JDK: Enhance krb5 tokens (CVE-2026-91462)\n  * JDK: Enhance krb5 client (CVE-2026-91463)\n  * JDK: Enhance Kerberos validation (CVE-2026-91464)\n  * JDK: Enhance C2 comparisons (CVE-2026-91487)\n  * JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nNote that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.\n","modified":"2026-10-29T11:02:25.406193479Z","published":"2026-10-27T00:00:00Z","related":["CVE-2026-101516","CVE-2026-114820","CVE-2026-83374","CVE-2026-83376","CVE-2026-83380","CVE-2026-83381","CVE-2026-83387","CVE-2026-83395","CVE-2026-83400","CVE-2026-87290","CVE-2026-87292","CVE-2026-87294","CVE-2026-87367","CVE-2026-91332","CVE-2026-91334","CVE-2026-91335","CVE-2026-91373","CVE-2026-91374","CVE-2026-91375","CVE-2026-91379","CVE-2026-91380","CVE-2026-91382","CVE-2026-91394","CVE-2026-91397","CVE-2026-91398","CVE-2026-91400","CVE-2026-91403","CVE-2026-91410","CVE-2026-91415","CVE-2026-91418","CVE-2026-91451","CVE-2026-91452","CVE-2026-91453","CVE-2026-91461","CVE-2026-91462","CVE-2026-91463","CVE-2026-91464","CVE-2026-91487"],"upstream":["CVE-2026-101516","CVE-2026-114820","CVE-2026-83374","CVE-2026-83376","CVE-2026-83380","CVE-2026-83381","CVE-2026-83387","CVE-2026-83395","CVE-2026-83400","CVE-2026-87290","CVE-2026-87292","CVE-2026-87294","CVE-2026-87367","CVE-2026-91332","CVE-2026-91334","CVE-2026-91335","CVE-2026-91373","CVE-2026-91374","CVE-2026-91375","CVE-2026-91379","CVE-2026-91380","CVE-2026-91382","CVE-2026-91394","CVE-2026-91397","CVE-2026-91398","CVE-2026-91400","CVE-2026-91403","CVE-2026-91410","CVE-2026-91415","CVE-2026-91418","CVE-2026-91451","CVE-2026-91452","CVE-2026-91453","CVE-2026-91461","CVE-2026-91462","CVE-2026-91463","CVE-2026-91464","CVE-2026-91487"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:88352"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-101516"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-83374"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-83376"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-83380"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-83381"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-83387"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-83395"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-83400"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-87290"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-87292"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-87294"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-87367"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91332"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91334"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91335"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91373"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91374"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91375"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91379"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91380"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91382"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91394"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91397"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91398"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91400"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91410"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91415"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91418"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91451"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91452"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91453"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91461"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91462"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91463"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91464"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91487"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2556709"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2556795"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2556824"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2556837"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2556859"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557007"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557032"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557041"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557047"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557079"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557110"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557117"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557122"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557195"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557236"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557261"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557356"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557405"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557427"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557443"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557506"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557558"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557564"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557598"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557662"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557665"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557674"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557690"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557709"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557711"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557731"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557765"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557780"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557857"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557906"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2557956"},{"type":"ADVISORY","url":"https://errata.almalinux.org/8/ALSA-2026-88352.html"}],"affected":[{"package":{"name":"java-17-openjdk","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-17-openjdk"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.21.0.9-2.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:88352.json"}},{"package":{"name":"java-17-openjdk-demo","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-17-openjdk-demo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.21.0.9-2.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:88352.json"}},{"package":{"name":"java-17-openjdk-demo-fastdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-17-openjdk-demo-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.21.0.9-2.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:88352.json"}},{"package":{"name":"java-17-openjdk-demo-slowdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-17-openjdk-demo-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.21.0.9-2.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:88352.json"}},{"package":{"name":"java-17-openjdk-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-17-openjdk-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.21.0.9-2.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:88352.json"}},{"package":{"name":"java-17-openjdk-devel-fastdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-17-openjdk-devel-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.21.0.9-2.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:88352.json"}},{"package":{"name":"java-17-openjdk-devel-slowdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-17-openjdk-devel-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.21.0.9-2.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:88352.json"}},{"package":{"name":"java-17-openjdk-fastdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-17-openjdk-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.21.0.9-2.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:88352.json"}},{"package":{"name":"java-17-openjdk-headless","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-17-openjdk-headless"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.21.0.9-2.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:88352.json"}},{"package":{"name":"java-17-openjdk-headless-fastdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-17-openjdk-headless-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.21.0.9-2.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:88352.json"}},{"package":{"name":"java-17-openjdk-headless-slowdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-17-openjdk-headless-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.21.0.9-2.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:88352.json"}},{"package":{"name":"java-17-openjdk-javadoc","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-17-openjdk-javadoc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.21.0.9-2.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:88352.json"}},{"package":{"name":"java-17-openjdk-javadoc-zip","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-17-openjdk-javadoc-zip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.21.0.9-2.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:88352.json"}},{"package":{"name":"java-17-openjdk-jmods","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-17-openjdk-jmods"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.21.0.9-2.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:88352.json"}},{"package":{"name":"java-17-openjdk-jmods-fastdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-17-openjdk-jmods-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.21.0.9-2.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:88352.json"}},{"package":{"name":"java-17-openjdk-jmods-slowdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-17-openjdk-jmods-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.21.0.9-2.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:88352.json"}},{"package":{"name":"java-17-openjdk-slowdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-17-openjdk-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.21.0.9-2.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:88352.json"}},{"package":{"name":"java-17-openjdk-src","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-17-openjdk-src"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.21.0.9-2.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:88352.json"}},{"package":{"name":"java-17-openjdk-src-fastdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-17-openjdk-src-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.21.0.9-2.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:88352.json"}},{"package":{"name":"java-17-openjdk-src-slowdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-17-openjdk-src-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.21.0.9-2.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:88352.json"}},{"package":{"name":"java-17-openjdk-static-libs","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-17-openjdk-static-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.21.0.9-2.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:88352.json"}},{"package":{"name":"java-17-openjdk-static-libs-fastdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-17-openjdk-static-libs-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.21.0.9-2.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:88352.json"}},{"package":{"name":"java-17-openjdk-static-libs-slowdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-17-openjdk-static-libs-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.21.0.9-2.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:88352.json"}}],"schema_version":"1.9.2"}