ELA-1655-1 openjdk-8 security update

multiple vulnerabilities

2026-03-05
Packageopenjdk-8
Version8u482-ga-1~deb9u1 (stretch)
Related CVEs CVE-2026-21925 CVE-2026-21932 CVE-2026-21933 CVE-2026-21945


Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in incorrect certificate validation, CRLF injection or man-in-the-middle attacks.



For Debian 9 stretch, these problems have been fixed in version 8u482-ga-1~deb9u1.

We recommend that you upgrade your openjdk-8 packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.