CVE catalog

CVE-2021-35556

openjdk-17: CVE-2021-35556

Severity: Medium · CVSS 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Published: Oct 19, 2021, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 8.39% · Oct 25, 2026

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	openjdk-17	sid	`17.0.21+9-1`	fixed
Debian	openjdk-17	bookworm	`17.0.19+10-1~deb12u2`	fixed
Debian	openjdk-17	bookworm-security	`17.0.21+9-1~deb12u1`	fixed
Opensuse	java-15-openjdk	tumbleweed	`15.0.5.0-1.1`	fixed
Ubuntu	openjdk-8	pro	`8u66-b01-5`	vulnerable
Ubuntu	openjdk-8	pro	`8u72-b05-1ubuntu1`	vulnerable
Ubuntu	openjdk-8	pro	`8u72-b05-5`	vulnerable
Ubuntu	openjdk-8	pro	`8u72-b05-6`	vulnerable
Ubuntu	openjdk-8	pro	`8u72-b15-1`	vulnerable
Ubuntu	openjdk-8	pro	`8u72-b15-2ubuntu1`	vulnerable
Ubuntu	openjdk-8	pro	`8u72-b15-2ubuntu3`	vulnerable
Ubuntu	openjdk-8	pro	`8u72-b15-3ubuntu1`	vulnerable
Ubuntu	openjdk-8	pro	`8u77-b03-1ubuntu2`	vulnerable
Ubuntu	openjdk-8	pro	`8u77-b03-3ubuntu1`	vulnerable
Ubuntu	openjdk-8	pro	`8u77-b03-3ubuntu2`	vulnerable
Ubuntu	openjdk-8	pro	`8u77-b03-3ubuntu3`	vulnerable
Ubuntu	openjdk-8	pro	`8u91-b14-0ubuntu4~16.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u91-b14-3ubuntu1~16.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u111-b14-2ubuntu0.16.04.2`	vulnerable
Ubuntu	openjdk-8	pro	`8u121-b13-0ubuntu1.16.04.2`	vulnerable
Ubuntu	openjdk-8	pro	`8u131-b11-0ubuntu1.16.04.2`	vulnerable
Ubuntu	openjdk-8	pro	`8u131-b11-2ubuntu1.16.04.2`	vulnerable
Ubuntu	openjdk-8	pro	`8u131-b11-2ubuntu1.16.04.3`	vulnerable
Ubuntu	openjdk-8	pro	`8u151-b12-0ubuntu0.16.04.2`	vulnerable
Ubuntu	openjdk-8	pro	`8u162-b12-0ubuntu0.16.04.2`	vulnerable
Ubuntu	openjdk-8	pro	`8u171-b11-0ubuntu0.16.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u181-b13-0ubuntu0.16.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u181-b13-1ubuntu0.16.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u191-b12-0ubuntu0.16.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u191-b12-2ubuntu0.16.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u212-b03-0ubuntu1.16.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u222-b10-1ubuntu1~16.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u232-b09-0ubuntu1~16.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u242-b08-0ubuntu3~16.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u252-b09-1~16.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u265-b01-0ubuntu2~16.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u272-b10-0ubuntu1~16.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u275-b01-0ubuntu1~16.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u282-b08-0ubuntu1~16.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u292-b10-0ubuntu1~16.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u312-b07-0ubuntu1~16.04`	fixed
Ubuntu	openjdk-9	16.04	`9~b88-1`	vulnerable
Ubuntu	openjdk-9	16.04	`9~b101-2ubuntu2`	vulnerable
Ubuntu	openjdk-9	16.04	`9~b102-1`	vulnerable
Ubuntu	openjdk-9	16.04	`9~b113-0ubuntu1`	vulnerable
Ubuntu	openjdk-9	16.04	`9~b114-0ubuntu1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u144-b01-2`	vulnerable
Ubuntu	openjdk-8	18.04	`8u151-b12-1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u162-b12-1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u171-b11-0ubuntu0.18.04.1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u181-b13-0ubuntu0.18.04.1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u181-b13-1ubuntu0.18.04.1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u191-b12-0ubuntu0.18.04.1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u191-b12-2ubuntu0.18.04.1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u212-b03-0ubuntu1.18.04.1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u222-b10-1ubuntu1~18.04.1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u232-b09-0ubuntu1~18.04.1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u242-b08-0ubuntu3~18.04`	vulnerable
Ubuntu	openjdk-8	18.04	`8u252-b09-1~18.04`	vulnerable
Ubuntu	openjdk-8	18.04	`8u265-b01-0ubuntu2~18.04`	vulnerable
Ubuntu	openjdk-8	18.04	`8u272-b10-0ubuntu1~18.04`	vulnerable
Ubuntu	openjdk-8	18.04	`8u275-b01-0ubuntu1~18.04`	vulnerable
Ubuntu	openjdk-8	18.04	`8u282-b08-0ubuntu1~18.04`	vulnerable
Ubuntu	openjdk-8	18.04	`8u292-b10-0ubuntu1~18.04`	vulnerable
Ubuntu	openjdk-8	18.04	`8u312-b07-0ubuntu1~18.04`	fixed
Ubuntu	openjdk-lts	18.04	`9.0.4+12-2ubuntu4`	vulnerable
Ubuntu	openjdk-lts	18.04	`9.0.4+12-4ubuntu1`	vulnerable
Ubuntu	openjdk-lts	18.04	`10~46-4ubuntu1`	vulnerable
Ubuntu	openjdk-lts	18.04	`10~46-5ubuntu1`	vulnerable
Ubuntu	openjdk-lts	18.04	`10.0.1+10-1ubuntu2`	vulnerable
Ubuntu	openjdk-lts	18.04	`10.0.1+10-3ubuntu1`	vulnerable
Ubuntu	openjdk-lts	18.04	`10.0.2+13-1ubuntu0.18.04.1`	vulnerable
Ubuntu	openjdk-lts	18.04	`10.0.2+13-1ubuntu0.18.04.2`	vulnerable
Ubuntu	openjdk-lts	18.04	`10.0.2+13-1ubuntu0.18.04.3`	vulnerable
Ubuntu	openjdk-lts	18.04	`10.0.2+13-1ubuntu0.18.04.4`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.2+9-3ubuntu1~18.04.3`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.3+7-1ubuntu2~18.04.1`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.4+11-1ubuntu2~18.04.3`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.5+10-0ubuntu1.1~18.04`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.6+10-1ubuntu1~18.04.1`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.7+10-2ubuntu2~18.04`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.8+10-0ubuntu1~18.04.1`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.9+11-0ubuntu1~18.04.1`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.9.1+1-0ubuntu1~18.04`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.10+9-0ubuntu1~18.04`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.11+9-0ubuntu2~18.04`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.13+8-0ubuntu1~18.04`	fixed
Ubuntu	openjdk-8	20.04	`8u232-b09-0ubuntu1`	vulnerable
Ubuntu	openjdk-8	20.04	`8u232-b09-1`	vulnerable
Ubuntu	openjdk-8	20.04	`8u242-b04-1`	vulnerable
Ubuntu	openjdk-8	20.04	`8u242-b08-0ubuntu3`	vulnerable
Ubuntu	openjdk-8	20.04	`8u252-b07-1`	vulnerable
Ubuntu	openjdk-8	20.04	`8u252-b09-1ubuntu1`	vulnerable
Ubuntu	openjdk-8	20.04	`8u265-b01-0ubuntu2~20.04`	vulnerable
Ubuntu	openjdk-8	20.04	`8u272-b10-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-8	20.04	`8u275-b01-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-8	20.04	`8u282-b08-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-8	20.04	`8u292-b10-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-8	20.04	`8u312-b07-0ubuntu1~20.04`	fixed
Ubuntu	openjdk-lts	20.04	`11.0.5+10-0ubuntu1`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.5+10-2ubuntu1`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.6+10-1ubuntu1`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.6+10-2ubuntu2`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.7+9-1ubuntu1`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.7+10-2ubuntu1`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.7+10-3ubuntu1`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.8+10-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.9+11-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.9.1+1-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.10+9-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.11+9-0ubuntu2~20.04`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.13+8-0ubuntu1~20.04`	fixed
Ubuntu	openjdk-13	20.04	`13+33-1`	vulnerable
Ubuntu	openjdk-13	20.04	`13.0.1+9-2`	vulnerable
Ubuntu	openjdk-13	20.04	`13.0.2+8-1`	vulnerable
Ubuntu	openjdk-13	20.04	`13.0.2+8-2`	vulnerable
Ubuntu	openjdk-13	20.04	`13.0.3+3-1ubuntu2`	vulnerable
Ubuntu	openjdk-13	20.04	`13.0.4+8-1~20.04`	vulnerable
Ubuntu	openjdk-13	20.04	`13.0.7+5-0ubuntu1~20.04`	vulnerable
Opensuse	java-17-openjdk	tumbleweed	`17.0.1.0-1.1`	fixed
Opensuse	java-13-openjdk	tumbleweed	`13.0.9.0-1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	openjdk-17	source	sid	`17.0.1+12-1`	not yet assigned	Not reported	Not reported
Debian	openjdk-17	source	bookworm	`17.0.1+12-1`	not yet assigned	Not reported	Not reported
Opensuse	java-15-openjdk	rpm	tumbleweed	`15.0.5.0-1.1`	Not reported	OPENSUSE-SU-2024:11584-1	Not reported
Ubuntu	openjdk-8	deb	pro	`8u312-b07-0ubuntu1~16.04`	Not reported	UBUNTU-CVE-2021-35556	Not reported
Ubuntu	openjdk-8	deb	18.04	`8u312-b07-0ubuntu1~18.04`	Not reported	UBUNTU-CVE-2021-35556	Not reported
Ubuntu	openjdk-lts	deb	18.04	`11.0.13+8-0ubuntu1~18.04`	Not reported	UBUNTU-CVE-2021-35556	Not reported
Ubuntu	openjdk-8	deb	20.04	`8u312-b07-0ubuntu1~20.04`	Not reported	UBUNTU-CVE-2021-35556	Not reported
Ubuntu	openjdk-lts	deb	20.04	`11.0.13+8-0ubuntu1~20.04`	Not reported	UBUNTU-CVE-2021-35556	Not reported
Opensuse	java-17-openjdk	rpm	tumbleweed	`17.0.1.0-1.1`	Not reported	OPENSUSE-SU-2024:11587-1	Not reported
Opensuse	java-13-openjdk	rpm	tumbleweed	`13.0.9.0-1.1`	Not reported	OPENSUSE-SU-2024:11583-1	Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

[java-17-openjdk-demo]Unknown
Source package: [java-17-openjdk]
Details (1)
- 17.0.20.1-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 17.0.1.0-1.1
  Version impact unknown
  dsa · java-17-openjdk · opensuse · tumbleweed
[java-17-openjdk-devel]Unknown
Source package: [java-17-openjdk]
Details (1)
- 17.0.20.1-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 17.0.1.0-1.1
  Version impact unknown
  dsa · java-17-openjdk · opensuse · tumbleweed
[java-17-openjdk-headless]Unknown
Source package: [java-17-openjdk]
Details (1)
- 17.0.20.1-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 17.0.1.0-1.1
  Version impact unknown
  dsa · java-17-openjdk · opensuse · tumbleweed
[java-17-openjdk-javadoc]Unknown
Source package: [java-17-openjdk]
Details (1)
- 17.0.20.1-1.1 · noarch · tumbleweed
  Unknown · Fixed: 17.0.1.0-1.1
  Version impact unknown
  dsa · java-17-openjdk · opensuse · tumbleweed
[java-17-openjdk-jmods]Unknown
Source package: [java-17-openjdk]
Details (1)
- 17.0.20.1-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 17.0.1.0-1.1
  Version impact unknown
  dsa · java-17-openjdk · opensuse · tumbleweed
[java-17-openjdk-src]Unknown
Source package: [java-17-openjdk]
Details (1)
- 17.0.20.1-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 17.0.1.0-1.1
  Version impact unknown
  dsa · java-17-openjdk · opensuse · tumbleweed
[java-17-openjdk]Fixed
Source package: [java-17-openjdk]
Details (1)
- 17.0.20.1-1.1 · x86_64 · tumbleweed
  Fixed · Fixed: 17.0.1.0-1.1
  dsa · java-17-openjdk · opensuse · tumbleweed

[Debian 12 (Bookworm)]

[openjdk-17-dbg]Fixed
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-demo]Fixed
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-doc]Fixed
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · all · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · all · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-jdk]Fixed
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-jdk-headless]Fixed
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-jre]Fixed
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-jre-headless]Fixed
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-jre-zero]Fixed
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-source]Fixed
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · all · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · all · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12

Observed: Oct 23, 2026, 5:58:32 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]