Critical vulnerability 'CVE-2026-91403' in Java: The truth is the eMudhra certificate issue | Patched versions and what to do if you cannot update

There is a critical vulnerability in Oracle Java SE that allows for data theft and tampering. This news broke on the night of ...
ADTmag

Oracle Issues Emergency Java Updates After Certificate Authority Key Compromise

Oracle has issued emergency Java updates that remove root certificates associated with a certificate authority key compromise, requiring development teams to check the runtimes their applications use.

Update Oracle Java Urgently and Keep Track of the Distribution Source | Confirmation Log for "Version, Purpose, and License Basis"

On October 21, 2026, the IPA released vulnerability countermeasures for Oracle Java and urged immediate security updates, ...
LWN.net

Red Hat alert RHSA-2025:10865-01 (java-11-openjdk with Extended Lifecycle Support)

An update for java-11-openjdk with Extended Lifecycle Support is now available for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, and Red Hat Enterprise Linux 9. The java-11-openjdk packages ...