ELA-1863-1 openjdk-17 security update

multiple vulnerabilities

2026-10-26

Package	openjdk-17
Version	17.0.21+9-1~deb11u1 (bullseye)
Related CVEs	CVE-2026-83374 CVE-2026-83376 CVE-2026-83380 CVE-2026-83381 CVE-2026-83387 CVE-2026-83395 CVE-2026-83400 CVE-2026-87290 CVE-2026-87292 CVE-2026-87294 CVE-2026-87367 CVE-2026-91332 CVE-2026-91334 CVE-2026-91335 CVE-2026-91373 CVE-2026-91374 CVE-2026-91375 CVE-2026-91379 CVE-2026-91380 CVE-2026-91382 CVE-2026-91394 CVE-2026-91397 CVE-2026-91398 CVE-2026-91400 CVE-2026-91410 CVE-2026-91411 CVE-2026-91415 CVE-2026-91418 CVE-2026-91451 CVE-2026-91452 CVE-2026-91453 CVE-2026-91461 CVE-2026-91462 CVE-2026-91463 CVE-2026-91464 CVE-2026-91487

Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service, information disclosure, unauthorized access or bypass of sandbox restrictions.

For Debian 11 bullseye, these problems have been fixed in version 17.0.21+9-1~deb11u1.

We recommend that you upgrade your openjdk-17 packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.