-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4703-1 [email protected]
https://www.debian.org/lts/security/ Emilio Pozuelo Monfort
July 28, 2026 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------
Package : openjdk-17
Version : 17.0.20+8-1~deb11u1 17.0.20+8-1~deb12u1
CVE ID : CVE-2026-41254 CVE-2026-46917 CVE-2026-46968 CVE-2026-47010
CVE-2026-47021 CVE-2026-47027 CVE-2026-47059 CVE-2026-47063
CVE-2026-60147
Several vulnerabilities have been discovered in the OpenJDK Java
runtime, which may result in denial of service, information disclosure
or bypass of sandbox restrictions.
For Debian 11 bullseye, these problems have been fixed in version
17.0.20+8-1~deb11u1.
For Debian 12 bookworm, these problems have been fixed in version
17.0.20+8-1~deb12u1.
We recommend that you upgrade your openjdk-17 packages.
For the detailed security status of openjdk-17 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/openjdk-17
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----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=i80g
-----END PGP SIGNATURE-----
