ELA-1882-1 openjdk-8 security update

multiple vulnerabilities

2026-11-09

Package	openjdk-8
Version	8u512-ga-1~deb9u1 (stretch)
Related CVEs	CVE-2026-83374 CVE-2026-83376 CVE-2026-83380 CVE-2026-83381 CVE-2026-83387 CVE-2026-83395 CVE-2026-83400 CVE-2026-87290 CVE-2026-87292 CVE-2026-87293 CVE-2026-87294 CVE-2026-87367 CVE-2026-91334 CVE-2026-91335 CVE-2026-91373 CVE-2026-91374 CVE-2026-91380 CVE-2026-91381 CVE-2026-91382 CVE-2026-91395 CVE-2026-91396 CVE-2026-91397 CVE-2026-91398 CVE-2026-91400 CVE-2026-91403 CVE-2026-91410 CVE-2026-91411 CVE-2026-91415 CVE-2026-91417 CVE-2026-91418 CVE-2026-91451 CVE-2026-91452 CVE-2026-91453 CVE-2026-91461 CVE-2026-91462 CVE-2026-91463 CVE-2026-91464 CVE-2026-101516 CVE-2026-114820

Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service, information disclosure, unauthorized access or bypass of sandbox restrictions.

For Debian 9 stretch, these problems have been fixed in version 8u512-ga-1~deb9u1.

We recommend that you upgrade your openjdk-8 packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.