

Critical patch updates, which contain security vulnerability fixes, are announced one year in advance on Critical Patch Updates, Security Alerts and Third Party Bulletin.

The JRE expires whenever a new release with security vulnerability fixes becomes available. The security baselines for the Java Runtime Environment (JRE) at the time of the release of JDK 9.0.4 are specified in the following table: For more information, refer to Timezone Data Versions in the JRE Software. JDK 9.0.4 contains IANA time zone data version 2017c. Users of JDK 9 should update to JDK 10 between its release in March 2018 and the next planned Critical Update Release in April 2018. NOTE: This is the final planned release for JDK 9. Changes that apply to both bundles are presented in sections that do not have OpenJDK or Oracle JDK in their titles. Content that only applies to a specific bundle is presented in sections that contain either OpenJDK or Oracle JDK in their titles. This page provides release notes for both bundles.

