{"id":"ALSA-2026:95609","summary":"Important: java-1.8.0-openjdk security update for AlmaLinux 8","details":"The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.  \n\nSecurity Fix(es):  \n\n  * JDK: Enhance PKCS5 padding (CVE-2026-83374)\n  * JDK: Enhance TLS certificate handling (CVE-2026-83376)\n  * JDK: Enhance LDAP logins (CVE-2026-83380)\n  * JDK: Enhance SASL Authentication (CVE-2026-83381)\n  * JDK: Enhance WebRowSets (CVE-2026-83387)\n  * JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)\n  * JDK: Enhance Certificate Name Checks (CVE-2026-87294)\n  * JDK: Enhance XPath Expressions (CVE-2026-87290)\n  * JDK: Enhance Network Clients (CVE-2026-87292)\n  * JDK: Enhance RMI connections (CVE-2026-87293)\n  * JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)\n  * JDK: Enhance XML Processing (CVE-2026-83400)\n  * JDK: Enhance JPEG loading (CVE-2026-91334)\n  * JDK: Enhance Template Handling (CVE-2026-87367)\n  * JDK: Enhance Image Handling (CVE-2026-91335)\n  * JDK: Enhance Preferences (CVE-2026-91380)\n  * JDK: Enhance TLS handshakes (CVE-2026-91373)\n  * JDK: Enhance Font Rendering (CVE-2026-91381)\n  * JDK: Enhance Image Processing (CVE-2026-91382)\n  * JDK: Enhance jstatd (CVE-2026-91374)\n  * JDK: Enhance Pack200 unpacking (CVE-2026-91395)\n  * JDK: Improve Pack200 handling (CVE-2026-91396)\n  * JDK: Enhance diagnostic sessions (CVE-2026-91397)\n  * JDK: Enhance SOCKS5 support (CVE-2026-91398)\n  * JDK: Enhance MIDI file handling (CVE-2026-91400)\n  * JDK: Enhance zipfs (CVE-2026-91410)\n  * JDK: Enhance JGSS (CVE-2026-91411)\n  * JDK: Enhance CORBA (CVE-2026-91417)\n  * JDK: Enhance font rendering (CVE-2026-91415)\n  * JDK: Enhance HTTP server parsing (CVE-2026-91451)\n  * JDK: Enhance HTTP Server Handler (CVE-2026-91452)\n  * JDK: Improve HTTP headers (CVE-2026-91453)\n  * JDK: Enhance GIF loading (CVE-2026-91418)\n  * JDK: Enhance TLS Extensions (CVE-2026-91461)\n  * JDK: Enhance krb5 tokens (CVE-2026-91462)\n  * JDK: Enhance krb5 client (CVE-2026-91463)\n  * JDK: Enhance Kerberos validation (CVE-2026-91464)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nNote that the OpenJDK RPMs use the system certificate repository rather than one provided by OpenJDK. For updates to remove the compromised eMudhra certificates, please update the ca-certificates package.\n","modified":"2026-11-13T12:15:03.767700115Z","published":"2026-11-11T00:00:00Z","related":["CVE-2026-101516","CVE-2026-83374","CVE-2026-83376","CVE-2026-83380","CVE-2026-83381","CVE-2026-83387","CVE-2026-83395","CVE-2026-83400","CVE-2026-87290","CVE-2026-87292","CVE-2026-87293","CVE-2026-87294","CVE-2026-87367","CVE-2026-91334","CVE-2026-91335","CVE-2026-91373","CVE-2026-91374","CVE-2026-91380","CVE-2026-91381","CVE-2026-91382","CVE-2026-91395","CVE-2026-91396","CVE-2026-91397","CVE-2026-91398","CVE-2026-91400","CVE-2026-91410","CVE-2026-91411","CVE-2026-91415","CVE-2026-91417","CVE-2026-91418","CVE-2026-91451","CVE-2026-91452","CVE-2026-91453","CVE-2026-91461","CVE-2026-91462","CVE-2026-91463","CVE-2026-91464"],"upstream":["CVE-2026-101516","CVE-2026-83374","CVE-2026-83376","CVE-2026-83380","CVE-2026-83381","CVE-2026-83387","CVE-2026-83395","CVE-2026-83400","CVE-2026-87290","CVE-2026-87292","CVE-2026-87293","CVE-2026-87294","CVE-2026-87367","CVE-2026-91334","CVE-2026-91335","CVE-2026-91373","CVE-2026-91374","CVE-2026-91380","CVE-2026-91381","CVE-2026-91382","CVE-2026-91395","CVE-2026-91396","CVE-2026-91397","CVE-2026-91398","CVE-2026-91400","CVE-2026-91410","CVE-2026-91411","CVE-2026-91415","CVE-2026-91417","CVE-2026-91418","CVE-2026-91451","CVE-2026-91452","CVE-2026-91453","CVE-2026-91461","CVE-2026-91462","CVE-2026-91463","CVE-2026-91464"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:95609"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-101516"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-83374"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-83376"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-83380"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-83381"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-83387"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-83395"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-83400"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-87290"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-87292"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-87293"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-87294"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-87367"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91334"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91335"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91373"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91374"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91380"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91381"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91382"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91395"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91396"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91397"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91398"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91400"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91410"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91411"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91415"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91417"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91418"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91451"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91452"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91453"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91461"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91462"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91463"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-91464"},{"type":"ADVISORY","url":"https://errata.almalinux.org/8/ALSA-2026-95609.html"}],"affected":[{"package":{"name":"java-1.8.0-openjdk","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.512.b09-1.2.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:95609.json"}},{"package":{"name":"java-1.8.0-openjdk-accessibility","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-accessibility"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.512.b09-1.2.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:95609.json"}},{"package":{"name":"java-1.8.0-openjdk-accessibility-fastdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-accessibility-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.512.b09-1.2.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:95609.json"}},{"package":{"name":"java-1.8.0-openjdk-accessibility-slowdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-accessibility-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.512.b09-1.2.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:95609.json"}},{"package":{"name":"java-1.8.0-openjdk-demo","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-demo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.512.b09-1.2.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:95609.json"}},{"package":{"name":"java-1.8.0-openjdk-demo-fastdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-demo-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.512.b09-1.2.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:95609.json"}},{"package":{"name":"java-1.8.0-openjdk-demo-slowdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-demo-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.512.b09-1.2.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:95609.json"}},{"package":{"name":"java-1.8.0-openjdk-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.512.b09-1.2.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:95609.json"}},{"package":{"name":"java-1.8.0-openjdk-devel-fastdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-devel-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.512.b09-1.2.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:95609.json"}},{"package":{"name":"java-1.8.0-openjdk-devel-slowdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-devel-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.512.b09-1.2.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:95609.json"}},{"package":{"name":"java-1.8.0-openjdk-fastdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.512.b09-1.2.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:95609.json"}},{"package":{"name":"java-1.8.0-openjdk-headless","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-headless"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.512.b09-1.2.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:95609.json"}},{"package":{"name":"java-1.8.0-openjdk-headless-fastdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-headless-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.512.b09-1.2.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:95609.json"}},{"package":{"name":"java-1.8.0-openjdk-headless-slowdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-headless-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.512.b09-1.2.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:95609.json"}},{"package":{"name":"java-1.8.0-openjdk-javadoc","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-javadoc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.512.b09-1.2.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:95609.json"}},{"package":{"name":"java-1.8.0-openjdk-javadoc-zip","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-javadoc-zip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.512.b09-1.2.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:95609.json"}},{"package":{"name":"java-1.8.0-openjdk-slowdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.512.b09-1.2.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:95609.json"}},{"package":{"name":"java-1.8.0-openjdk-src","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-src"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.512.b09-1.2.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:95609.json"}},{"package":{"name":"java-1.8.0-openjdk-src-fastdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-src-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.512.b09-1.2.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:95609.json"}},{"package":{"name":"java-1.8.0-openjdk-src-slowdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-src-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.512.b09-1.2.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:95609.json"}}],"schema_version":"1.9.2"}