{"cves":["CVE-2026-101516","CVE-2026-83374","CVE-2026-83376","CVE-2026-83378","CVE-2026-83380","CVE-2026-83381","CVE-2026-83387","CVE-2026-83395","CVE-2026-83400","CVE-2026-87290","CVE-2026-87291","CVE-2026-87292","CVE-2026-87294","CVE-2026-87367","CVE-2026-91332","CVE-2026-91333","CVE-2026-91334","CVE-2026-91335","CVE-2026-91373","CVE-2026-91374","CVE-2026-91375","CVE-2026-91379","CVE-2026-91380","CVE-2026-91394","CVE-2026-91397","CVE-2026-91398","CVE-2026-91400","CVE-2026-91410","CVE-2026-91415","CVE-2026-91418","CVE-2026-91451","CVE-2026-91452","CVE-2026-91453","CVE-2026-91461","CVE-2026-91462","CVE-2026-91463","CVE-2026-91464","CVE-2026-91487"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[1:21.0.13.0.9-1.2.0.1]\n- Add Oracle vendor bug URL [Orabug: 34340155]\n\n[1:21.0.13.0.9-1.2]\n- Bump release for PQC build\n\n[1:21.0.13.0.9-1.1]\n- Update to jdk-21.0.13+9 (GA)\n- ** This tarball is embargoed until 2026-10-20 @ 1pm PT. **\n- Update release notes to OpenJDK 21.0.13+9\n- Update FIPS patch to ad9e4df7698 version\n- Remove upstreamed jdk8375294-handle-EOPNOTSUPP-in-copying.patch\n- Set tzdata requires and build requires to 2026e\n- Sync the copy of the portable specfile with the latest update\n\n[1:21.0.12.1.1-2.1]\n- Sync the copy of the portable specfile with the latest update\n- Related: RHEL-235622","id":"ELSA-2026-90504","ovalId":"oval:com.oracle.elsa:def:202690504","source":"oracle_linux","title":"ELSA-2026-90504:  java-21-openjdk security update for RHEL 10 (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-90504.html"}