-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4757-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 26, 2026 https://wiki.debian.org/LTS - -------------------------------------------------------------------------
Package : openjdk-17 Version : 17.0.20.1+1-1~deb11u1 17.0.20.1+1-1~deb12u1 CVE ID : CVE-2026-60589 CVE-2026-61308 CVE-2026-70907 Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service or information disclosure. For Debian 11 bullseye, these problems have been fixed in version 17.0.20.1+1-1~deb11u1. For Debian 12 bookworm, these problems have been fixed in version 17.0.20.1+1-1~deb12u1. We recommend that you upgrade your openjdk-17 packages. For the detailed security status of openjdk-17 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/openjdk-17 Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAmqO/LwACgkQnUbEiOQ2 gwLbURAAjZnDOQmP+/7ZXiQdmgqmePAb1JIsibZjl07QYupGdmsl1P2vwUPmTI4W mn2+L8so8cSGKBF8teWWsPIVeZHZmPGn1fqS4q+freLD7tBnICw9yQVjjpgHptrD OlFM0lJPvEOTKvDPsiZoACQy+1z3xPBM9gUEMpXKzLdNQggnD9KPSTE6M84NLwkg giyV6MbruHGqOe8cdFf1u7kCta/k7BXiHrQudYhRvhiAxREMJE35XuJqCUiq9MRg sQJF4PuKiee+k3GfEGofUKaJxhhJJcD2uvAJM0U/6kiFIDkGMApDS/7U+OKhKuUk A9GykAn9jNmW4tri/Z8sMhzgmK0xJFA/B8AjQA4fG93qJksqJiTXLteqKzYoO0hD ciCrv31sx1rb3/dhPI/cnUAocCg63E6LuEH8Xd3snfKEUP8F2hbt5DC53iVwoO1u gpTh32d2NKSbqdiu7NnipPPFQF2HlqRXyNCIMuAov7TR75uGLb07710RuKW5cQA2 ZZRRpM7WOMuYtPEY6JJTo106vMwDIq/mfzmEEkZoLyc9L2hnj9Anns7rFcCbKE92 2RpUYgTjn9ARYTwd4uVYkMcBwuaz9g58UB4bEhMiuICqRpUAXgIbTwuk3a8LqX4c LbU6vAGau763Ox6tZ0LkGkUc1gu+ZZn3N/SVdXNmef/2PeRSBxE= =GKo2 -----END PGP SIGNATURE-----
