Вернуться к предупреждениям о безопасности

Java-17-Openjdk Security Update — AlmaLinux 8 (ALSA-2026:9686)

ALSA-2026:9686 updates java-17-openjdk on AlmaLinux 8 to 17.0.19.0.10-1, fixing eight CVEs (CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-23865, CVE-2026-34282, CVE-2026-34268) — mostly low-severity information-disclosure and crypto-enhancement items (aggregate CVSS 2.9, CWE-200 among them). Low urgency, but keep Java runtimes current: dnf update java-17-openjdk.

High 2.9 CVSS
AlmaLinux 8

Что это значит по лицензии SharedLicense

The batch is dominated by information-disclosure and crypto-hardening issues — individually minor, but OpenJDK runs untrusted application code, so disclosure flaws can leak secrets from other code running in the same JVM.

aarch64 java-17-openjdk-jmods-fastdebug-17.0.19.0.10-1.el8.aarch64.rpm 02dcf7e38994104dcf26977ba765e3644e1b23aa34cc981cb30670958e588105 aarch64 java-17-openjdk-static-libs-17.0.19.0.10-1.el8.aarch64.rpm 04f0b1bfafca1687dbc808e2eca4f8154ec56782d2029873a30f54e229622e22 aarch64 java-17-openjdk-jmods-17.0.19.0.10-1.el8.aarch64.rpm 06b858e34d5aa57798b3a7e561ccb8c223536b3de6847afc7e98fdfaee5e1635 aarch64 java-17-openjdk-javadoc-17.0.19.0.10-1.el8.aarch64.rpm 0a761e2d7262e9103bfda725156ea4d272fc37a5541a2f007593739181df0730 aarch64 java-17-openjdk-demo-17.0.19.0.10-1.el8.aarch64.rpm 0c32109653966b32c895541e266e1be3c437c75f1652a5ca113d1b462ff8c26a aarch64 java-17-openjdk-static-libs-fastdebug-17.0.19.0.10-1.el8.aarch64.rpm 13ccb7af56a40a0f6c08690a948d67c4cf78e472a4d0481bce2ffd59fd16e1aa aarch64 java-17-openjdk-devel-fastdebug-17.0.19.0.10-1.el8.aarch64.rpm 2438e370e5d5b52647758f6bed4cdca2755a9d8035614151b24936040b19735e aarch64 java-17-openjdk-devel-slowdebug-17.0.19.0.10-1.el8.aarch64.rpm 2b656510a9d4e299102d971fbe1c4354747d81f490b948c4a7b6d0eeee29ee71 aarch64 java-17-openjdk-headless-slowdebug-17.0.19.0.10-1.el8.aarch64.rpm 350d1c5b3312422d1c915050623027836884fd3bf4ddb3dd01e4b35bc7ef76b9 aarch64 java-17-openjdk-17.0.19.0.10-1.el8.aarch64.rpm 3636f13564418001884ab4ab8704eb41ed8cf2d8269db3f11d7d79c2cb850998 aarch64 java-17-openjdk-slowdebug-17.0.19.0.10-1.el8.aarch64.rpm 38f2b7cf242ce9e79d90dd76111a817b8f7697ed799a50746cceb020cab53035 aarch64 java-17-openjdk-src-17.0.19.0.10-1.el8.aarch64.rpm 61a0976fabc5621f75887557645f06c4964a119e6715b0b09087c9182b51f641 aarch64 java-17-openjdk-static-libs-slowdebug-17.0.19.0.10-1.el8.aarch64.rpm 6a68b44e727bf80f37ddedb09169db2ee9ce009b9e454933a23a8b22c7d5db16 aarch64 java-17-openjdk-headless-fastdebug-17.0.19.0.10-1.el8.aarch64.rpm 79fbf353f30675ed1f3b7daf25532d121fbdd32e679ef2300ee810f028e84386 aarch64 java-17-openjdk-demo-slowdebug-17.0.19.0.10-1.el8.aarch64.rpm 7d79da98544f6a927e19190abf3b16ee313d7ef5fd39ae43fb819b0d8dcb5564 aarch64 java-17-openjdk-src-slowdebug-17.0.19.0.10-1.el8.aarch64.rpm 9ca3b74212eab27d3328474255d7fc2a0c4f5101086449baef18e7897a73b9a8 aarch64 java-17-openjdk-fastdebug-17.0.19.0.10-1.el8.aarch64.rpm a236f41b8b38a10b00c1f23d675c3b02e98b7cd502d541362fa3e3697a3aa030 aarch64 java-17-openjdk-javadoc-zip-17.0.19.0.10-1.el8.aarch64.rpm ad4f931c6b9674264123cb3c813a43f33c32df7bcd689c90828009c46ff06f90 aarch64 java-17-openjdk-src-fastdebug-17.0.19.0.10-1.el8.aarch64.rpm c47d1218f8678b8c4860626dcea45c53e1ec1ccce19a5264551527d9784b0a9b aarch64 java-17-openjdk-devel-17.0.19.0.10-1.el8.aarch64.rpm cf2c962988acd47057b9531e2636418853e55c0ccb721688f915a335a66b3343 aarch64 java-17-openjdk-jmods-slowdebug-17.0.19.0.10-1.el8.aarch64.rpm db64dd0d7fdb2910fbbc07b9accd566d6f7b8358ac39e3b2d3e6987f8501b4ea aarch64 java-17-openjdk-demo-fastdebug-17.0.19.0.10-1.el8.aarch64.rpm e8cfd33ebe2ccd4e7035b0db602f1b5f0ceae216a75b346fd687c6079710a78b aarch64 java-17-openjdk-headless-17.0.19.0.10-1.el8.aarch64.rpm fc4d0066403e2deea8b480787f57896cfeaf60c7f76e6eb39f1771c796b8a917 ppc64le java-17-openjdk-src-17.0.19.0.10-1.el8.ppc64le.rpm 0a6e113d0487df9228b680d0fc81fcd8d985488826195c0d030bb2eb152297c8 ppc64le java-17-openjdk-static-libs-slowdebug-17.0.19.0.10-1.el8.ppc64le.rpm 0d7d57530bc8466326c475c7dac709de09ae6826b019fa9c47a8367bd83ea7a6 ppc64le java-17-openjdk-jmods-17.0.19.0.10-1.el8.ppc64le.rpm 0ea64ad3a8226251b552f76ce24c498d33aa2a6dbe6a098e81cf3f36ee88e9ca ppc64le java-17-openjdk-static-libs-fastdebug-17.0.19.0.10-1.el8.ppc64le.rpm 3dad98a7eb239fa9f1408da3c8266aac397b23e6c0840a102423fab3b476730d ppc64le java-17-openjdk-src-fastdebug-17.0.19.0.10-1.el8.ppc64le.rpm 4dfe36dd483a81c99639171a4095e3be355c84e6c70070523ac8a85b8addfa1c ppc64le java-17-openjdk-demo-fastdebug-17.0.19.0.10-1.el8.ppc64le.rpm 4f54d7542c4c2f364cc3072f367a55bee0bc1315b61f619f08a1ce93dce4f83f ppc64le java-17-openjdk-javadoc-17.0.19.0.10-1.el8.ppc64le.rpm 51d8c1d54501f45a455dcea0dfb6d79ddebd11cb3b376d84be42191458f2c11b ppc64le java-17-openjdk-headless-17.0.19.0.10-1.el8.ppc64le.rpm 553a973b1f881ccaf0e50f844e6a25cb2da83914e122e394c5c32ef355af73af ppc64le java-17-openjdk-headless-fastdebug-17.0.19.0.10-1.el8.ppc64le.rpm 64999e3523c424c7270ae837f6f820abf71e9d3559b39ee8ba40cef724bf891c ppc64le java-17-openjdk-17.0.19.0.10-1.el8.ppc64le.rpm 6b7999a84cedc6751f3642a83f7e87a5a9dcc552e2a9a8a26867f048d682ff4d ppc64le java-17-openjdk-devel-slowdebug-17.0.19.0.10-1.el8.ppc64le.rpm 6d628eede79e4092538216130ac6d2811b675b1393cd9df51bb0d18badd287b6 ppc64le java-17-openjdk-demo-slowdebug-17.0.19.0.10-1.el8.ppc64le.rpm 8343a9ae703060d9da6418d4e18940434332a94de07145814620e7baf4a75b8d ppc64le java-17-openjdk-headless-slowdebug-17.0.19.0.10-1.el8.ppc64le.rpm 900a37ff2161d8041d4fc9f3f3867fd3b2534cf047178541bd8ff84c7c42e93d ppc64le java-17-openjdk-devel-fastdebug-17.0.19.0.10-1.el8.ppc64le.rpm 90746edbf161dacdf1fe9fc0ff8604fac5287ee9307f03926d4e1d2b5a593f5a ppc64le java-17-openjdk-javadoc-zip-17.0.19.0.10-1.el8.ppc64le.rpm 98575a2ac11814679d2a4ea2ca39b4c824cf1ed58806aa6fef9217166f7ce7bd ppc64le java-17-openjdk-jmods-fastdebug-17.0.19.0.10-1.el8.ppc64le.rpm a71ef8a80f72443cc43874a34e6613fd183fe0fed57e49477819f4725364bfe6 ppc64le java-17-openjdk-src-slowdebug-17.0.19.0.10-1.el8.ppc64le.rpm ae1f4d5d1b4a0e748adf4dcf79e4ce1a074eb689057ab986774389dfa85a5b20 ppc64le java-17-openjdk-devel-17.0.19.0.10-1.el8.ppc64le.rpm b0a20d992dd9e709a0c085fbd0da717e91699a4e6699364a4918f3a6574af960 ppc64le java-17-openjdk-fastdebug-17.0.19.0.10-1.el8.ppc64le.rpm b49259c6136d29c6beb51d5d19c55513b35a8ffa90b62c09b9fa714ca8537bac ppc64le java-17-openjdk-slowdebug-17.0.19.0.10-1.el8.ppc64le.rpm c8759dd0b4d14ebf2ff0c81ac51a8cf710552ca5c7956f18a9fe5dd73ac0c5c0 ppc64le java-17-openjdk-jmods-slowdebug-17.0.19.0.10-1.el8.ppc64le.rpm d86ff1db555d565b398fef0d72be6b5b4809e30b97f9c3b07191203df9c39c39 ppc64le java-17-openjdk-demo-17.0.19.0.10-1.el8.ppc64le.rpm ddba0c66b97397c1a869b88c33d7be48902246b96d733b0c397a258d79222f6d ppc64le java-17-openjdk-static-libs-17.0.19.0.10-1.el8.ppc64le.rpm e0ceaf03addebde8a3f4a0659ba60e4f8acd58be0e1b41f6e7555440c38b47c2 s390x java-17-openjdk-headless-17.0.19.0.10-1.el8.s390x.rpm 051ec62a29d87238cb872102871fce06bec37e79b0d649e2a9183d7b6c309daa s390x java-17-openjdk-demo-slowdebug-17.0.19.0.10-1.el8.s390x.rpm 137dedea8f054d74798c35051d06d874f77734fd1b9eca8b84623b60e3ed1ae4 s390x java-17-openjdk-devel-slowdebug-17.0.19.0.10-1.el8.s390x.rpm 15d0f1893476994274cd3cf3cebf23d0f67d8ccbf262fe85e16511cae7094b34 s390x java-17-openjdk-jmods-17.0.19.0.10-1.el8.s390x.rpm 1dcd4edc56ed8f8b38c512354b0c9826717a6db6ac2ef2d94b3e563fe898a40b s390x java-17-openjdk-src-17.0.19.0.10-1.el8.s390x.rpm 23058c31b4737d41c92611771b17830c94562a91f489ee172ceb638e522125f1 s390x java-17-openjdk-javadoc-zip-17.0.19.0.10-1.el8.s390x.rpm 24e929ce578d9a758edad6d1bcc4d576c7dbed239ecab2da3fa195a6d59c9d51 s390x java-17-openjdk-src-slowdebug-17.0.19.0.10-1.el8.s390x.rpm 2932b288d2565b200d65d3aa666635037d4491ed2aa3a75195e6b90feb0d1238 s390x java-17-openjdk-devel-17.0.19.0.10-1.el8.s390x.rpm 36bfc90519a1e29b7ed70a18e019d9fdf7247d2cf097ab59b7991b831f910211 s390x java-17-openjdk-17.0.19.0.10-1.el8.s390x.rpm 5b574ef89f56b2d25cd0d7e1833774fca1db8b25660af4bfc0dc0183a7e7b322 s390x java-17-openjdk-static-libs-17.0.19.0.10-1.el8.s390x.rpm 5e9f6944df258a6cadff629c0512174af4ad26602212d94c105bfa132a74a4ca s390x java-17-openjdk-headless-slowdebug-17.0.19.0.10-1.el8.s390x.rpm 6e459159663c913616208ddf8621134dfcd198b5c6dcf43227fd1dbe17dd9e16 s390x java-17-openjdk-javadoc-17.0.19.0.10-1.el8.s390x.rpm 6f5d0a49dda1f132b9c80da7a1a693e8eda8d66c57d4cee35d9d3bc47b0a77f9 s390x java-17-openjdk-static-libs-slowdebug-17.0.19.0.10-1.el8.s390x.rpm 7e52a1129e99c4dad8a80e50008095724fa8a42c4d4c28164025490bc455de88

Часто задаваемые вопросы

What is ALSA-2026:9686?
It is AlmaLinux's OpenJDK 17 erratum, updating java-17-openjdk to 17.0.19.0.10-1 with eight CVE fixes (CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-23865, CVE-2026-34282, CVE-2026-34268) — aggregate CVSS just 2.9, an information-disclosure and crypto-hardening batch.
Who is affected?
AlmaLinux 8 servers running Java 17 applications on OpenJDK 17 — Tomcat-deployed apps, build agents and Java services.
How do I apply the fix?
Run dnf update java-17-openjdk and restart Java applications so they run the updated runtime; verify with java -version reporting 17.0.19.
Is such a low CVSS worth updating?
Yes, on your normal cycle — OpenJDK batches regularly mix minor items with more serious ones, and staying current means the next batch (which may contain a critical flaw) is a small step rather than a multi-version jump.

Проверьте систему на уязвимости

Выберите продукт и операционную систему, чтобы увидеть точные команды исправления.

Проверьте свою систему