Home / mailings [SECURITY] [DSA 6588-1] openjdk-21 security update
Posted on 27 October 2026
Debian Security Advisory- -------------------------------------------------------------------------
Debian Security Advisory DSA-6588-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
October 27, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : openjdk-21
CVE ID : CVE-2026-83374 CVE-2026-83376 CVE-2026-83378 CVE-2026-83380
CVE-2026-83381 CVE-2026-83387 CVE-2026-83395 CVE-2026-83400
CVE-2026-87290 CVE-2026-87291 CVE-2026-87292 CVE-2026-87294
CVE-2026-87367 CVE-2026-91332 CVE-2026-91333 CVE-2026-91334
CVE-2026-91335 CVE-2026-91373 CVE-2026-91374 CVE-2026-91375
CVE-2026-91379 CVE-2026-91380 CVE-2026-91382 CVE-2026-91394
CVE-2026-91397 CVE-2026-91398 CVE-2026-91400 CVE-2026-91403
CVE-2026-91410 CVE-2026-91411 CVE-2026-91415 CVE-2026-91418
CVE-2026-91451 CVE-2026-91452 CVE-2026-91453 CVE-2026-91461
CVE-2026-91462 CVE-2026-91463 CVE-2026-91464 CVE-2026-91487
Several vulnerabilities have been discovered in the OpenJDK Java runtime,
which may result in denial of service, sandbox bypass, incomplete
certificate checks or information disclosure.
For the stable distribution (trixie), these problems have been fixed in
version 21.0.13+9-1~deb13u2.
We recommend that you upgrade your openjdk-21 packages.
For the detailed security status of openjdk-21 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/openjdk-21
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
