[El-errata] ELSA-2026-9689 Important: Oracle Linux 9 java-21-openjdk security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-9689

http://linux.oracle.com/errata/ELSA-2026-9689.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
java-21-openjdk-21.0.11.0.10-2.0.1.el9.x86_64.rpm
java-21-openjdk-demo-21.0.11.0.10-2.0.1.el9.x86_64.rpm
java-21-openjdk-demo-fastdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm
java-21-openjdk-demo-slowdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm
java-21-openjdk-devel-21.0.11.0.10-2.0.1.el9.x86_64.rpm
java-21-openjdk-devel-fastdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm
java-21-openjdk-devel-slowdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm
java-21-openjdk-fastdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm
java-21-openjdk-headless-21.0.11.0.10-2.0.1.el9.x86_64.rpm
java-21-openjdk-headless-fastdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm
java-21-openjdk-headless-slowdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm
java-21-openjdk-javadoc-21.0.11.0.10-2.0.1.el9.x86_64.rpm
java-21-openjdk-javadoc-zip-21.0.11.0.10-2.0.1.el9.x86_64.rpm
java-21-openjdk-jmods-21.0.11.0.10-2.0.1.el9.x86_64.rpm
java-21-openjdk-jmods-fastdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm
java-21-openjdk-jmods-slowdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm
java-21-openjdk-slowdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm
java-21-openjdk-src-21.0.11.0.10-2.0.1.el9.x86_64.rpm
java-21-openjdk-src-fastdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm
java-21-openjdk-src-slowdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm
java-21-openjdk-static-libs-21.0.11.0.10-2.0.1.el9.x86_64.rpm
java-21-openjdk-static-libs-fastdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm
java-21-openjdk-static-libs-slowdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm

aarch64:
java-21-openjdk-21.0.11.0.10-2.0.1.el9.aarch64.rpm
java-21-openjdk-demo-21.0.11.0.10-2.0.1.el9.aarch64.rpm
java-21-openjdk-demo-fastdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm
java-21-openjdk-demo-slowdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm
java-21-openjdk-devel-21.0.11.0.10-2.0.1.el9.aarch64.rpm
java-21-openjdk-devel-fastdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm
java-21-openjdk-devel-slowdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm
java-21-openjdk-fastdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm
java-21-openjdk-headless-21.0.11.0.10-2.0.1.el9.aarch64.rpm
java-21-openjdk-headless-fastdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm
java-21-openjdk-headless-slowdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm
java-21-openjdk-javadoc-21.0.11.0.10-2.0.1.el9.aarch64.rpm
java-21-openjdk-javadoc-zip-21.0.11.0.10-2.0.1.el9.aarch64.rpm
java-21-openjdk-jmods-21.0.11.0.10-2.0.1.el9.aarch64.rpm
java-21-openjdk-jmods-fastdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm
java-21-openjdk-jmods-slowdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm
java-21-openjdk-slowdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm
java-21-openjdk-src-21.0.11.0.10-2.0.1.el9.aarch64.rpm
java-21-openjdk-src-fastdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm
java-21-openjdk-src-slowdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm
java-21-openjdk-static-libs-21.0.11.0.10-2.0.1.el9.aarch64.rpm
java-21-openjdk-static-libs-fastdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm
java-21-openjdk-static-libs-slowdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/java-21-openjdk-21.0.11.0.10-2.0.1.el9.src.rpm

Related CVEs:

CVE-2026-22007
CVE-2026-22013
CVE-2026-22016
CVE-2026-22018
CVE-2026-22021
CVE-2026-23865
CVE-2026-34268
CVE-2026-34282




Description of changes:

[1:21.0.11.0.10-2.0.1]
- Add Oracle vendor bug URL [Orabug: 34340155]

[1:21.0.11.0.10-2]
- Bump release for PQC build
- Related: RHEL-169609

[1:21.0.11.0.10-1]
- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169609
- Resolves: RHEL-133293
- Resolves: RHEL-147352
- Resolves: RHEL-148409
- Resolves: RHEL-148992
- Resolves: RHEL-157141
- Resolves: RHEL-161305
- Resolves: RHEL-161454
- Resolves: RHEL-169616

[1:21.0.10.0.7-2]
- Bump rpmrelease for CentOS build
- Related: RHEL-142859
- Related: RHEL-139560
- Related: RHEL-131592
- Related: RHEL-131602
- Related: RHEL-122121
- Related: RHEL-142820