RHSA-2026:95273: Critical: OpenJDK 11.0.33 ELS Security Update for Windows Builds

The OpenJDK 11 packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.This release of the Red Hat build of OpenJDK 11 (11.0.33) with Extended Lifecycle Support for Windows serves as a replacement for the Red Hat build of OpenJDK 11 (11.0.32.1) and includes security and bug fixes as well as enhancements. For further information, refer to the release notes linked to in the References section.Security Fix(es): java-11-openjdk: Enhance C2 comparisons (Oracle CPU 2026-10) (CVE-2026-91487) java-11-openjdk: Enhance MIDI file handling (Oracle CPU 2026-10) (CVE-2026-91400) java-11-openjdk: Enhance JShell (Oracle CPU 2026-10) (CVE-2026-91379) java-11-openjdk: Enhance TLS Extensions (Oracle CPU 2026-10) (CVE-2026-91461) java-11-openjdk: Enhance Preferences (Oracle CPU 2026-10) (CVE-2026-91380) java-11-openjdk: Enhance JGSS (Oracle CPU 2026-10) (CVE-2026-91411) java-11-openjdk: Enhance diagnostic sessions (Oracle CPU 2026-10) (CVE-2026-91397) java-11-openjdk: Enhance SASL Authentication (Oracle CPU 2026-10) (CVE-2026-83381) java-11-openjdk: Enhance HTTP Client (Oracle CPU 2026-10) (CVE-2026-91332) java-11-openjdk: Improve HTTP headers (Oracle CPU 2026-10) (CVE-2026-91453) java-11-openjdk: Enhance Certificate Constraint Checking (Oracle CPU 2026-10) (CVE-2026-101516) java-11-openjdk: Improve Pack200 handling (Oracle CPU 2026-10) (CVE-2026-91396) java-11-openjdk: Enhance HTTP Client Response Handling (Oracle CPU 2026-10) (CVE-2026-83395) java-11-openjdk: Enhance HTTP server parsing (Oracle CPU 2026-10) (CVE-2026-91451) java-11-openjdk: Enhance WebRowSets (Oracle CPU 2026-10) (CVE-2026-83387) java-11-openjdk: Enhance HTTP server (Oracle CPU 2026-10) (CVE-2026-91452) java-11-openjdk: Enhance krb5 tokens (Oracle CPU 2026-10) (CVE-2026-91462) java-11-openjdk: Enhance Network Clients (Oracle CPU 2026-10) (CVE-2026-87292) java-11-openjdk: Enhance TLS handshakes (Oracle CPU 2026-10) (CVE-2026-91373) java-11-openjdk: Enhance Pack200 unpacking (Oracle CPU 2026-10) (CVE-2026-91395) java-11-openjdk: Enhance zipfs (Oracle CPU 2026-10) (CVE-2026-91410) java-11-openjdk: Enhance TLS certificate handling (Oracle CPU 2026-10) (CVE-2026-83376) java-11-openjdk: Enhance font rendering (Oracle CPU 2026-10) (CVE-2026-91415) java-11-openjdk: Enhance LDAP logins (Oracle CPU 2026-10) (CVE-2026-83380) java-11-openjdk: Enhance Template Handling (Oracle CPU 2026-10) (CVE-2026-87367) java-11-openjdk: Enhance jstatd (Oracle CPU 2026-10) (CVE-2026-91374) java-11-openjdk: Enhance Image Handling (Oracle CPU 2026-10) (CVE-2026-91335) java-11-openjdk: Enhance JPEG loading (Oracle CPU 2026-10) (CVE-2026-91334) java-11-openjdk: Enhance Image Processing (Oracle CPU 2026-10) (CVE-2026-91382) java-11-openjdk: Enhance GIF loading (Oracle CPU 2026-10) (CVE-2026-91418) java-11-openjdk: Enhance XML Processing (Oracle CPU 2026-10) (CVE-2026-83400) java-11-openjdk: Enhance Kerberos validation (Oracle CPU 2026-10) (CVE-2026-91464) java-11-openjdk: Enhance SOCKS5 support (Oracle CPU 2026-10) (CVE-2026-91398) java-11-openjdk: Enhance XPath Expressions (Oracle CPU 2026-10) (CVE-2026-87290) java-11-openjdk: Enhance PKCS5 padding (Oracle CPU 2026-10) (CVE-2026-83374) java-11-openjdk: Enhance krb5 client (Oracle CPU 2026-10) (CVE-2026-91463) java-11-openjdk: Enhance jmod handling (Oracle CPU 2026-10) (CVE-2026-91375) java-11-openjdk: Enhance Certificate Name Checks (Oracle CPU 2026-10) (CVE-2026-87294) java-11-openjdk: Enhance HTTP client caching (Oracle CPU 2026-10) (CVE-2026-91394) java-11-openjdk: Distrust eMudhra intermediate CA certificates due to security concerns (CVE-2026-91403) java-11-openjdk: Distrust eMudhra intermediate CA certificates due to security concerns (CVE-2026-114820) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

— Red Hat