-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4457-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort January 26, 2026 https://wiki.debian.org/LTS - -------------------------------------------------------------------------
Package : openjdk-11 Version : 11.0.30+7-1~deb11u1 CVE ID : CVE-2026-21925 CVE-2026-21932 CVE-2026-21933 CVE-2026-21945 Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in incorrect certificate validation, CRLF injection or man-in-the-middle attacks. For Debian 11 bullseye, these problems have been fixed in version 11.0.30+7-1~deb11u1. We recommend that you upgrade your openjdk-11 packages. For the detailed security status of openjdk-11 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/openjdk-11 Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAml3h+4ACgkQnUbEiOQ2 gwI0JhAAybdeO6Jx1HCcEEzptTC7purYSEzu3u2q9tjrv6X92mBKKfhvvDcUJLcT ku6Zxw9NqGPC+s+Y5kMzeeXqhJ+c6rjeYYtDoQ8TnAZuDKQrgEdCTtm/495WRWp5 7EW0mRxc3XD6z+4LwKnp5BJbmHvYzFqaJ4go0Wv92slb4/IsifGDOca0pSx4T+3g UzihWanVtGDPlwmol1/lGnbmqFqX3IhXmph+OHcexnKA7xHBB3qD60kaQo0YiyIR TP1ye2jG9j+X5WRC80M7Hu3SCY9iY2SATKcHiagcVbfk/YfAOvLlXysoBREYM8e6 4QMIYsT+xPiZkUeM3CtIgjRkySpOpJq9juRDTV4gswjqWzwYBDesgAVVQfCU6vyK xG4wAAHdN+Z8MUWIsy7tvDKLcUlH+MRi3Nt3sMOq1BG1PMxANYsPTOhBklPhVpPm wWSfhwdWp7ykLGxBXM8CvwI8hbKx621K2dT68HD3yMyDhI0+9sm0/LD3b9/vVVvL cdA8uVas55adA1/2/4sveJ1oqmDtz5UdZ0AlWSEC54reR9qVS3icSzGGI4EQyRwr dgWYEHc6IMg4uCL6Hqy6sCo3ZzcDTD+Zfd5Tgr1+7VQEhmymgpmW7XkXOUCfMKLy luMQnPoRNtkMLAtYyPppHeVcFkQ2O4YOTQOUyg9A6KBpApMRuVw= =CVyh -----END PGP SIGNATURE-----
