Home / mailings [SECURITY] [DSA 6591-1] openjdk-25 security update
Posted on 28 October 2026
Debian Security Advisory- -------------------------------------------------------------------------
Debian Security Advisory DSA-6591-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
October 28, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : openjdk-25
CVE ID : CVE-2026-83374 CVE-2026-83376 CVE-2026-83378 CVE-2026-83380
CVE-2026-83381 CVE-2026-83387 CVE-2026-83395 CVE-2026-83400
CVE-2026-87255 CVE-2026-87290 CVE-2026-87291 CVE-2026-87292
CVE-2026-87294 CVE-2026-87367 CVE-2026-91332 CVE-2026-91333
CVE-2026-91334 CVE-2026-91335 CVE-2026-91373 CVE-2026-91374
CVE-2026-91375 CVE-2026-91379 CVE-2026-91380 CVE-2026-91394
CVE-2026-91397 CVE-2026-91398 CVE-2026-91400 CVE-2026-91403
CVE-2026-91410 CVE-2026-91415 CVE-2026-91418 CVE-2026-91451
CVE-2026-91452 CVE-2026-91453 CVE-2026-91461 CVE-2026-91462
CVE-2026-91463 CVE-2026-91464 CVE-2026-91487 CVE-2026-101516
Several vulnerabilities have been discovered in the OpenJDK Java runtime,
which may result in denial of service, sandbox breakout, incomplete
certificate checks or information disclosure.
For the stable distribution (trixie), these problems have been fixed in
version 25.0.5+8-1~deb13u1.
We recommend that you upgrade your openjdk-25 packages.
For the detailed security status of openjdk-25 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/openjdk-25
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
