Summary
The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.
Security Fix(es):
* JDK: Enhance crypto algorithm support (CVE-2026-22007)
* JDK: Improve Kerberos credentialing (CVE-2026-22013)
* JDK: Enhance Path Factories Redux (CVE-2026-22016)
* JDK: Enhance Zip file reading (CVE-2026-22018)
* JDK: Enhance certificate chain validation (CVE-2026-22021)
* JDK: Updating FreeType 2.14.1 (CVE-2026-23865)
* JDK: Enhance TLS connection handling (CVE-2026-34282)
* JDK: Enhance key generation (CVE-2026-34268)
Bug Fix(es):
* When copying files, OpenJDK 21 prefers to use the copy_file_range native function for performance reasons, only falling back to sendfile when this fails. However, in previous OpenJDK 21 releases, a response of EOPNOTSUPP (operation not supported) did not cause the JDK to fall back to sendfile. This is rectified in this release. (AlmaLinux-169617, AlmaLinux-169951, AlmaLinux-169952, AlmaLinux-169942, AlmaLinux-169953, AlmaLinux-169945)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 69
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 10 | java-21-openjdk | 1:21.0.11.0.10-2.el10_2.alma.1 |
| AlmaLinux · 10 | java-21-openjdk-demo | 1:21.0.11.0.10-2.el10_2.alma.1 |
| AlmaLinux · 10 | java-21-openjdk-demo-fastdebug | 1:21.0.11.0.10-2.el10_2.alma.1 |
| AlmaLinux · 10 | java-21-openjdk-demo-slowdebug | 1:21.0.11.0.10-2.el10_2.alma.1 |
| AlmaLinux · 10 | java-21-openjdk-devel | 1:21.0.11.0.10-2.el10_2.alma.1 |
| AlmaLinux · 10 | java-21-openjdk-devel-fastdebug | 1:21.0.11.0.10-2.el10_2.alma.1 |
| AlmaLinux · 10 | java-21-openjdk-devel-slowdebug | 1:21.0.11.0.10-2.el10_2.alma.1 |
| AlmaLinux · 10 | java-21-openjdk-fastdebug | 1:21.0.11.0.10-2.el10_2.alma.1 |
| AlmaLinux · 10 | java-21-openjdk-headless | 1:21.0.11.0.10-2.el10_2.alma.1 |
| AlmaLinux · 10 | java-21-openjdk-headless-fastdebug | 1:21.0.11.0.10-2.el10_2.alma.1 |
| AlmaLinux · 10 | java-21-openjdk-headless-slowdebug | 1:21.0.11.0.10-2.el10_2.alma.1 |
| AlmaLinux · 10 | java-21-openjdk-javadoc | 1:21.0.11.0.10-2.el10_2.alma.1 |
| AlmaLinux · 10 | java-21-openjdk-javadoc-zip | 1:21.0.11.0.10-2.el10_2.alma.1 |
| AlmaLinux · 10 | java-21-openjdk-jmods | 1:21.0.11.0.10-2.el10_2.alma.1 |
| AlmaLinux · 10 | java-21-openjdk-jmods-fastdebug | 1:21.0.11.0.10-2.el10_2.alma.1 |
| AlmaLinux · 10 | java-21-openjdk-jmods-slowdebug | 1:21.0.11.0.10-2.el10_2.alma.1 |
| AlmaLinux · 10 | java-21-openjdk-slowdebug | 1:21.0.11.0.10-2.el10_2.alma.1 |
| AlmaLinux · 10 | java-21-openjdk-src | 1:21.0.11.0.10-2.el10_2.alma.1 |
| AlmaLinux · 10 | java-21-openjdk-src-fastdebug | 1:21.0.11.0.10-2.el10_2.alma.1 |
| AlmaLinux · 10 | java-21-openjdk-src-slowdebug | 1:21.0.11.0.10-2.el10_2.alma.1 |
| AlmaLinux · 10 | java-21-openjdk-static-libs | 1:21.0.11.0.10-2.el10_2.alma.1 |
| AlmaLinux · 10 | java-21-openjdk-static-libs-fastdebug | 1:21.0.11.0.10-2.el10_2.alma.1 |
| AlmaLinux · 10 | java-21-openjdk-static-libs-slowdebug | 1:21.0.11.0.10-2.el10_2.alma.1 |
| AlmaLinux · 8 | java-21-openjdk | 1:21.0.11.0.10-1.el8 |
| AlmaLinux · 8 | java-21-openjdk-demo | 1:21.0.11.0.10-1.el8 |
| AlmaLinux · 8 | java-21-openjdk-demo-fastdebug | 1:21.0.11.0.10-1.el8 |
| AlmaLinux · 8 | java-21-openjdk-demo-slowdebug | 1:21.0.11.0.10-1.el8 |
| AlmaLinux · 8 | java-21-openjdk-devel | 1:21.0.11.0.10-1.el8 |
| AlmaLinux · 8 | java-21-openjdk-devel-fastdebug | 1:21.0.11.0.10-1.el8 |
| AlmaLinux · 8 | java-21-openjdk-devel-slowdebug | 1:21.0.11.0.10-1.el8 |
| AlmaLinux · 8 | java-21-openjdk-fastdebug | 1:21.0.11.0.10-1.el8 |
| AlmaLinux · 8 | java-21-openjdk-headless | 1:21.0.11.0.10-1.el8 |
| AlmaLinux · 8 | java-21-openjdk-headless-fastdebug | 1:21.0.11.0.10-1.el8 |
| AlmaLinux · 8 | java-21-openjdk-headless-slowdebug | 1:21.0.11.0.10-1.el8 |
| AlmaLinux · 8 | java-21-openjdk-javadoc | 1:21.0.11.0.10-1.el8 |
| AlmaLinux · 8 | java-21-openjdk-javadoc-zip | 1:21.0.11.0.10-1.el8 |
| AlmaLinux · 8 | java-21-openjdk-jmods | 1:21.0.11.0.10-1.el8 |
| AlmaLinux · 8 | java-21-openjdk-jmods-fastdebug | 1:21.0.11.0.10-1.el8 |
| AlmaLinux · 8 | java-21-openjdk-jmods-slowdebug | 1:21.0.11.0.10-1.el8 |
| AlmaLinux · 8 | java-21-openjdk-slowdebug | 1:21.0.11.0.10-1.el8 |
| AlmaLinux · 8 | java-21-openjdk-src | 1:21.0.11.0.10-1.el8 |
| AlmaLinux · 8 | java-21-openjdk-src-fastdebug | 1:21.0.11.0.10-1.el8 |
| AlmaLinux · 8 | java-21-openjdk-src-slowdebug | 1:21.0.11.0.10-1.el8 |
| AlmaLinux · 8 | java-21-openjdk-static-libs | 1:21.0.11.0.10-1.el8 |
| AlmaLinux · 8 | java-21-openjdk-static-libs-fastdebug | 1:21.0.11.0.10-1.el8 |
| AlmaLinux · 8 | java-21-openjdk-static-libs-slowdebug | 1:21.0.11.0.10-1.el8 |
| AlmaLinux · 9 | java-21-openjdk | 1:21.0.11.0.10-2.el9.alma.1 |
| AlmaLinux · 9 | java-21-openjdk-demo | 1:21.0.11.0.10-2.el9.alma.1 |
| AlmaLinux · 9 | java-21-openjdk-demo-fastdebug | 1:21.0.11.0.10-2.el9.alma.1 |
| AlmaLinux · 9 | java-21-openjdk-demo-slowdebug | 1:21.0.11.0.10-2.el9.alma.1 |
| AlmaLinux · 9 | java-21-openjdk-devel | 1:21.0.11.0.10-2.el9.alma.1 |
| AlmaLinux · 9 | java-21-openjdk-devel-fastdebug | 1:21.0.11.0.10-2.el9.alma.1 |
| AlmaLinux · 9 | java-21-openjdk-devel-slowdebug | 1:21.0.11.0.10-2.el9.alma.1 |
| AlmaLinux · 9 | java-21-openjdk-fastdebug | 1:21.0.11.0.10-2.el9.alma.1 |
| AlmaLinux · 9 | java-21-openjdk-headless | 1:21.0.11.0.10-2.el9.alma.1 |
| AlmaLinux · 9 | java-21-openjdk-headless-fastdebug | 1:21.0.11.0.10-2.el9.alma.1 |
| AlmaLinux · 9 | java-21-openjdk-headless-slowdebug | 1:21.0.11.0.10-2.el9.alma.1 |
| AlmaLinux · 9 | java-21-openjdk-javadoc | 1:21.0.11.0.10-2.el9.alma.1 |
| AlmaLinux · 9 | java-21-openjdk-javadoc-zip | 1:21.0.11.0.10-2.el9.alma.1 |
| AlmaLinux · 9 | java-21-openjdk-jmods | 1:21.0.11.0.10-2.el9.alma.1 |
| AlmaLinux · 9 | java-21-openjdk-jmods-fastdebug | 1:21.0.11.0.10-2.el9.alma.1 |
| AlmaLinux · 9 | java-21-openjdk-jmods-slowdebug | 1:21.0.11.0.10-2.el9.alma.1 |
| AlmaLinux · 9 | java-21-openjdk-slowdebug | 1:21.0.11.0.10-2.el9.alma.1 |
| AlmaLinux · 9 | java-21-openjdk-src | 1:21.0.11.0.10-2.el9.alma.1 |
| AlmaLinux · 9 | java-21-openjdk-src-fastdebug | 1:21.0.11.0.10-2.el9.alma.1 |
| AlmaLinux · 9 | java-21-openjdk-src-slowdebug | 1:21.0.11.0.10-2.el9.alma.1 |
| AlmaLinux · 9 | java-21-openjdk-static-libs | 1:21.0.11.0.10-2.el9.alma.1 |
| AlmaLinux · 9 | java-21-openjdk-static-libs-fastdebug | 1:21.0.11.0.10-2.el9.alma.1 |
| AlmaLinux · 9 | java-21-openjdk-static-libs-slowdebug | 1:21.0.11.0.10-2.el9.alma.1 |
Vulnerabilities 14
-
High 8.2
Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBTo…
-
High 7.6
LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.6.36 through 1.6.55, an out-of-bounds read and write exists in libpng's ARM/AArch64 Neon-optimized palett…
-
High 7.5CVE-2026-22016 Public exploit
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
High 7.5
LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.2.1 through 1.6.55, `png_set_tRNS` and `png_set_PLTE` each alias a heap-allocated buffer between `png_str…
-
High 7.5
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
High 7.1
LIBPNG has an out-of-bounds read in png_image_read_composite
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's simplified API allows reading up to 1012 bytes beyond …
-
Medium 6.8
LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.26 to 1.6.53, there is an integer truncation in the libpng simplified write API functions png_write_image_16bi…
-
Medium 6.1
LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix)
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function png_image_finish_read whe…
-
Medium 5.3CVE-2026-22013 Public exploit
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
Medium 5.3
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
Medium 5.3
An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.1…
-
Low 3.7CVE-2026-22018 Public exploit
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
Low 2.9CVE-2026-22007 Public exploit
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
Low 2.9
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
References
-
report
https://access.redhat.com/security/cve/CVE-2026-22007
-
report
https://access.redhat.com/security/cve/CVE-2026-22013
-
report
https://access.redhat.com/security/cve/CVE-2026-22016
-
report
https://access.redhat.com/security/cve/CVE-2026-22018
-
report
https://access.redhat.com/security/cve/CVE-2026-22021
-
report
https://access.redhat.com/security/cve/CVE-2026-23865
-
report
https://access.redhat.com/security/cve/CVE-2026-34268
-
report
https://access.redhat.com/security/cve/CVE-2026-34282
-
advisory
https://errata.almalinux.org/10/ALSA-2026-9689.html
-
advisory
https://errata.almalinux.org/8/ALSA-2026-9689.html
-
advisory
https://errata.almalinux.org/9/ALSA-2026-9689.html
-
report
https://www.redhat.com/security/data/cve/CVE-2025-66293.html
-
report
https://www.redhat.com/security/data/cve/CVE-2026-22695.html
-
report
https://www.redhat.com/security/data/cve/CVE-2026-22801.html
-
report
https://www.redhat.com/security/data/cve/CVE-2026-26740.html
-
report
https://www.redhat.com/security/data/cve/CVE-2026-33416.html
-
report
https://www.redhat.com/security/data/cve/CVE-2026-33636.html