{"cves":["CVE-2026-101516","CVE-2026-83374","CVE-2026-83376","CVE-2026-83380","CVE-2026-83381","CVE-2026-83387","CVE-2026-83395","CVE-2026-83400","CVE-2026-87290","CVE-2026-87292","CVE-2026-87294","CVE-2026-87367","CVE-2026-91332","CVE-2026-91334","CVE-2026-91335","CVE-2026-91373","CVE-2026-91374","CVE-2026-91375","CVE-2026-91379","CVE-2026-91380","CVE-2026-91382","CVE-2026-91394","CVE-2026-91397","CVE-2026-91398","CVE-2026-91400","CVE-2026-91410","CVE-2026-91415","CVE-2026-91418","CVE-2026-91451","CVE-2026-91452","CVE-2026-91453","CVE-2026-91461","CVE-2026-91462","CVE-2026-91463","CVE-2026-91464","CVE-2026-91487"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[1:17.0.21.0.9-2.2.0.1]\n- Add Oracle vendor bug URL [Orabug: 34340155]\n\n[1:17.0.21.0.9-2.2]\n- Set rpmrelease to 2 for PQC signing\n\n[1:17.0.21.0.9-2.1]\n- Set portablerelease to 2 for new final portable\n- Set rpmrelease to 1\n- Update sources to new final tarball for jdk-17.0.21+9 (GA)\n- Update NEWS with CVE list\n- Synchronize java-17-openjdk-portable.specfile from openjdk-portable-rhel-8\n\n[1:17.0.21.0.9-1.2]\n- Set rpmrelease to 2 for PQC signing\n\n[1:17.0.21.0.9-1.1]\n- Update to jdk-17.0.21+9 (GA)\n- Add to .gitignore openjdk-17.0.21+9.tar.xz\n- Set updatever to 21\n- Set patchver to 0\n- Set buildver to 9\n- Set rpmrelease to 1\n- Update sources to openjdk-17.0.21+9.tar.xz\n- ** This tarball is embargoed until 2026-10-20 @ 1pm PT. **\n- Update NEWS for jdk-17.0.21+9 (GA)\n- Set fipsver to 028d2d4a596\n- Synchronize java-17-openjdk-portable.specfile from openjdk-portable-rhel-8\n- Set tzdata requires and build requires to 2026e","id":"ELSA-2026-90500","ovalId":"oval:com.oracle.elsa:def:202690500","source":"oracle_linux","title":"ELSA-2026-90500:  java-17-openjdk security update for RHEL 9 (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-90500.html"}