[DSA 6460-1] openjdk-25 security update

Moritz Muehlenhoff <[email protected]>
Newsgroups gmane.linux.debian.user.security.announce
Message-ID <[email protected]>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6460-1                   [email protected]
https://www.debian.org/security/                       Moritz Muehlenhoff
August 23, 2026                       https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : openjdk-25
CVE ID         : CVE-2026-60589 CVE-2026-61308 CVE-2026-70906 CVE-2026-70907

Several vulnerabilities have been discovered in the OpenJDK Java runtime,
which may result in denial of service or information disclosure.

For the stable distribution (trixie), these problems have been fixed in
version 25.0.4.1+1-1~deb13u1.

We recommend that you upgrade your openjdk-25 packages.

For the detailed security status of openjdk-25 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/openjdk-25

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmqLHAEACgkQEMKTtsN8
TjZgKhAAgTNk/I61hfikgU3sqQ0DdNhvvMsKkfrYZgGQvpw3HZ2wpLzfN7fePH8k
apFziaX60v75ebRlhbQm8O9EQIarQsUNDkY7j/Ufj6H2vdMRyv+pGUtPORk17CLz
A6r9+8HgcRn9wyzci6zcOpHSwUvVwCR7zVNhHFQBapQLsnpfz0KJ0WtsrSkcgBXt
kNusWmHWZKPZrBjZWvK3TS7hyf9M3LOUjKbIdEGx5FlOAbnNhM/82iJQHsWJAAyn
r4l7HwjUHmPNaW0bdQnqwt0GQ/urVhdlgtXlqdU2ap2+It0M0KJYWwWbZ5s3vCOS
EoVZ8+F/paCuSu9L/zv2y+W/P/KTJUzxSb+vUiqRxoc6jS02FpWmf2jtJ3lOEXrH
iz5oOFa6YpS9xi+PnDafNOqY5XToSK6ILFZ/Iod4njWiMHueFkOmFc3BVQywUlHR
Or++rNVpnazoV+X3GJa6yEVEPWApRSUexxJWVQwAmj/XP8+CxMV+ZXOMupGwG8LX
ebB9m802aImth3lKArhk8PbCnC5uCA9yJJIXZdl/Ot7rPx/2zZLjhfLE8tdhgcpI
elQFC55nl4WSJBV72jQp+kf+JGt5HK7ngWgG31paOA7p69nrxk0DRLj+1G94iD1m
3s+PB4ov90L2i2oA3e8wWIXZ972i1eZdNfQ2Ch6yLpOrCddaivU=
=428J
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.