The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:42895 advisory.

    * JDK: Enhance TLS certificate handling (CVE-2026-46968)
      * JDK: Improve DTLS handshaking (CVE-2026-46917)
      * JDK: Enhance JPEG handling (CVE-2026-47010)
      * JDK: Enhance XBM image support (CVE-2026-47021)
      * JDK: Enhance Jar file processing (CVE-2026-47027)
      * JDK: Improve certification checking (CVE-2026-60147)
      * JDK: Enhance AWT ImagingLib (CVE-2026-47059)
      * JDK: Enhance Jar handling (CVE-2026-47063)
      * JDK: Update LCMS to 2.19 (CVE-2026-41254)


    Enhancement(s):

      * For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball     available on the customer portal. The single portable build has a release number ('p') and each RPM has     its own release number ('r'). However, the RPM naming only showed the RPM release number, while the     version output from the build showed the portable release number, making it unclear that they were     different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs     and the version output shows 'p'. (AlmaLinux-212337, AlmaLinux-212338, AlmaLinux-212339, AlmaLinux-212340,     AlmaLinux-212342, AlmaLinux-212343)


    Bug Fix(es):

      * In previous releases, the RPM did not correctly own the subdirectories used for documentation in     /usr/share/doc and /usr/share/javadoc. This is fixed in this release, so these subdirectories will be     removed when the package is uninstalled. (AlmaLinux-212353, AlmaLinux-212359, AlmaLinux-212360,     AlmaLinux-212361)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

AlmaLinux 10 : java-21-openjdk (ALSA-2026:42895)

high Nessus Plugin ID 329316

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Jul 27, 2026, 10:22 AM Plugin metadata (Add IAVM Info) Plugin Feed: 202607271022
Version 1.2 Jul 24, 2026, 9:08 PM Plugin metadata Plugin Feed: 202607242108
Version 1.1 Jul 24, 2026, 3:49 PM New Plugin Feed: 202607241549