Out-of-Cycle, October 24, 2026 Update Release Notes
Release Details
This release is the second update release for the October 2026 quarterly update release for Azul Zulu Builds of OpenJDK version 25, 21, 17, 11, 8, 7, and 6, related to security issues with specific CA Certificates.
This Out-of-Cycle Update contains Security-Only Critical Patch Update (CPU) builds only, published twice. Choose the set that matches the CPU your deployment is currently pinned to. The two sets are not meant to be installed side by side.
-
Based on the October 2026 CPU: contains the content of the October 2026 CPU, the content of the Out-of-Cycle, October 21, 2026 Update, and the fix described in the "What’s New" section of this document.
-
Based on the September 2026 CPU: contains the content of the September 2026 CPU, the fix described in the "What’s New" section of this document, and all CSPU-for-CPU fixes released since the September 2026 CPU. This includes any August and September 2026 CSPU-for-CPU changes for the same package types. It does not contain the content of the October 2026 CPU.
|
Important
|
Update to this release build as soon as possible, including if you already installed the Out-of-Cycle, October 21, 2026 Update. |
The following tables describe which Azul Zulu versions are published with this release.
Based on the October 2026 CPU
Azul Zulu Version (*) |
Update Type (**) |
JDK VersionThe JDK version that is used in this release of Azul Zulu. |
Based onThe previous version of Azul Zulu that was used as the basis for the current version. |
JavaFX VersionThe version of JavaFX that is included in this release of Azul Zulu. JavaFX is available in the bundles with the |
|
|---|---|---|---|---|---|
Azul Zulu Version |
JDK Version |
||||
25.37.116 (SA) |
Out-of-Cycle for CPU |
25.0.4.1.103+1 |
25.37.114 |
25.0.4.1.101+1 |
25.0.4.0.101+102 |
21.53.114 (SA) |
Out-of-Cycle for CPU |
21.0.12.1.103+1 |
21.53.112 |
21.0.12.1.101+1 |
23.0.8.0.101+101 |
17.69.114 (SA) |
Out-of-Cycle for CPU |
17.0.20.1.103+1 |
17.69.112 |
17.0.20.1.101+1 |
22.0.10.0.101+101 |
11.91.114 (SA) |
Out-of-Cycle for CPU |
11.0.32.1.103+1 |
11.91.112 |
11.0.32.1.101+1 |
19.0.16.0.101+101 |
8.97.0.112 (SA) |
Out-of-Cycle for CPU |
8u511-b103 |
8.97.0.110 |
8u511-b01 |
8u511-b03 |
7.89.0.112 (SA) |
Out-of-Cycle for CPU |
7u521-b103 |
7.89.0.110 |
7u521-b01 |
N/A |
6.83.0.110 (SA) |
Out-of-Cycle for CPU |
6b193 |
6.83.0.108 |
6b191 |
N/A |
Based on the September 2026 CPU
Azul Zulu Version (*) |
Update Type (**) |
JDK VersionThe JDK version that is used in this release of Azul Zulu. |
Based onThe previous version of Azul Zulu that was used as the basis for the current version. |
JavaFX VersionThe version of JavaFX that is included in this release of Azul Zulu. JavaFX is available in the bundles with the |
|
|---|---|---|---|---|---|
Azul Zulu Version |
JDK Version |
||||
25.35.304 (SA) |
Out-of-Cycle for CPU |
25.0.3.0.202+1 |
25.35.302 |
25.0.3.0.201+1 |
25.0.3.0.101+101 |
21.51.304 (SA) |
Out-of-Cycle for CPU |
21.0.11.0.202+1 |
21.51.302 |
21.0.11.0.201+1 |
23.0.7.0.101+101 |
17.67.304 (SA) |
Out-of-Cycle for CPU |
17.0.19.0.202+1 |
17.67.302 |
17.0.19.0.201+1 |
22.0.9.0.101+101 |
11.89.304 (SA) |
Out-of-Cycle for CPU |
11.0.31.0.202+1 |
11.89.302 |
11.0.31.0.201+1 |
19.0.15.0.101+101 |
8.95.0.304 (SA) |
Out-of-Cycle for CPU |
8u503-b101 |
8.95.0.302 |
8u503-b01 |
8u501-b02 |
7.87.0.302 (SA) |
Out-of-Cycle for CPU |
7u515-b01 |
7.87.0.302 |
7u513-b01 |
N/A |
6.81.0.302 (SA) |
Out-of-Cycle for CPU |
6b185 |
6.81.0.302 |
6b183 |
N/A |
(*) Azul provides two types of distribution packages for each Java version:
-
Subscriber Availability (SA) distributions are tested, certified, and commercially supported Azul Zulu Builds of OpenJDK. Azul ensures that the software that uses the Accessible APIs of the product doesn’t have to include specific licenses and that such a use doesn’t contaminate the code or intellectual property of such software with any license requirements. SA builds may support configurations and features that are unavailable to free users.
-
Community Availability (CA) distributions are Azul Zulu Builds of OpenJDK that are free to download and use.
|
Note
|
Both SA and CA distributions may contain Early Access builds noted with -ea- in their filename. Early Access builds may not be TCK certified.
|
(**) Update type:
-
Out-of-Cycle for CPU: An update release published outside the regular quarterly schedule, based on a quarterly CPU release. This release contains CPU builds only, published twice: based on the October 2026 CPU and based on the September 2026 CPU. Each set contains the CPU fixes of that quarter, plus the fix described in the "What’s New" section of this document.
-
CPU (Critical Patch Updates) contain fixes to security vulnerabilities and critical bug fixes. Azul Zulu CPU releases are generally based on prior-cycle PSU releases, with only security fixes applied. They provide a low-risk vehicle for the potentially urgent deployment of security fixes when issues of sufficient severity arise. CPU releases are available in SA distributions.
-
PSU (Patch Set Updates) incorporates all fixes in the corresponding CPU, as well as additional non-security bug fixes. Azul Zulu PSU releases incorporate both security fixes and other changes that align the release contents with the associated OpenJDK project quarterly release. PSU releases are available in SA and CA distributions.
What’s New
This update release removes certain CA certificates from the cacerts truststore of all Azul Zulu Builds listed in this document. It fixes a security issue related to the eMudhra Intermediate CA Compromise addressed in the Out-of-Cycle, October 21, 2026 Update.