OpenJDK will need to be updated across all versions of RHEL in January for the next quarterly security update. We should prepare for this by building and testing the upstream build promotions of OpenJDK which we release throughout November & December. This will reduce the amount of work that needs to be done during the critical period in early January, when the security patches are added.

We will include these build promotions in the most recent z-stream of each major RHEL version (currently 7.9-z, 8.7.0-z & 9.1.0-z), and current y-stream. Depending on scheduling, y-stream may need to be excluded if the expected GA occurs prior to the security update. This is not the case in January 2023. For z-stream, changes should wait until we know there are no batch updates to be shipped before the security update. For RHEL 9, the next batch update is currently not scheduled until the new year (2023-01-18), which is after the security update.