Skip to content
OpenAdvisories
High ELSA-2026-90500 36 CVEs

Important: java-17-openjdk security update for RHEL 9 (Oracle Linux 9)

Published Nov 2, 2026 · Updated Nov 2, 2026

Summary

[1:17.0.21.0.9-2.2.0.1]
- Add Oracle vendor bug URL [Orabug: 34340155]

[1:17.0.21.0.9-2.2]
- Set rpmrelease to 2 for PQC signing

[1:17.0.21.0.9-2.1]
- Set portablerelease to 2 for new final portable
- Set rpmrelease to 1
- Update sources to new final tarball for jdk-17.0.21+9 (GA)
- Update NEWS with CVE list
- Synchronize java-17-openjdk-portable.specfile from openjdk-portable-rhel-8

[1:17.0.21.0.9-1.2]
- Set rpmrelease to 2 for PQC signing

[1:17.0.21.0.9-1.1]
- Update to jdk-17.0.21+9 (GA)
- Add to .gitignore openjdk-17.0.21+9.tar.xz
- Set updatever to 21
- Set patchver to 0
- Set buildver to 9
- Set rpmrelease to 1
- Update sources to openjdk-17.0.21+9.tar.xz
- ** This tarball is embargoed until 2026-10-20 @ 1pm PT. **
- Update NEWS for jdk-17.0.21+9 (GA)
- Set fipsver to 028d2d4a596
- Synchronize java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
- Set tzdata requires and build requires to 2026e

Fixed packages 23

ReleasePackageFixed in
Oracle Linux · 9 java-17-openjdk 1:17.0.21.0.9-2.2.0.1.el9
Oracle Linux · 9 java-17-openjdk-demo 1:17.0.21.0.9-2.2.0.1.el9
Oracle Linux · 9 java-17-openjdk-demo-fastdebug 1:17.0.21.0.9-2.2.0.1.el9
Oracle Linux · 9 java-17-openjdk-demo-slowdebug 1:17.0.21.0.9-2.2.0.1.el9
Oracle Linux · 9 java-17-openjdk-devel 1:17.0.21.0.9-2.2.0.1.el9
Oracle Linux · 9 java-17-openjdk-devel-fastdebug 1:17.0.21.0.9-2.2.0.1.el9
Oracle Linux · 9 java-17-openjdk-devel-slowdebug 1:17.0.21.0.9-2.2.0.1.el9
Oracle Linux · 9 java-17-openjdk-fastdebug 1:17.0.21.0.9-2.2.0.1.el9
Oracle Linux · 9 java-17-openjdk-headless 1:17.0.21.0.9-2.2.0.1.el9
Oracle Linux · 9 java-17-openjdk-headless-fastdebug 1:17.0.21.0.9-2.2.0.1.el9
Oracle Linux · 9 java-17-openjdk-headless-slowdebug 1:17.0.21.0.9-2.2.0.1.el9
Oracle Linux · 9 java-17-openjdk-javadoc 1:17.0.21.0.9-2.2.0.1.el9
Oracle Linux · 9 java-17-openjdk-javadoc-zip 1:17.0.21.0.9-2.2.0.1.el9
Oracle Linux · 9 java-17-openjdk-jmods 1:17.0.21.0.9-2.2.0.1.el9
Oracle Linux · 9 java-17-openjdk-jmods-fastdebug 1:17.0.21.0.9-2.2.0.1.el9
Oracle Linux · 9 java-17-openjdk-jmods-slowdebug 1:17.0.21.0.9-2.2.0.1.el9
Oracle Linux · 9 java-17-openjdk-slowdebug 1:17.0.21.0.9-2.2.0.1.el9
Oracle Linux · 9 java-17-openjdk-src 1:17.0.21.0.9-2.2.0.1.el9
Oracle Linux · 9 java-17-openjdk-src-fastdebug 1:17.0.21.0.9-2.2.0.1.el9
Oracle Linux · 9 java-17-openjdk-src-slowdebug 1:17.0.21.0.9-2.2.0.1.el9
Oracle Linux · 9 java-17-openjdk-static-libs 1:17.0.21.0.9-2.2.0.1.el9
Oracle Linux · 9 java-17-openjdk-static-libs-fastdebug 1:17.0.21.0.9-2.2.0.1.el9
Oracle Linux · 9 java-17-openjdk-static-libs-slowdebug 1:17.0.21.0.9-2.2.0.1.el9

Vulnerabilities 36