Red Hat Security Advisory: Java 11 OpenJDK ELS Security Update

Fixed packages 85

Vulnerabilities 39

• High 7.0
  CVE-2026-91415

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Oct 20, 2026
• Medium 6.8
  CVE-2026-91398

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Oct 20, 2026
• Medium 6.5
  CVE-2026-101516

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Oct 20, 2026
• Medium 6.5
  CVE-2026-83395

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Oct 20, 2026
• Medium 6.5
  CVE-2026-87294

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Azure Linux Alpine
  Oct 20, 2026
• Medium 6.5
  CVE-2026-91382

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Oct 20, 2026
• Medium 6.5
  CVE-2026-91395

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Oct 20, 2026
• Medium 6.5
  CVE-2026-91396

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu
  Oct 20, 2026
• Medium 6.5
  CVE-2026-91411

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Oct 20, 2026
• Medium 5.9
  CVE-2026-83374

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Azure Linux Alpine
  Oct 20, 2026
• Medium 5.9
  CVE-2026-83387

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Azure Linux Alpine
  Oct 20, 2026
• Medium 5.9
  CVE-2026-87290

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Azure Linux Alpine
  Oct 20, 2026
• Medium 5.9
  CVE-2026-91394

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking). Supporte…

  Oracle Oracle Java SE Oracle GraalVM for JDK openjdk-8 Debian Ubuntu Alpine
  Oct 20, 2026
• Medium 5.9
  CVE-2026-91462

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Oct 20, 2026
• Medium 5.3
  CVE-2026-83380

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Azure Linux Alpine
  Oct 20, 2026
• Medium 5.3
  CVE-2026-83400

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Oct 20, 2026
• Medium 5.3
  CVE-2026-91332

  Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u503…

  Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Oct 20, 2026
• Medium 5.3
  CVE-2026-91373

  Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u503, 8u50…

  Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Oct 20, 2026
• Medium 5.3
  CVE-2026-91410

  Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u503,…

  Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Oct 20, 2026
• Medium 5.3
  CVE-2026-91418

  Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product o…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Oct 20, 2026
• Medium 5.3
  CVE-2026-91451

  Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u503…

  Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Oct 20, 2026
• Medium 5.3
  CVE-2026-91452

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Oct 20, 2026
• Medium 5.3
  CVE-2026-91453

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Oct 20, 2026
• Medium 5.3
  CVE-2026-91463

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Oct 20, 2026
• Medium 5.3
  CVE-2026-91464

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Oct 20, 2026
• Medium 4.8
  CVE-2026-83381

  Vulnerability in Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u503, …

  Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Azure Linux Alpine
  Oct 20, 2026
• Medium 4.8
  CVE-2026-91374

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Oct 20, 2026
• Medium 4.8
  CVE-2026-91487

  Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 8u503-p…

  Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Oct 20, 2026
• Medium 4.7
  CVE-2026-91375

  Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u503-…

  Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Oct 20, 2026
• Medium 4.7
  CVE-2026-91379

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Oct 20, 2026
• Medium 4.0
  CVE-2026-91380

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Oct 20, 2026
• Low 3.7
  CVE-2026-83376

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Azure Linux Alpine
  Oct 20, 2026
• Low 3.7
  CVE-2026-87292

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Azure Linux Alpine
  Oct 20, 2026
• Low 3.7
  CVE-2026-87367

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Azure Linux Alpine
  Oct 20, 2026
• Low 3.7
  CVE-2026-91334

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Azure Linux Alpine
  Oct 20, 2026
• Low 3.7
  CVE-2026-91461

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Oct 20, 2026
• Low 3.6
  CVE-2026-91397

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Oct 20, 2026
• Low 3.1
  CVE-2026-91400

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Azure Linux Alpine
  Oct 20, 2026
• Low 2.6
  CVE-2026-91335

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Oct 20, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2556709
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2556795
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2556824
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2556837
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2556859
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2556922
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557007
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557032
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557041
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557047
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557079
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557097
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557110
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557117
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557122
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557195
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557236
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557261
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557356
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557385
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557405
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557427
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557443
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557506
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557558
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557564
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557598
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557662
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557665
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557674
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557690
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557709
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557711
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557731
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557765
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557780
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557857
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2557906