ELA-1623-1 openjdk-11 security update

multiple vulnerabilities

2026-01-26
Packageopenjdk-11
Version11.0.30+7-1~deb10u1 (buster)
Related CVEs CVE-2026-21925 CVE-2026-21932 CVE-2026-21933 CVE-2026-21945


Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in incorrect certificate validation, CRLF injection or man-in-the-middle attacks.



For Debian 10 buster, these problems have been fixed in version 11.0.30+7-1~deb10u1.

We recommend that you upgrade your openjdk-11 packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.