ALSA-2026:0928
ALSA-2026:0928 · Important: java-21-openjdk security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * JDK: Improve JMX connections (CVE-2026-21925) * JDK: Improve HttpServer Request handling (CVE-2026-21933) * JDK: Enhance Certificate Checking (CVE-2026-21945) * libpng: LIBPNG buffer overflow (CVE-2025-64720) * libpng: LIBPNG heap buffer overflow (CVE-2025-65018) Bug Fix(es): * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142860, AlmaLinux-142876, AlmaLinux-142877, AlmaLinux-142878, AlmaLinux-142879, AlmaLinux-142880) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fix available
- Published
- Updated
Stack: system
Affected products and versions
java-21-openjdk AlmaLinux:10
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el10.alma.1
Update to 1:21.0.10.0.7-1.el10.alma.1
java-21-openjdk-demo AlmaLinux:10
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el10.alma.1
Update to 1:21.0.10.0.7-1.el10.alma.1
java-21-openjdk-demo-fastdebug AlmaLinux:10
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el10.alma.1
Update to 1:21.0.10.0.7-1.el10.alma.1
java-21-openjdk-demo-slowdebug AlmaLinux:10
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el10.alma.1
Update to 1:21.0.10.0.7-1.el10.alma.1
java-21-openjdk-devel AlmaLinux:10
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el10.alma.1
Update to 1:21.0.10.0.7-1.el10.alma.1
java-21-openjdk-devel-fastdebug AlmaLinux:10
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el10.alma.1
Update to 1:21.0.10.0.7-1.el10.alma.1
java-21-openjdk-devel-slowdebug AlmaLinux:10
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el10.alma.1
Update to 1:21.0.10.0.7-1.el10.alma.1
java-21-openjdk-fastdebug AlmaLinux:10
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el10.alma.1
Update to 1:21.0.10.0.7-1.el10.alma.1
java-21-openjdk-headless AlmaLinux:10
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el10.alma.1
Update to 1:21.0.10.0.7-1.el10.alma.1
java-21-openjdk-headless-fastdebug AlmaLinux:10
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el10.alma.1
Update to 1:21.0.10.0.7-1.el10.alma.1
java-21-openjdk-headless-slowdebug AlmaLinux:10
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el10.alma.1
Update to 1:21.0.10.0.7-1.el10.alma.1
java-21-openjdk-javadoc AlmaLinux:10
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el10.alma.1
Update to 1:21.0.10.0.7-1.el10.alma.1
java-21-openjdk-javadoc-zip AlmaLinux:10
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el10.alma.1
Update to 1:21.0.10.0.7-1.el10.alma.1
java-21-openjdk-jmods AlmaLinux:10
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el10.alma.1
Update to 1:21.0.10.0.7-1.el10.alma.1
java-21-openjdk-jmods-fastdebug AlmaLinux:10
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el10.alma.1
Update to 1:21.0.10.0.7-1.el10.alma.1
java-21-openjdk-jmods-slowdebug AlmaLinux:10
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el10.alma.1
Update to 1:21.0.10.0.7-1.el10.alma.1
java-21-openjdk-slowdebug AlmaLinux:10
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el10.alma.1
Update to 1:21.0.10.0.7-1.el10.alma.1
java-21-openjdk-src AlmaLinux:10
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el10.alma.1
Update to 1:21.0.10.0.7-1.el10.alma.1
java-21-openjdk-src-fastdebug AlmaLinux:10
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el10.alma.1
Update to 1:21.0.10.0.7-1.el10.alma.1
java-21-openjdk-src-slowdebug AlmaLinux:10
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el10.alma.1
Update to 1:21.0.10.0.7-1.el10.alma.1
java-21-openjdk-static-libs AlmaLinux:10
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el10.alma.1
Update to 1:21.0.10.0.7-1.el10.alma.1
java-21-openjdk-static-libs-fastdebug AlmaLinux:10
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el10.alma.1
Update to 1:21.0.10.0.7-1.el10.alma.1
java-21-openjdk-static-libs-slowdebug AlmaLinux:10
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el10.alma.1
Update to 1:21.0.10.0.7-1.el10.alma.1
java-21-openjdk AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1:21.0.10.0.7-1.el8
Update to 1:21.0.10.0.7-1.el8
Original sources
- https://access.redhat.com/errata/RHSA-2026:0928
- https://access.redhat.com/security/cve/CVE-2025-64720
- https://access.redhat.com/security/cve/CVE-2025-65018
- https://access.redhat.com/security/cve/CVE-2026-21925
- https://access.redhat.com/security/cve/CVE-2026-21933
- https://access.redhat.com/security/cve/CVE-2026-21945
- https://errata.almalinux.org/10/ALSA-2026-0928.html
- https://errata.almalinux.org/8/ALSA-2026-0928.html
- https://errata.almalinux.org/9/ALSA-2026-0928.html
- https://osv.dev/vulnerability/ALSA-2026:0928