Out-of-Cycle, October 24, 2026 Update Release Notes
Release Details
This release is the second update release for the October 2026 quarterly update release for Azul Zulu Builds of OpenJDK version 25, 21, 17, 11, 8, 7, and 6, related to security issues with specific CA Certificates.
This Out-of-Cycle Update contains Security-Only Out-of-Cycle for Critical Patch Update (Out-of-Cycle for CPU) builds only. Given the timing and criticality of this out-of-cycle fix, it is made available in two variants: one based on the October CPU update and one based on the July CPU update. Customers seeking the lowest-change-risk possible for immediate deployment of this update can choose the Out-of-Cycle version set that matches the CPU base their current deployments are running on.
-
Based on the October 2026 CPU: contains the content of the October 2026 CPU, the content of the Out-of-Cycle, October 21, 2026 Update, and the fix described in the "What’s New" section of this document.
-
Based on the July CPU and its subsequent CSPU for CPU updates: contains the content of the July 2026 CPU, the fix described in the "What’s New" section of this document, and all CSPU-for-CPU fixes released since the July 2026 CPU. This includes any August and September 2026 CSPU for CPU changes for the same package types. It does not contain the content of the October 2026 CPU.
|
Important
|
Update to this release build as soon as possible, including if you already installed the Out-of-Cycle, October 21, 2026 Update. |
The following tables describe which Azul Zulu versions are published with this release.
Based on the October 2026 CPU
Azul Zulu Version (*) |
Update Type (**) |
JDK VersionThe JDK version that is used in this release of Azul Zulu. |
Based onThe previous version of Azul Zulu that was used as the basis for the current version. |
JavaFX VersionThe version of JavaFX that is included in this release of Azul Zulu. JavaFX is available in the bundles with the |
|
|---|---|---|---|---|---|
Azul Zulu Version |
JDK Version |
||||
25.37.116 (SA) |
Out-of-Cycle for CPU |
25.0.4.1.103+1 |
25.37.114 |
25.0.4.1.101+1 |
25.0.4.0.101+102 |
21.53.114 (SA) |
Out-of-Cycle for CPU |
21.0.12.1.103+1 |
21.53.112 |
21.0.12.1.101+1 |
23.0.8.0.101+101 |
17.69.114 (SA) |
Out-of-Cycle for CPU |
17.0.20.1.103+1 |
17.69.112 |
17.0.20.1.101+1 |
22.0.10.0.101+101 |
11.91.114 (SA) |
Out-of-Cycle for CPU |
11.0.32.1.103+1 |
11.91.112 |
11.0.32.1.101+1 |
19.0.16.0.101+101 |
8.97.0.112 (SA) |
Out-of-Cycle for CPU |
8u511-b103 |
8.97.0.110 |
8u511-b01 |
8u511-b03 |
7.89.0.112 (SA) |
Out-of-Cycle for CPU |
7u521-b103 |
7.89.0.110 |
7u521-b01 |
N/A |
6.83.0.110 (SA) |
Out-of-Cycle for CPU |
6b193 |
6.83.0.108 |
6b191 |
N/A |
Based on the July CPU and its subsequent CSPU for CPU updates
Azul Zulu Version (*) |
Update Type (**) |
JDK VersionThe JDK version that is used in this release of Azul Zulu. |
Based onThe previous version of Azul Zulu that was used as the basis for the current version. |
JavaFX VersionThe version of JavaFX that is included in this release of Azul Zulu. JavaFX is available in the bundles with the |
|
|---|---|---|---|---|---|
Azul Zulu Version |
JDK Version |
||||
25.35.304 (SA) |
Out-of-Cycle for CPU |
25.0.3.0.202+1 |
25.35.302 |
25.0.3.0.201+1 |
25.0.3.0.101+101 |
21.51.304 (SA) |
Out-of-Cycle for CPU |
21.0.11.0.202+1 |
21.51.302 |
21.0.11.0.201+1 |
23.0.7.0.101+101 |
17.67.304 (SA) |
Out-of-Cycle for CPU |
17.0.19.0.202+1 |
17.67.302 |
17.0.19.0.201+1 |
22.0.9.0.101+101 |
11.89.304 (SA) |
Out-of-Cycle for CPU |
11.0.31.0.202+1 |
11.89.302 |
11.0.31.0.201+1 |
19.0.15.0.101+101 |
8.95.0.304 (SA) |
Out-of-Cycle for CPU |
8u503-b101 |
8.95.0.302 |
8u503-b01 |
8u501-b02 |
7.87.0.302 (SA) |
Out-of-Cycle for CPU |
7u515-b01 |
7.87.0.302 |
7u513-b01 |
N/A |
6.81.0.302 (SA) |
Out-of-Cycle for CPU |
6b185 |
6.81.0.302 |
6b183 |
N/A |
(*) Azul provides two types of distribution packages for each Java version:
-
Subscriber Availability (SA) distributions are tested, certified, and commercially supported Azul Zulu Builds of OpenJDK. Azul ensures that the software that uses the Accessible APIs of the product doesn’t have to include specific licenses and that such a use doesn’t contaminate the code or intellectual property of such software with any license requirements. SA builds may support configurations and features that are unavailable to free users.
-
Community Availability (CA) distributions are Azul Zulu Builds of OpenJDK that are free to download and use.
|
Note
|
Both SA and CA distributions may contain Early Access builds noted with -ea- in their filename. Early Access builds may not be TCK certified.
|
(**) Update type:
-
CSPU (Critical Security Patch Update): Contains fixes to critical issues and security vulnerabilities, delivered on a monthly basis between regular quarterly update releases.
-
CSPU for CPU: Critical security patches applied to the latest quarterly CPU release.
-
CSPU for PSU: Critical security patches applied to the latest quarterly PSU release.
-
-
Out-of-Cycle for CPU: An update release published outside the regular quarterly schedule, based on a quarterly CPU release. It contains the content of that CPU, any CSPU-for-CPU fixes released since that CPU for the same package types, any earlier out-of-cycle update content, and the fix described in the "What’s New" section of this document.
-
CPU (Critical Patch Updates) contain fixes to security vulnerabilities and critical bug fixes. Azul Zulu CPU releases are generally based on prior-cycle PSU releases, with only security fixes applied. They provide a low-risk vehicle for the potentially urgent deployment of security fixes when issues of sufficient severity arise. CPU releases are available in SA distributions.
-
PSU (Patch Set Updates) incorporates all fixes in the corresponding CPU, as well as additional non-security bug fixes. Azul Zulu PSU releases incorporate both security fixes and other changes that align the release contents with the associated OpenJDK project quarterly release. PSU releases are available in SA and CA distributions.
What’s New
This update release removes certain CA certificates from the cacerts truststore of all Azul Zulu Builds listed in this document. It fixes a security issue related to the eMudhra Intermediate CA Compromise addressed in the Out-of-Cycle, October 21, 2026 Update.