{
  "cves": [
    "CVE-2026-101516",
    "CVE-2026-83374",
    "CVE-2026-83376",
    "CVE-2026-83380",
    "CVE-2026-83381",
    "CVE-2026-83387",
    "CVE-2026-83395",
    "CVE-2026-83400",
    "CVE-2026-87290",
    "CVE-2026-87292",
    "CVE-2026-87294",
    "CVE-2026-87367",
    "CVE-2026-91332",
    "CVE-2026-91334",
    "CVE-2026-91335",
    "CVE-2026-91373",
    "CVE-2026-91374",
    "CVE-2026-91375",
    "CVE-2026-91379",
    "CVE-2026-91380",
    "CVE-2026-91382",
    "CVE-2026-91394",
    "CVE-2026-91397",
    "CVE-2026-91398",
    "CVE-2026-91400",
    "CVE-2026-91410",
    "CVE-2026-91415",
    "CVE-2026-91418",
    "CVE-2026-91451",
    "CVE-2026-91452",
    "CVE-2026-91453",
    "CVE-2026-91461",
    "CVE-2026-91462",
    "CVE-2026-91463",
    "CVE-2026-91464",
    "CVE-2026-91487"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[1:17.0.21.0.9-2.2.0.1]\n- Add Oracle vendor bug URL [Orabug: 34340155]\n\n[1:17.0.21.0.9-2.2]\n- Set rpmrelease to 2 for PQC signing\n\n[1:17.0.21.0.9-2.1]\n- Set portablerelease to 2 for new final portable\n- Set rpmrelease to 1\n- Update sources to new final tarball for jdk-17.0.21+9 (GA)\n- Update NEWS with CVE list\n- Synchronize java-17-openjdk-portable.specfile from openjdk-portable-rhel-8\n\n[1:17.0.21.0.9-1.2]\n- Set rpmrelease to 2 for PQC signing\n\n[1:17.0.21.0.9-1.1]\n- Update to jdk-17.0.21+9 (GA)\n- Add to .gitignore openjdk-17.0.21+9.tar.xz\n- Set updatever to 21\n- Set patchver to 0\n- Set buildver to 9\n- Set rpmrelease to 1\n- Update sources to openjdk-17.0.21+9.tar.xz\n- ** This tarball is embargoed until 2026-10-20 @ 1pm PT. **\n- Update NEWS for jdk-17.0.21+9 (GA)\n- Set fipsver to 028d2d4a596\n- Synchronize java-17-openjdk-portable.specfile from openjdk-portable-rhel-8\n- Set tzdata requires and build requires to 2026e",
  "id": "ELSA-2026-90500",
  "ovalId": "oval:com.oracle.elsa:def:202690500",
  "source": "oracle_linux",
  "title": "ELSA-2026-90500:  java-17-openjdk security update for RHEL 9 (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-90500.html"
}