Release java-21-openjdk-21.0.13.0.9-1.2.el10 ALSA-2026:90504

Chiusa
#4,053 0 commenti 0 reazioni 0 assegnatari Vedi su GitHub

Nessuno ha ancora preso questa issue.

Valutazione

Difficoltà
5/5
Tempo stimato
Più di una settimana
Idoneità per principianti
15/100
Tipo di issue
Bug
Chiarezza
Abbastanza chiara
Stato di attività
Attiva
Stack tecnologico
java, linux
Ambito
release

Direzione di ricerca

The issue lists the OpenJDK 21 package builds and the security fixes for AlmaLinux 10, but names no repository files, tests, or build entry points. Start by locating the package update and release process for AlmaLinux 10; done means the listed affected packages are updated to the specified version across the stated architectures.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Descrizione

java-21-openjdk security update for AlmaLinux 10
Severity: Important
Description
The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

  • JDK: Enhance PKCS5 padding (CVE-2026-83374)
  • JDK: Enhance TLS certificate handling (CVE-2026-83376)
  • JDK: Improve C2 loop transformations (CVE-2026-83378)
  • JDK: Enhance LDAP logins (CVE-2026-83380)
  • JDK: Enhance SASL Authentication (CVE-2026-83381)
  • JDK: Enhance WebRowSets (CVE-2026-83387)
  • JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
  • JDK: Enhance XML Processing (CVE-2026-83400)
  • JDK: Enhance XPath Expressions (CVE-2026-87290)
  • JDK: Enhance HTTP Server (CVE-2026-87291)
  • JDK: Enhance Network Clients (CVE-2026-87292)
  • JDK: Enhance Certificate Name Checks (CVE-2026-87294)
  • JDK: Enhance Template Handling (CVE-2026-87367)
  • JDK: Enhance HTTP Client (CVE-2026-91332)
  • JDK: Improve ciphertext handling (CVE-2026-91333)
  • JDK: Enhance JPEG loading (CVE-2026-91334)
  • JDK: Enhance Image Handling (CVE-2026-91335)
  • JDK: Enhance TLS handshakes (CVE-2026-91373)
  • JDK: Enhance jstatd (CVE-2026-91374)
  • JDK: Enhance jmod handling (CVE-2026-91375)
  • JDK: Enhance JShell (CVE-2026-91379)
  • JDK: Enhance Preferences (CVE-2026-91380)
  • JDK: Enhance HTTP client caching (CVE-2026-91394)
  • JDK: Enhance diagnostic sessions (CVE-2026-91397)
  • JDK: Enhance SOCKS5 support (CVE-2026-91398)
  • JDK: Enhance MIDI file handling (CVE-2026-91400)
  • JDK: Enhance zipfs (CVE-2026-91410)
  • JDK: Enhance font rendering (CVE-2026-91415)
  • JDK: Enhance GIF loading (CVE-2026-91418)
  • JDK: Enhance HTTP server parsing (CVE-2026-91451)
  • JDK: Enhance HTTP server (CVE-2026-91452)
  • JDK: Improve HTTP headers (CVE-2026-91453)
  • JDK: Enhance TLS Extensions (CVE-2026-91461)
  • JDK: Enhance krb5 tokens (CVE-2026-91462)
  • JDK: Enhance krb5 client (CVE-2026-91463)
  • JDK: Enhance Kerberos validation (CVE-2026-91464)
  • JDK: Enhance C2 comparisons (CVE-2026-91487)
  • JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Affected packages:
java-21-openjdk-21.0.13.0.9-1.2.el10.x86_64
java-21-openjdk-demo-21.0.13.0.9-1.2.el10.x86_64
java-21-openjdk-devel-21.0.13.0.9-1.2.el10.x86_64
java-21-openjdk-headless-21.0.13.0.9-1.2.el10.x86_64
java-21-openjdk-javadoc-21.0.13.0.9-1.2.el10.x86_64
java-21-openjdk-javadoc-zip-21.0.13.0.9-1.2.el10.x86_64
java-21-openjdk-jmods-21.0.13.0.9-1.2.el10.x86_64
java-21-openjdk-src-21.0.13.0.9-1.2.el10.x86_64
java-21-openjdk-static-libs-21.0.13.0.9-1.2.el10.x86_64
java-21-openjdk-21.0.13.0.9-1.2.el10.s390x
java-21-openjdk-demo-21.0.13.0.9-1.2.el10.s390x
java-21-openjdk-devel-21.0.13.0.9-1.2.el10.s390x
java-21-openjdk-headless-21.0.13.0.9-1.2.el10.s390x
java-21-openjdk-javadoc-21.0.13.0.9-1.2.el10.s390x
java-21-openjdk-javadoc-zip-21.0.13.0.9-1.2.el10.s390x
java-21-openjdk-jmods-21.0.13.0.9-1.2.el10.s390x
java-21-openjdk-src-21.0.13.0.9-1.2.el10.s390x
java-21-openjdk-static-libs-21.0.13.0.9-1.2.el10.s390x
java-21-openjdk-21.0.13.0.9-1.2.el10.ppc64le
java-21-openjdk-demo-21.0.13.0.9-1.2.el10.ppc64le
java-21-openjdk-devel-21.0.13.0.9-1.2.el10.ppc64le
java-21-openjdk-headless-21.0.13.0.9-1.2.el10.ppc64le
java-21-openjdk-javadoc-21.0.13.0.9-1.2.el10.ppc64le
java-21-openjdk-javadoc-zip-21.0.13.0.9-1.2.el10.ppc64le
java-21-openjdk-jmods-21.0.13.0.9-1.2.el10.ppc64le
java-21-openjdk-src-21.0.13.0.9-1.2.el10.ppc64le
java-21-openjdk-static-libs-21.0.13.0.9-1.2.el10.ppc64le
java-21-openjdk-21.0.13.0.9-1.2.el10.aarch64
java-21-openjdk-demo-21.0.13.0.9-1.2.el10.aarch64
java-21-openjdk-devel-21.0.13.0.9-1.2.el10.aarch64
java-21-openjdk-headless-21.0.13.0.9-1.2.el10.aarch64
java-21-openjdk-javadoc-21.0.13.0.9-1.2.el10.aarch64
java-21-openjdk-javadoc-zip-21.0.13.0.9-1.2.el10.aarch64
java-21-openjdk-jmods-21.0.13.0.9-1.2.el10.aarch64
java-21-openjdk-src-21.0.13.0.9-1.2.el10.aarch64
java-21-openjdk-static-libs-21.0.13.0.9-1.2.el10.aarch64
java-21-openjdk-demo-fastdebug-21.0.13.0.9-1.2.el10.x86_64
java-21-openjdk-demo-slowdebug-21.0.13.0.9-1.2.el10.x86_64
java-21-openjdk-devel-fastdebug-21.0.13.0.9-1.2.el10.x86_64
java-21-openjdk-devel-slowdebug-21.0.13.0.9-1.2.el10.x86_64
java-21-openjdk-fastdebug-21.0.13.0.9-1.2.el10.x86_64
java-21-openjdk-headless-fastdebug-21.0.13.0.9-1.2.el10.x86_64
java-21-openjdk-headless-slowdebug-21.0.13.0.9-1.2.el10.x86_64
java-21-openjdk-jmods-fastdebug-21.0.13.0.9-1.2.el10.x86_64
java-21-openjdk-jmods-slowdebug-21.0.13.0.9-1.2.el10.x86_64
java-21-openjdk-slowdebug-21.0.13.0.9-1.2.el10.x86_64
java-21-openjdk-src-fastdebug-21.0.13.0.9-1.2.el10.x86_64
java-21-openjdk-src-slowdebug-21.0.13.0.9-1.2.el10.x86_64
java-21-openjdk-static-libs-fastdebug-21.0.13.0.9-1.2.el10.x86_64
java-21-openjdk-static-libs-slowdebug-21.0.13.0.9-1.2.el10.x86_64
java-21-openjdk-demo-fastdebug-21.0.13.0.9-1.2.el10.ppc64le
java-21-openjdk-demo-slowdebug-21.0.13.0.9-1.2.el10.ppc64le
java-21-openjdk-devel-fastdebug-21.0.13.0.9-1.2.el10.ppc64le
java-21-openjdk-devel-slowdebug-21.0.13.0.9-1.2.el10.ppc64le
java-21-openjdk-fastdebug-21.0.13.0.9-1.2.el10.ppc64le
java-21-openjdk-headless-fastdebug-21.0.13.0.9-1.2.el10.ppc64le
java-21-openjdk-headless-slowdebug-21.0.13.0.9-1.2.el10.ppc64le
java-21-openjdk-jmods-fastdebug-21.0.13.0.9-1.2.el10.ppc64le
java-21-openjdk-jmods-slowdebug-21.0.13.0.9-1.2.el10.ppc64le
java-21-openjdk-slowdebug-21.0.13.0.9-1.2.el10.ppc64le
java-21-openjdk-src-fastdebug-21.0.13.0.9-1.2.el10.ppc64le
java-21-openjdk-src-slowdebug-21.0.13.0.9-1.2.el10.ppc64le
java-21-openjdk-static-libs-fastdebug-21.0.13.0.9-1.2.el10.ppc64le
java-21-openjdk-static-libs-slowdebug-21.0.13.0.9-1.2.el10.ppc64le
java-21-openjdk-demo-fastdebug-21.0.13.0.9-1.2.el10.aarch64
java-21-openjdk-demo-slowdebug-21.0.13.0.9-1.2.el10.aarch64
java-21-openjdk-devel-fastdebug-21.0.13.0.9-1.2.el10.aarch64
java-21-openjdk-devel-slowdebug-21.0.13.0.9-1.2.el10.aarch64
java-21-openjdk-fastdebug-21.0.13.0.9-1.2.el10.aarch64
java-21-openjdk-headless-fastdebug-21.0.13.0.9-1.2.el10.aarch64
java-21-openjdk-headless-slowdebug-21.0.13.0.9-1.2.el10.aarch64
java-21-openjdk-jmods-fastdebug-21.0.13.0.9-1.2.el10.aarch64
java-21-openjdk-jmods-slowdebug-21.0.13.0.9-1.2.el10.aarch64
java-21-openjdk-slowdebug-21.0.13.0.9-1.2.el10.aarch64
java-21-openjdk-src-fastdebug-21.0.13.0.9-1.2.el10.aarch64
java-21-openjdk-src-slowdebug-21.0.13.0.9-1.2.el10.aarch64
java-21-openjdk-static-libs-fastdebug-21.0.13.0.9-1.2.el10.aarch64
java-21-openjdk-static-libs-slowdebug-21.0.13.0.9-1.2.el10.aarch64
java-21-openjdk-demo-slowdebug-21.0.13.0.9-1.2.el10.s390x
java-21-openjdk-devel-slowdebug-21.0.13.0.9-1.2.el10.s390x
java-21-openjdk-headless-slowdebug-21.0.13.0.9-1.2.el10.s390x
java-21-openjdk-jmods-slowdebug-21.0.13.0.9-1.2.el10.s390x
java-21-openjdk-slowdebug-21.0.13.0.9-1.2.el10.s390x
java-21-openjdk-src-slowdebug-21.0.13.0.9-1.2.el10.s390x
java-21-openjdk-static-libs-slowdebug-21.0.13.0.9-1.2.el10.s390x
java-21-openjdk-21.0.13.0.9-1.2.el10.x86_64_v2
java-21-openjdk-demo-21.0.13.0.9-1.2.el10.x86_64_v2
java-21-openjdk-devel-21.0.13.0.9-1.2.el10.x86_64_v2
java-21-openjdk-headless-21.0.13.0.9-1.2.el10.x86_64_v2
java-21-openjdk-javadoc-21.0.13.0.9-1.2.el10.x86_64_v2
java-21-openjdk-javadoc-zip-21.0.13.0.9-1.2.el10.x86_64_v2
java-21-openjdk-jmods-21.0.13.0.9-1.2.el10.x86_64_v2
java-21-openjdk-src-21.0.13.0.9-1.2.el10.x86_64_v2
java-21-openjdk-static-libs-21.0.13.0.9-1.2.el10.x86_64_v2
java-21-openjdk-demo-fastdebug-21.0.13.0.9-1.2.el10.x86_64_v2
java-21-openjdk-demo-slowdebug-21.0.13.0.9-1.2.el10.x86_64_v2
java-21-openjdk-devel-fastdebug-21.0.13.0.9-1.2.el10.x86_64_v2
java-21-openjdk-devel-slowdebug-21.0.13.0.9-1.2.el10.x86_64_v2
java-21-openjdk-fastdebug-21.0.13.0.9-1.2.el10.x86_64_v2
java-21-openjdk-headless-fastdebug-21.0.13.0.9-1.2.el10.x86_64_v2
java-21-openjdk-headless-slowdebug-21.0.13.0.9-1.2.el10.x86_64_v2
java-21-openjdk-jmods-fastdebug-21.0.13.0.9-1.2.el10.x86_64_v2
java-21-openjdk-jmods-slowdebug-21.0.13.0.9-1.2.el10.x86_64_v2
java-21-openjdk-slowdebug-21.0.13.0.9-1.2.el10.x86_64_v2
java-21-openjdk-src-fastdebug-21.0.13.0.9-1.2.el10.x86_64_v2
java-21-openjdk-src-slowdebug-21.0.13.0.9-1.2.el10.x86_64_v2
java-21-openjdk-static-libs-fastdebug-21.0.13.0.9-1.2.el10.x86_64_v2
java-21-openjdk-static-libs-slowdebug-21.0.13.0.9-1.2.el10.x86_64_v2

Lingua principale
Nessun dato sulla lingua
Stelle
2
Fork
0
Metriche di merge delle PR
Nessuna PR unita negli ultimi 30g

Preparare l'ambiente

Come iniziare

  1. Leggi tutta la issue e poi la guida ai contributi del progetto.
  2. Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
  3. Fai un fork del repository e lavora su un branch.
  4. Apri una pull request che faccia riferimento al numero della issue.

Altre issue di AlmaLinux/updates

Tutte le issue di AlmaLinux/updates

Issue simili

Altre issue su Release

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.