Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Java 17 OpenJDK update stops unsafe resource and connection handling
published 2 months ago
Summary
AlmaLinux’s Java 17 OpenJDK packages are being upgraded to version 17.0.20.1. The new version fixes issues that could let attackers view or tamper with resources, intercept HTTP traffic, or weaken TLS server security. Apply the update as soon as possible to keep your Java applications protected.
What to do
- Update almalinux java-17-openjdk to version 1:17.0.20.1.1-1.el9.tuxcare.els1.
- Update almalinux java-17-openjdk-demo to version 1:17.0.20.1.1-1.el9.tuxcare.els1.
- Update almalinux java-17-openjdk-demo-fastdebug to version 1:17.0.20.1.1-1.el9.tuxcare.els1.
- Update almalinux java-17-openjdk-demo-slowdebug to version 1:17.0.20.1.1-1.el9.tuxcare.els1.
- Update almalinux java-17-openjdk-devel to version 1:17.0.20.1.1-1.el9.tuxcare.els1.
- Update almalinux java-17-openjdk-devel-fastdebug to version 1:17.0.20.1.1-1.el9.tuxcare.els1.
- Update almalinux java-17-openjdk-devel-slowdebug to version 1:17.0.20.1.1-1.el9.tuxcare.els1.
- Update almalinux java-17-openjdk-fastdebug to version 1:17.0.20.1.1-1.el9.tuxcare.els1.
- Update almalinux java-17-openjdk-headless to version 1:17.0.20.1.1-1.el9.tuxcare.els1.
- Update almalinux java-17-openjdk-headless-fastdebug to version 1:17.0.20.1.1-1.el9.tuxcare.els1.
- Update almalinux java-17-openjdk-headless-slowdebug to version 1:17.0.20.1.1-1.el9.tuxcare.els1.
- Update almalinux java-17-openjdk-javadoc to version 1:17.0.20.1.1-1.el9.tuxcare.els1.
- Update almalinux java-17-openjdk-javadoc-zip to version 1:17.0.20.1.1-1.el9.tuxcare.els1.
- Update almalinux java-17-openjdk-jmods to version 1:17.0.20.1.1-1.el9.tuxcare.els1.
- Update almalinux java-17-openjdk-jmods-fastdebug to version 1:17.0.20.1.1-1.el9.tuxcare.els1.
- Update almalinux java-17-openjdk-jmods-slowdebug to version 1:17.0.20.1.1-1.el9.tuxcare.els1.
- Update almalinux java-17-openjdk-slowdebug to version 1:17.0.20.1.1-1.el9.tuxcare.els1.
- Update almalinux java-17-openjdk-src to version 1:17.0.20.1.1-1.el9.tuxcare.els1.
- Update almalinux java-17-openjdk-src-fastdebug to version 1:17.0.20.1.1-1.el9.tuxcare.els1.
- Update almalinux java-17-openjdk-src-slowdebug to version 1:17.0.20.1.1-1.el9.tuxcare.els1.
- Update almalinux java-17-openjdk-static-libs to version 1:17.0.20.1.1-1.el9.tuxcare.els1.
- Update almalinux java-17-openjdk-static-libs-fastdebug to version 1:17.0.20.1.1-1.el9.tuxcare.els1.
- Update almalinux java-17-openjdk-static-libs-slowdebug to version 1:17.0.20.1.1-1.el9.tuxcare.els1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:AlmaLinux:9.6 | almalinux | java-17-openjdk |
< 1:17.0.20.1.1-1.el9.tuxcare.els1 Fix: upgrade to 1:17.0.20.1.1-1.el9.tuxcare.els1
|
| TuxCare:AlmaLinux:9.6 | almalinux | java-17-openjdk-demo |
< 1:17.0.20.1.1-1.el9.tuxcare.els1 Fix: upgrade to 1:17.0.20.1.1-1.el9.tuxcare.els1
|
| TuxCare:AlmaLinux:9.6 | almalinux | java-17-openjdk-demo-fastdebug |
< 1:17.0.20.1.1-1.el9.tuxcare.els1 Fix: upgrade to 1:17.0.20.1.1-1.el9.tuxcare.els1
|
| TuxCare:AlmaLinux:9.6 | almalinux | java-17-openjdk-demo-slowdebug |
< 1:17.0.20.1.1-1.el9.tuxcare.els1 Fix: upgrade to 1:17.0.20.1.1-1.el9.tuxcare.els1
|
| TuxCare:AlmaLinux:9.6 | almalinux | java-17-openjdk-devel |
< 1:17.0.20.1.1-1.el9.tuxcare.els1 Fix: upgrade to 1:17.0.20.1.1-1.el9.tuxcare.els1
|
| TuxCare:AlmaLinux:9.6 | almalinux | java-17-openjdk-devel-fastdebug |
< 1:17.0.20.1.1-1.el9.tuxcare.els1 Fix: upgrade to 1:17.0.20.1.1-1.el9.tuxcare.els1
|
| TuxCare:AlmaLinux:9.6 | almalinux | java-17-openjdk-devel-slowdebug |
< 1:17.0.20.1.1-1.el9.tuxcare.els1 Fix: upgrade to 1:17.0.20.1.1-1.el9.tuxcare.els1
|
| TuxCare:AlmaLinux:9.6 | almalinux | java-17-openjdk-fastdebug |
< 1:17.0.20.1.1-1.el9.tuxcare.els1 Fix: upgrade to 1:17.0.20.1.1-1.el9.tuxcare.els1
|
| TuxCare:AlmaLinux:9.6 | almalinux | java-17-openjdk-headless |
< 1:17.0.20.1.1-1.el9.tuxcare.els1 Fix: upgrade to 1:17.0.20.1.1-1.el9.tuxcare.els1
|
| TuxCare:AlmaLinux:9.6 | almalinux | java-17-openjdk-headless-fastdebug |
< 1:17.0.20.1.1-1.el9.tuxcare.els1 Fix: upgrade to 1:17.0.20.1.1-1.el9.tuxcare.els1
|
| TuxCare:AlmaLinux:9.6 | almalinux | java-17-openjdk-headless-slowdebug |
< 1:17.0.20.1.1-1.el9.tuxcare.els1 Fix: upgrade to 1:17.0.20.1.1-1.el9.tuxcare.els1
|
| TuxCare:AlmaLinux:9.6 | almalinux | java-17-openjdk-javadoc |
< 1:17.0.20.1.1-1.el9.tuxcare.els1 Fix: upgrade to 1:17.0.20.1.1-1.el9.tuxcare.els1
|
| TuxCare:AlmaLinux:9.6 | almalinux | java-17-openjdk-javadoc-zip |
< 1:17.0.20.1.1-1.el9.tuxcare.els1 Fix: upgrade to 1:17.0.20.1.1-1.el9.tuxcare.els1
|
| TuxCare:AlmaLinux:9.6 | almalinux | java-17-openjdk-jmods |
< 1:17.0.20.1.1-1.el9.tuxcare.els1 Fix: upgrade to 1:17.0.20.1.1-1.el9.tuxcare.els1
|
| TuxCare:AlmaLinux:9.6 | almalinux | java-17-openjdk-jmods-fastdebug |
< 1:17.0.20.1.1-1.el9.tuxcare.els1 Fix: upgrade to 1:17.0.20.1.1-1.el9.tuxcare.els1
|
| TuxCare:AlmaLinux:9.6 | almalinux | java-17-openjdk-jmods-slowdebug |
< 1:17.0.20.1.1-1.el9.tuxcare.els1 Fix: upgrade to 1:17.0.20.1.1-1.el9.tuxcare.els1
|
| TuxCare:AlmaLinux:9.6 | almalinux | java-17-openjdk-slowdebug |
< 1:17.0.20.1.1-1.el9.tuxcare.els1 Fix: upgrade to 1:17.0.20.1.1-1.el9.tuxcare.els1
|
| TuxCare:AlmaLinux:9.6 | almalinux | java-17-openjdk-src |
< 1:17.0.20.1.1-1.el9.tuxcare.els1 Fix: upgrade to 1:17.0.20.1.1-1.el9.tuxcare.els1
|
| TuxCare:AlmaLinux:9.6 | almalinux | java-17-openjdk-src-fastdebug |
< 1:17.0.20.1.1-1.el9.tuxcare.els1 Fix: upgrade to 1:17.0.20.1.1-1.el9.tuxcare.els1
|
| TuxCare:AlmaLinux:9.6 | almalinux | java-17-openjdk-src-slowdebug |
< 1:17.0.20.1.1-1.el9.tuxcare.els1 Fix: upgrade to 1:17.0.20.1.1-1.el9.tuxcare.els1
|
| TuxCare:AlmaLinux:9.6 | almalinux | java-17-openjdk-static-libs |
< 1:17.0.20.1.1-1.el9.tuxcare.els1 Fix: upgrade to 1:17.0.20.1.1-1.el9.tuxcare.els1
|
| TuxCare:AlmaLinux:9.6 | almalinux | java-17-openjdk-static-libs-fastdebug |
< 1:17.0.20.1.1-1.el9.tuxcare.els1 Fix: upgrade to 1:17.0.20.1.1-1.el9.tuxcare.els1
|
| TuxCare:AlmaLinux:9.6 | almalinux | java-17-openjdk-static-libs-slowdebug |
< 1:17.0.20.1.1-1.el9.tuxcare.els1 Fix: upgrade to 1:17.0.20.1.1-1.el9.tuxcare.els1
|
Original advisory text
java-17-openjdk: Fix of 3 CVEs
- Update to jdk-17.0.20.1+1 (GA)
- CVE-2026-60589: Improve Resource Resolving
- CVE-2026-61308: Enhance HTTP Connections
- CVE-2026-70907: Enhance TLS server
- CVE-2026-60589: Improve Resource Resolving
- CVE-2026-61308: Enhance HTTP Connections
- CVE-2026-70907: Enhance TLS server
References
- https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1787785077.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-60589 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-61308 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-70907 Vendor Advisory
Timeline
Published26 Aug 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1787785077 · OSV
Track software like this
Free during beta