diff --git a/jdk-jdk17-jdk-17+35.tar.gz b/jdk-updates-jdk17u-jdk-17.0.1+12.tar.gz
similarity index 99%
rename from jdk-jdk17-jdk-17+35.tar.gz
rename to jdk-updates-jdk17u-jdk-17.0.1+12.tar.gz
index 5d6d0442fc273017e80c2b07e1dbb16b6359103f..7389e52a3f4f2dcc7f494e3b9db74a9a0c21ab76 100644
Binary files a/jdk-jdk17-jdk-17+35.tar.gz and b/jdk-updates-jdk17u-jdk-17.0.1+12.tar.gz differ
diff --git a/openjdk-latest.spec b/openjdk-latest.spec
index a413c85fccb33a774d4030ab2936e1605b847c8d..9c109e09e14f6672d8d65b4abb471ebd1bccda0f 100644
--- a/openjdk-latest.spec
+++ b/openjdk-latest.spec
@@ -155,7 +155,7 @@
 # Used via new version scheme. JDK 17 was
 # GA'ed in March 2021 => 21.9
 %global vendor_version_string 21.9
-%global securityver 0
+%global securityver 1
 # buildjdkver is usually same as %%{majorver},
 # but in time of bootstrap of next jdk, it is majorver-1, 
 # and this it is better to change it here, on single place
@@ -170,8 +170,8 @@
 %global origin_nice     OpenJDK
 %global top_level_dir_name   %{origin}
 %global minorver        0
-%global buildver        35
-%global rpmrelease      1
+%global buildver        12
+%global rpmrelease      0
 # priority must be 8 digits in total; up to openjdk 1.8, we were using 18..... so when we moved to 11, we had to add another digit
 %if %is_system_jdk
 %global priority %( printf '%02d%02d%02d%02d' %{majorver} %{minorver} %{securityver} %{buildver} )
@@ -918,7 +918,7 @@ URL:      http://openjdk.java.net/
 
 # to regenerate source0 (jdk) and source8 (jdk's taspets) run update_package.sh
 # update_package.sh contains hard-coded repos, revisions, tags, and projects to regenerate the source archives
-Source0: jdk-jdk%{majorver}-jdk-%{filever}+%{buildver}.tar.gz
+Source0: jdk-updates-jdk%{majorver}u-jdk-%{filever}+%{buildver}.tar.gz
 Source8: systemtap_3.2_tapsets_hg-icedtea8-9d464368e06d.tar.xz
 
 # Desktop files. Adapted from IcedTea
@@ -1732,6 +1732,9 @@ require "copy_jdk_configs.lua"
 
 
 %changelog
+* Fri Nov 12 2021 noah <hedongbo@huawei.com> - 1:17.0.1.12-0-rolling
+- Update to jdk-17.0.1+12
+
 * Thu Nov 11 2021 noah <hedongbo@huawei.com> - 1:17.0.0.35-1-rolling
 - Bumped buildjdkver to build by itself - 17
 
diff --git a/sources b/sources
index c0f70cfb0762c983d737c1513dfd69dbedcbacb1..8243c354f3cef70177dc4849d248e0069e285e09 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (jdk-updates-jdk16u-jdk-16.0.1+9.tar.gz) = af49ec97557bb40b09fc5a04a4295b3f5c2c51848b398ed400630c9f3628a9c9e674c67e7394c1dd35093d910a0e1cb76af3a279c57d507c6327ec90ccd78072
+SHA512 (jdk-updates-jdk16u-jdk-17.0.1+12.tar.gz) = 872cde89ff936fe782b463df500de62a8e3b5d342652106ad590bb9ef669d7f0c3acc68311cbe7231cbc0f916bdb4bd0d61d3cf2dcf39b72ec44ffb4c2ceae48
 SHA512 (systemtap_3.2_tapsets_hg-icedtea8-9d464368e06d.tar.xz) = 9f5bbc1a6bf2ee44e4f846b0ef9c1cd93dc9cf01b17b17f31f081229c98222ee92897286a3d57e4b607de1ea4c6edc8d798e0887409ad60713b714daa8f4ee18