elsa-2026-90500

oracle_linux
Description

[1:17.0.21.0.9-2.2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:17.0.21.0.9-2.2] - Set rpmrelease to 2 for PQC signing [1:17.0.21.0.9-2.1] - Set portablerelease to 2 for new final portable - Set rpmrelease to 1 - Update sources to new final tarball for jdk-17.0.21+9 (GA) - Update NEWS with CVE list - Synchronize java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 [1:17.0.21.0.9-1.2] - Set rpmrelease to 2 for PQC signing [1:17.0.21.0.9-1.1] - Update to jdk-17.0.21+9 (GA) - Add to .gitignore openjdk-17.0.21+9.tar.xz - Set updatever to 21 - Set patchver to 0 - Set buildver to 9 - Set rpmrelease to 1 - Update sources to openjdk-17.0.21+9.tar.xz - ** This tarball is embargoed until 2026-10-20 @ 1pm PT. ** - Update NEWS for jdk-17.0.21+9 (GA) - Set fipsver to 028d2d4a596 - Synchronize java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set tzdata requires and build requires to 2026e

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2026-101516",
    "CVE-2026-83374",
    "CVE-2026-83376",
    "CVE-2026-83380",
    "CVE-2026-83381",
    "CVE-2026-83387",
    "CVE-2026-83395",
    "CVE-2026-83400",
    "CVE-2026-87290",
    "CVE-2026-87292",
    "CVE-2026-87294",
    "CVE-2026-87367",
    "CVE-2026-91332",
    "CVE-2026-91334",
    "CVE-2026-91335",
    "CVE-2026-91373",
    "CVE-2026-91374",
    "CVE-2026-91375",
    "CVE-2026-91379",
    "CVE-2026-91380",
    "CVE-2026-91382",
    "CVE-2026-91394",
    "CVE-2026-91397",
    "CVE-2026-91398",
    "CVE-2026-91400",
    "CVE-2026-91410",
    "CVE-2026-91415",
    "CVE-2026-91418",
    "CVE-2026-91451",
    "CVE-2026-91452",
    "CVE-2026-91453",
    "CVE-2026-91461",
    "CVE-2026-91462",
    "CVE-2026-91463",
    "CVE-2026-91464",
    "CVE-2026-91487"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[1:17.0.21.0.9-2.2.0.1]\n- Add Oracle vendor bug URL [Orabug: 34340155]\n\n[1:17.0.21.0.9-2.2]\n- Set rpmrelease to 2 for PQC signing\n\n[1:17.0.21.0.9-2.1]\n- Set portablerelease to 2 for new final portable\n- Set rpmrelease to 1\n- Update sources to new final tarball for jdk-17.0.21+9 (GA)\n- Update NEWS with CVE list\n- Synchronize java-17-openjdk-portable.specfile from openjdk-portable-rhel-8\n\n[1:17.0.21.0.9-1.2]\n- Set rpmrelease to 2 for PQC signing\n\n[1:17.0.21.0.9-1.1]\n- Update to jdk-17.0.21+9 (GA)\n- Add to .gitignore openjdk-17.0.21+9.tar.xz\n- Set updatever to 21\n- Set patchver to 0\n- Set buildver to 9\n- Set rpmrelease to 1\n- Update sources to openjdk-17.0.21+9.tar.xz\n- ** This tarball is embargoed until 2026-10-20 @ 1pm PT. **\n- Update NEWS for jdk-17.0.21+9 (GA)\n- Set fipsver to 028d2d4a596\n- Synchronize java-17-openjdk-portable.specfile from openjdk-portable-rhel-8\n- Set tzdata requires and build requires to 2026e",
  "id": "ELSA-2026-90500",
  "ovalId": "oval:com.oracle.elsa:def:202690500",
  "source": "oracle_linux",
  "title": "ELSA-2026-90500:  java-17-openjdk security update for RHEL 9 (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-90500.html"
}
View JSON API Download JSON