RHSA-2026:94403 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Fixed packages 23

Release	Package	Fixed in
Red Hat · Hardened Images 1 hummingbird:1	java-21-openjdk	1:21.0.13.0.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1	java-21-openjdk-demo	1:21.0.13.0.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1	java-21-openjdk-demo-fastdebug	1:21.0.13.0.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1	java-21-openjdk-demo-slowdebug	1:21.0.13.0.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1	java-21-openjdk-devel	1:21.0.13.0.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1	java-21-openjdk-devel-fastdebug	1:21.0.13.0.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1	java-21-openjdk-devel-slowdebug	1:21.0.13.0.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1	java-21-openjdk-fastdebug	1:21.0.13.0.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1	java-21-openjdk-headless	1:21.0.13.0.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1	java-21-openjdk-headless-fastdebug	1:21.0.13.0.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1	java-21-openjdk-headless-slowdebug	1:21.0.13.0.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1	java-21-openjdk-javadoc	1:21.0.13.0.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1	java-21-openjdk-javadoc-zip	1:21.0.13.0.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1	java-21-openjdk-jmods	1:21.0.13.0.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1	java-21-openjdk-jmods-fastdebug	1:21.0.13.0.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1	java-21-openjdk-jmods-slowdebug	1:21.0.13.0.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1	java-21-openjdk-slowdebug	1:21.0.13.0.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1	java-21-openjdk-src	1:21.0.13.0.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1	java-21-openjdk-src-fastdebug	1:21.0.13.0.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1	java-21-openjdk-src-slowdebug	1:21.0.13.0.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1	java-21-openjdk-static-libs	1:21.0.13.0.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1	java-21-openjdk-static-libs-fastdebug	1:21.0.13.0.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1	java-21-openjdk-static-libs-slowdebug	1:21.0.13.0.9-0.1.hum1

Vulnerabilities 39

Critical 9.1

CVE-2026-91403 Public exploit

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Azure Linux Alpine Wolfi

Oct 21, 2026
High 7.0

CVE-2026-91415

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine

Oct 20, 2026
Medium 6.8

CVE-2026-91398

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine

Oct 20, 2026
Medium 6.5

CVE-2026-101516

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine

Oct 20, 2026
Medium 6.5

CVE-2026-83395

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine

Oct 20, 2026
Medium 6.5

CVE-2026-87294

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Azure Linux Alpine

Oct 20, 2026
Medium 5.9

CVE-2026-83374

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Azure Linux Alpine

Oct 20, 2026
Medium 5.9

CVE-2026-83387

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Azure Linux Alpine

Oct 20, 2026
Medium 5.9

CVE-2026-87290

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Azure Linux Alpine

Oct 20, 2026
Medium 5.9

CVE-2026-91394

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking). Supporte…

Oracle Oracle Java SE Oracle GraalVM for JDK openjdk-8 Debian Ubuntu Alpine

Oct 20, 2026
Medium 5.9

CVE-2026-91462

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine

Oct 20, 2026
Medium 5.3

CVE-2026-83380

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Azure Linux Alpine

Oct 20, 2026
Medium 5.3

CVE-2026-83400

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine

Oct 20, 2026
Medium 5.3

CVE-2026-87291

Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 21.0.…

Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine

Oct 20, 2026
Medium 5.3

CVE-2026-91332

Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u503…

Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine

Oct 20, 2026
Medium 5.3

CVE-2026-91373

Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u503, 8u50…

Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine

Oct 20, 2026
Medium 5.3

CVE-2026-91410

Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u503,…

Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine

Oct 20, 2026
Medium 5.3

CVE-2026-91418

Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product o…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine

Oct 20, 2026
Medium 5.3

CVE-2026-91451

Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u503…

Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine

Oct 20, 2026
Medium 5.3

CVE-2026-91452

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine

Oct 20, 2026
Medium 5.3

CVE-2026-91453

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine

Oct 20, 2026
Medium 5.3

CVE-2026-91463

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine

Oct 20, 2026
Medium 5.3

CVE-2026-91464

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine

Oct 20, 2026
Medium 4.8

CVE-2026-83378

Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.12…

Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine

Oct 20, 2026
Medium 4.8

CVE-2026-83381

Vulnerability in Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u503, …

Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Azure Linux Alpine

Oct 20, 2026
Medium 4.8

CVE-2026-91374

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine

Oct 20, 2026
Medium 4.8

CVE-2026-91487

Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 8u503-p…

Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine

Oct 20, 2026
Medium 4.7

CVE-2026-91375

Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u503-…

Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine

Oct 20, 2026
Medium 4.7

CVE-2026-91379

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine

Oct 20, 2026
Medium 4.0

CVE-2026-91380

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine

Oct 20, 2026
Low 3.7

CVE-2026-83376

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Azure Linux Alpine

Oct 20, 2026
Low 3.7

CVE-2026-87292

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Azure Linux Alpine

Oct 20, 2026
Low 3.7

CVE-2026-87367

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Azure Linux Alpine

Oct 20, 2026
Low 3.7

CVE-2026-91333

Vulnerability in Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 21.0.12…

Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine

Oct 20, 2026
Low 3.7

CVE-2026-91334

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Azure Linux Alpine

Oct 20, 2026
Low 3.7

CVE-2026-91461

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine

Oct 20, 2026
Low 3.6

CVE-2026-91397

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine

Oct 20, 2026
Low 3.1

CVE-2026-91400

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Azure Linux Alpine

Oct 20, 2026
Low 2.6

CVE-2026-91335

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine

Oct 20, 2026

References

article
https://images.redhat.com/
report
https://access.redhat.com/security/cve/CVE-2026-91403
article
https://access.redhat.com/security/updates/classification/
report
https://access.redhat.com/security/cve/CVE-2026-87291
report
https://access.redhat.com/security/cve/CVE-2026-91335
report
https://access.redhat.com/security/cve/CVE-2026-91333
report
https://access.redhat.com/security/cve/CVE-2026-91461
report
https://access.redhat.com/security/cve/CVE-2026-91394
report
https://access.redhat.com/security/cve/CVE-2026-87290
report
https://access.redhat.com/security/cve/CVE-2026-83378
report
https://access.redhat.com/security/cve/CVE-2026-87367
report
https://access.redhat.com/security/cve/CVE-2026-83395
report
https://access.redhat.com/security/cve/CVE-2026-87292
report
https://access.redhat.com/security/cve/CVE-2026-91332
report
https://access.redhat.com/security/cve/CVE-2026-83380
report
https://access.redhat.com/security/cve/CVE-2026-91463
report
https://access.redhat.com/security/cve/CVE-2026-91400
report
https://access.redhat.com/security/cve/CVE-2026-91451
report
https://access.redhat.com/security/cve/CVE-2026-91464
report
https://access.redhat.com/security/cve/CVE-2026-91374
report
https://access.redhat.com/security/cve/CVE-2026-91375
report
https://access.redhat.com/security/cve/CVE-2026-83374
report
https://access.redhat.com/security/cve/CVE-2026-83376
report
https://access.redhat.com/security/cve/CVE-2026-91334
report
https://access.redhat.com/security/cve/CVE-2026-91379
report
https://access.redhat.com/security/cve/CVE-2026-87294
report
https://access.redhat.com/security/cve/CVE-2026-91415
report
https://access.redhat.com/security/cve/CVE-2026-83400
report
https://access.redhat.com/security/cve/CVE-2026-91398
report
https://access.redhat.com/security/cve/CVE-2026-91418
report
https://access.redhat.com/security/cve/CVE-2026-91452
report
https://access.redhat.com/security/cve/CVE-2026-91410
report
https://access.redhat.com/security/cve/CVE-2026-91462
report
https://access.redhat.com/security/cve/CVE-2026-91373
report
https://access.redhat.com/security/cve/CVE-2026-83387
report
https://access.redhat.com/security/cve/CVE-2026-91453
report
https://access.redhat.com/security/cve/CVE-2026-83381
report
https://access.redhat.com/security/cve/CVE-2026-101516
report
https://access.redhat.com/security/cve/CVE-2026-91397

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Fixed packages 23

Vulnerabilities 39

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking). Supporte…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 21.0.…

Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u503…

Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u503, 8u50…

Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u503,…

Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product o…

Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u503…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.12…

Vulnerability in Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u503, …

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 8u503-p…

Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u503-…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 21.0.12…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

References