{
  "cves": [
    "CVE-2026-101516",
    "CVE-2026-83374",
    "CVE-2026-83376",
    "CVE-2026-83378",
    "CVE-2026-83380",
    "CVE-2026-83381",
    "CVE-2026-83387",
    "CVE-2026-83395",
    "CVE-2026-83400",
    "CVE-2026-87290",
    "CVE-2026-87291",
    "CVE-2026-87292",
    "CVE-2026-87294",
    "CVE-2026-87367",
    "CVE-2026-91332",
    "CVE-2026-91333",
    "CVE-2026-91334",
    "CVE-2026-91335",
    "CVE-2026-91373",
    "CVE-2026-91374",
    "CVE-2026-91375",
    "CVE-2026-91379",
    "CVE-2026-91380",
    "CVE-2026-91394",
    "CVE-2026-91397",
    "CVE-2026-91398",
    "CVE-2026-91400",
    "CVE-2026-91410",
    "CVE-2026-91415",
    "CVE-2026-91418",
    "CVE-2026-91451",
    "CVE-2026-91452",
    "CVE-2026-91453",
    "CVE-2026-91461",
    "CVE-2026-91462",
    "CVE-2026-91463",
    "CVE-2026-91464",
    "CVE-2026-91487"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[1:21.0.13.0.9-1.2.0.1]\n- Add Oracle vendor bug URL [Orabug: 34340155]\n\n[1:21.0.13.0.9-1.2]\n- Bump release for PQC build\n\n[1:21.0.13.0.9-1.1]\n- Update to jdk-21.0.13+9 (GA)\n- ** This tarball is embargoed until 2026-10-20 @ 1pm PT. **\n- Update release notes to OpenJDK 21.0.13+9\n- Update FIPS patch to ad9e4df7698 version\n- Remove upstreamed jdk8375294-handle-EOPNOTSUPP-in-copying.patch\n- Set tzdata requires and build requires to 2026e\n- Sync the copy of the portable specfile with the latest update\n\n[1:21.0.12.1.1-2.1]\n- Sync the copy of the portable specfile with the latest update\n- Related: RHEL-235622",
  "id": "ELSA-2026-90504",
  "ovalId": "oval:com.oracle.elsa:def:202690504",
  "source": "oracle_linux",
  "title": "ELSA-2026-90504:  java-21-openjdk security update for RHEL 10 (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-90504.html"
}