CVE catalog

CVE-2026-91395

openjdk-17: CVE-2026-91395

Severity: Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Published: Oct 20, 2026, 9:25:44 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.25% · Oct 25, 2026

(Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	openjdk-17	bookworm	Not reported	vulnerable
Debian	openjdk-17	12	`17.0.10+7-1`	vulnerable
Debian	openjdk-17	12	`17.0.10+7-1~deb11u1`	vulnerable
Debian	openjdk-17	12	`17.0.10+7-1~deb12u1`	vulnerable
Debian	openjdk-17	12	`17.0.10+7-2`	vulnerable
Debian	openjdk-17	12	`17.0.10+7-3`	vulnerable
Debian	openjdk-17	12	`17.0.10~6ea-1`	vulnerable
Debian	openjdk-17	12	`17.0.11+9-1`	vulnerable
Debian	openjdk-17	12	`17.0.11+9-1~deb11u1`	vulnerable
Debian	openjdk-17	12	`17.0.11+9-1~deb12u1`	vulnerable
Debian	openjdk-17	12	`17.0.11~6ea-1`	vulnerable
Debian	openjdk-17	12	`17.0.11~7ea-1`	vulnerable
Debian	openjdk-17	12	`17.0.12+7-1`	vulnerable
Debian	openjdk-17	12	`17.0.12+7-2`	vulnerable
Debian	openjdk-17	12	`17.0.12+7-2~deb11u1`	vulnerable
Debian	openjdk-17	12	`17.0.12+7-2~deb12u1`	vulnerable
Debian	openjdk-17	12	`17.0.12~6ea-1`	vulnerable
Debian	openjdk-17	12	`17.0.13+11-1`	vulnerable
Debian	openjdk-17	12	`17.0.13+11-1~deb11u1`	vulnerable
Debian	openjdk-17	12	`17.0.13+11-1~deb12u1`	vulnerable
Debian	openjdk-17	12	`17.0.13+11-2`	vulnerable
Debian	openjdk-17	12	`17.0.13+11-2~deb12u1`	vulnerable
Debian	openjdk-17	12	`17.0.13~6ea-1`	vulnerable
Debian	openjdk-17	12	`17.0.14+7-1`	vulnerable
Debian	openjdk-17	12	`17.0.14+7-1~deb11u1`	vulnerable
Debian	openjdk-17	12	`17.0.14+7-1~deb12u1`	vulnerable
Debian	openjdk-17	12	`17.0.14~6ea-1`	vulnerable
Debian	openjdk-17	12	`17.0.15+6-1`	vulnerable
Debian	openjdk-17	12	`17.0.15+6-1~deb11u1`	vulnerable
Debian	openjdk-17	12	`17.0.15+6-1~deb12u1`	vulnerable
Debian	openjdk-17	12	`17.0.15~4ea-1`	vulnerable
Debian	openjdk-17	12	`17.0.15~5ea-1`	vulnerable
Debian	openjdk-17	12	`17.0.16+8-1`	vulnerable
Debian	openjdk-17	12	`17.0.16+8-1~deb11u1`	vulnerable
Debian	openjdk-17	12	`17.0.16+8-1~deb12u1`	vulnerable
Debian	openjdk-17	12	`17.0.16~5ea-1`	vulnerable
Debian	openjdk-17	12	`17.0.17+10-1`	vulnerable
Debian	openjdk-17	12	`17.0.17+10-1~deb11u1`	vulnerable
Debian	openjdk-17	12	`17.0.17+10-1~deb12u1`	vulnerable
Debian	openjdk-17	12	`17.0.17~5ea-1`	vulnerable
Debian	openjdk-17	12	`17.0.17~8ea-1`	vulnerable
Debian	openjdk-17	12	`17.0.18+8-1`	vulnerable
Debian	openjdk-17	12	`17.0.18+8-1~deb11u1`	vulnerable
Debian	openjdk-17	12	`17.0.18+8-1~deb12u1`	vulnerable
Debian	openjdk-17	12	`17.0.18~7ea-1`	vulnerable
Debian	openjdk-17	12	`17.0.19+10-1`	vulnerable
Debian	openjdk-17	12	`17.0.19+10-1~deb11u1`	vulnerable
Debian	openjdk-17	12	`17.0.19+10-1~deb12u1`	vulnerable
Debian	openjdk-17	12	`17.0.19+10-1~deb12u2`	vulnerable
Debian	openjdk-17	12	`17.0.19~6ea-1`	vulnerable
Debian	openjdk-17	12	`17.0.19~9ea-1`	vulnerable
Debian	openjdk-17	12	`17.0.19~9ea-2`	vulnerable
Debian	openjdk-17	12	`17.0.20+8-1`	vulnerable
Debian	openjdk-17	12	`17.0.20+8-1~deb11u1`	vulnerable
Debian	openjdk-17	12	`17.0.20+8-1~deb12u1`	vulnerable
Debian	openjdk-17	12	`17.0.20+8-2`	vulnerable
Debian	openjdk-17	12	`17.0.20.1+1-1`	vulnerable
Debian	openjdk-17	12	`17.0.20.1+1-1~deb11u1`	vulnerable
Debian	openjdk-17	12	`17.0.20.1+1-1~deb12u1`	vulnerable
Debian	openjdk-17	12	`17.0.20~5ea-1`	vulnerable
Debian	openjdk-17	12	`17.0.20~7ea-1`	vulnerable
Debian	openjdk-17	12	`17.0.21~6ea-1`	vulnerable
Debian	openjdk-17	12	`17.0.21~8ea-1`	vulnerable
Debian	openjdk-17	12	`17.0.6+10-1`	vulnerable
Debian	openjdk-17	12	`17.0.7+7-1`	vulnerable
Debian	openjdk-17	12	`17.0.7+7-1~deb11u1`	vulnerable
Debian	openjdk-17	12	`17.0.7+7-1~deb12u1`	vulnerable
Debian	openjdk-17	12	`17.0.7+7-2`	vulnerable
Debian	openjdk-17	12	`17.0.8+7-1`	vulnerable
Debian	openjdk-17	12	`17.0.8+7-1~deb12u1`	vulnerable
Debian	openjdk-17	12	`17.0.8~6-1`	vulnerable
Debian	openjdk-17	12	`17.0.8~6-2`	vulnerable
Debian	openjdk-17	12	`17.0.8~6-3`	vulnerable
Debian	openjdk-17	12	`17.0.8~6-4`	vulnerable
Debian	openjdk-17	12	`17.0.8~6-5`	vulnerable
Debian	openjdk-17	12	`17.0.9+9-1`	vulnerable
Debian	openjdk-17	12	`17.0.9+9-1~deb11u1`	vulnerable
Debian	openjdk-17	12	`17.0.9+9-1~deb12u1`	vulnerable
Debian	openjdk-17	12	`17.0.9+9-2`	vulnerable
Debian	openjdk-17	12	`17.0.9~4ea-1`	vulnerable
Debian	openjdk-17	12	`17.0.9~6ea-1`	vulnerable
Debian	openjdk-21	13	`21.0.10+7-1`	vulnerable
Debian	openjdk-21	13	`21.0.10+7-1~deb13u1`	vulnerable
Debian	openjdk-21	13	`21.0.10~4ea-1`	vulnerable
Debian	openjdk-21	13	`21.0.10~6ea-1`	vulnerable
Debian	openjdk-21	13	`21.0.11+10-1`	vulnerable
Debian	openjdk-21	13	`21.0.11+10-1~deb13u1`	vulnerable
Debian	openjdk-21	13	`21.0.11+10-1~deb13u2`	vulnerable
Debian	openjdk-21	13	`21.0.11~5ea-1`	vulnerable
Debian	openjdk-21	13	`21.0.11~6ea-1`	vulnerable
Debian	openjdk-21	13	`21.0.11~8ea-1`	vulnerable
Debian	openjdk-21	13	`21.0.11~9ea-1`	vulnerable
Debian	openjdk-21	13	`21.0.11~9ea-2`	vulnerable
Debian	openjdk-21	13	`21.0.12+8-1`	vulnerable
Debian	openjdk-21	13	`21.0.12+8-1~deb13u1`	vulnerable
Debian	openjdk-21	13	`21.0.12+8-2`	vulnerable
Debian	openjdk-21	13	`21.0.12.1+1-1`	vulnerable
Debian	openjdk-21	13	`21.0.12.1+1-1~deb13u1`	vulnerable
Debian	openjdk-21	13	`21.0.12~5ea-1`	vulnerable
Debian	openjdk-21	13	`21.0.12~7ea-1`	vulnerable
Debian	openjdk-21	13	`21.0.13~6ea-1`	vulnerable
Debian	openjdk-21	13	`21.0.13~8ea-1`	vulnerable
Debian	openjdk-21	13	`21.0.8+9-1`	vulnerable
Debian	openjdk-21	13	`21.0.9+10-1`	vulnerable
Debian	openjdk-21	13	`21.0.9+10-1~deb13u1`	vulnerable
Debian	openjdk-21	13	`21.0.9~5ea-1`	vulnerable
Debian	openjdk-21	13	`21.0.9~8ea-1`	vulnerable
Debian	openjdk-21	14	`21.0.10+7-1`	vulnerable
Debian	openjdk-21	14	`21.0.10+7-1~deb13u1`	vulnerable
Debian	openjdk-21	14	`21.0.10~4ea-1`	vulnerable
Debian	openjdk-21	14	`21.0.10~6ea-1`	vulnerable
Debian	openjdk-21	14	`21.0.11+10-1`	vulnerable
Debian	openjdk-21	14	`21.0.11+10-1~deb13u1`	vulnerable
Debian	openjdk-21	14	`21.0.11+10-1~deb13u2`	vulnerable
Debian	openjdk-21	14	`21.0.11~5ea-1`	vulnerable
Debian	openjdk-21	14	`21.0.11~6ea-1`	vulnerable
Debian	openjdk-21	14	`21.0.11~8ea-1`	vulnerable
Debian	openjdk-21	14	`21.0.11~9ea-1`	vulnerable
Debian	openjdk-21	14	`21.0.11~9ea-2`	vulnerable
Debian	openjdk-21	14	`21.0.12+8-1`	vulnerable
Debian	openjdk-21	14	`21.0.12+8-1~deb13u1`	vulnerable
Debian	openjdk-21	14	`21.0.12+8-2`	vulnerable
Debian	openjdk-21	14	`21.0.12.1+1-1`	vulnerable
Debian	openjdk-21	14	`21.0.12.1+1-1~deb13u1`	vulnerable
Debian	openjdk-21	14	`21.0.12~5ea-1`	vulnerable
Debian	openjdk-21	14	`21.0.12~7ea-1`	vulnerable
Debian	openjdk-21	14	`21.0.13~6ea-1`	vulnerable
Debian	openjdk-21	14	`21.0.13~8ea-1`	vulnerable
Debian	openjdk-21	14	`21.0.8+9-1`	vulnerable
Debian	openjdk-21	14	`21.0.9+10-1`	vulnerable
Debian	openjdk-21	14	`21.0.9+10-1~deb13u1`	vulnerable
Debian	openjdk-21	14	`21.0.9~5ea-1`	vulnerable
Debian	openjdk-21	14	`21.0.9~8ea-1`	vulnerable
Ubuntu	openjdk-8	pro	`8u232-b09-0ubuntu1`	vulnerable
Ubuntu	openjdk-8	pro	`8u232-b09-1`	vulnerable
Ubuntu	openjdk-8	pro	`8u242-b04-1`	vulnerable
Ubuntu	openjdk-8	pro	`8u242-b08-0ubuntu3`	vulnerable
Ubuntu	openjdk-8	pro	`8u252-b07-1`	vulnerable
Ubuntu	openjdk-8	pro	`8u252-b09-1ubuntu1`	vulnerable
Ubuntu	openjdk-8	pro	`8u265-b01-0ubuntu2~20.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u272-b10-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u275-b01-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u282-b08-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u292-b10-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u312-b07-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u342-b07-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u352-ga-1~20.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u362-ga-0ubuntu1~20.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u372-ga~us1-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u382-ga-1~20.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u392-ga-1~20.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u402-ga-2ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u412-ga-1~20.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u422-b05-1~20.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u432-ga~us1-0ubuntu2~20.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u442-b06~us1-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u452-ga~us1-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u462-ga~us1-0ubuntu2~20.04.2`	vulnerable
Ubuntu	openjdk-8	pro	`8u472-ga-1~20.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u482-ga~us1-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u492-ga~us2-0ubuntu1~20.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u502-ga~us1-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u504-ga-1ubuntu1~20.04.3`	vulnerable
Ubuntu	openjdk-9	16.04	`9~b88-1`	vulnerable
Ubuntu	openjdk-9	16.04	`9~b101-2ubuntu2`	vulnerable
Ubuntu	openjdk-9	16.04	`9~b102-1`	vulnerable
Ubuntu	openjdk-9	16.04	`9~b113-0ubuntu1`	vulnerable
Ubuntu	openjdk-9	16.04	`9~b114-0ubuntu1`	vulnerable
Ubuntu	openjdk-lts	pro	`11.0.20+8-1ubuntu1`	vulnerable
Ubuntu	openjdk-lts	pro	`11.0.21+9-0ubuntu1`	vulnerable
Ubuntu	openjdk-lts	pro	`11.0.22+7-0ubuntu2`	vulnerable
Ubuntu	openjdk-lts	pro	`11.0.23~7ea-1ubuntu1`	vulnerable
Ubuntu	openjdk-lts	pro	`11.0.23~7ea-1ubuntu2`	vulnerable
Ubuntu	openjdk-lts	pro	`11.0.23+9-1ubuntu1`	vulnerable
Ubuntu	openjdk-lts	pro	`11.0.24+8-1ubuntu3~24.04.1`	vulnerable
Ubuntu	openjdk-lts	pro	`11.0.25+9-1ubuntu1~24.04`	vulnerable
Ubuntu	openjdk-lts	pro	`11.0.26+4-1ubuntu1~24.04`	vulnerable
Ubuntu	openjdk-lts	pro	`11.0.27+6~us1-0ubuntu1~24.04`	vulnerable
Ubuntu	openjdk-lts	pro	`11.0.28+6-1ubuntu1~24.04.1`	vulnerable
Ubuntu	openjdk-lts	pro	`11.0.29+7-1ubuntu1~24.04`	vulnerable
Ubuntu	openjdk-lts	pro	`11.0.30+7-1ubuntu1~24.04`	vulnerable
Ubuntu	openjdk-lts	pro	`11.0.31+11-1ubuntu1~24.04.2`	vulnerable
Ubuntu	openjdk-lts	pro	`11.0.32+9-1ubuntu1~24.04`	vulnerable
Ubuntu	openjdk-lts	pro	`11.0.32.1+1-1ubuntu1~24.04`	vulnerable
Ubuntu	openjdk-17	pro	`17+35-1~20.04`	vulnerable
Ubuntu	openjdk-17	pro	`17.0.1+12-1~20.04`	vulnerable
Ubuntu	openjdk-17	pro	`17.0.2+8-1~20.04`	vulnerable
Ubuntu	openjdk-17	pro	`17.0.3+7-0ubuntu0.20.04.1`	vulnerable
Ubuntu	openjdk-17	pro	`17.0.4+8-1~20.04`	vulnerable
Ubuntu	openjdk-17	pro	`17.0.5+8-2ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-17	pro	`17.0.6+10-0ubuntu1~20.04.1`	vulnerable
Ubuntu	openjdk-17	pro	`17.0.7+7~us1-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-17	pro	`17.0.8+7-1~20.04.2`	vulnerable
Ubuntu	openjdk-17	pro	`17.0.8.1+1~us1-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-17	pro	`17.0.9+9-1~20.04`	vulnerable
Ubuntu	openjdk-17	pro	`17.0.10+7-1~20.04.1`	vulnerable
Ubuntu	openjdk-17	pro	`17.0.11+9-1~20.04.2`	vulnerable
Ubuntu	openjdk-17	pro	`17.0.12+7-1ubuntu2~20.04`	vulnerable
Ubuntu	openjdk-17	pro	`17.0.13+11-2ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-17	pro	`17.0.14+7-1~20.04`	vulnerable
Ubuntu	openjdk-17	pro	`17.0.15+6~us1-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-17	pro	`17.0.16+8~us1-0ubuntu1~20.04.6`	vulnerable
Ubuntu	openjdk-17	pro	`17.0.17+10-1~20.04`	vulnerable
Ubuntu	openjdk-17	pro	`17.0.18+8-1~20.04`	vulnerable
Ubuntu	openjdk-17	pro	`17.0.19+10-1~20.04.2`	vulnerable
Ubuntu	openjdk-17	pro	`17.0.20+8-1~20.04`	vulnerable
Ubuntu	openjdk-17	pro	`17.0.20.1+1-1~20.04`	vulnerable
Ubuntu	openjdk-13	20.04	`13+33-1`	vulnerable
Ubuntu	openjdk-13	20.04	`13.0.1+9-2`	vulnerable
Ubuntu	openjdk-13	20.04	`13.0.2+8-1`	vulnerable
Ubuntu	openjdk-13	20.04	`13.0.2+8-2`	vulnerable
Ubuntu	openjdk-13	20.04	`13.0.3+3-1ubuntu2`	vulnerable
Ubuntu	openjdk-13	20.04	`13.0.4+8-1~20.04`	vulnerable
Ubuntu	openjdk-13	20.04	`13.0.7+5-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-16	20.04	`16.0.1+9-1~20.04`	vulnerable
Ubuntu	openjdk-21	pro	`21.0.1+12-2~20.04.1`	vulnerable
Ubuntu	openjdk-21	pro	`21.0.2+13-1~20.04.1`	vulnerable
Ubuntu	openjdk-21	pro	`21.0.3+9-1ubuntu1~20.04.1`	vulnerable
Ubuntu	openjdk-21	pro	`21.0.4+7-1ubuntu2~20.04`	vulnerable
Ubuntu	openjdk-21	pro	`21.0.5+11-1ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-21	pro	`21.0.6+7-1~20.04.1`	vulnerable
Ubuntu	openjdk-21	pro	`21.0.7+6~us1-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-21	pro	`21.0.8+9~us1-0ubuntu1~20.04.1`	vulnerable
Ubuntu	openjdk-21	pro	`21.0.9+10-1~20.04`	vulnerable
Ubuntu	openjdk-21	pro	`21.0.10+7-1~20.04`	vulnerable
Ubuntu	openjdk-21	pro	`21.0.11+10-1~20.04.2`	vulnerable
Ubuntu	openjdk-21	pro	`21.0.12+8-1~20.04`	vulnerable
Ubuntu	openjdk-21	pro	`21.0.12.1+1-1~20.04.4`	vulnerable
Ubuntu	openjdk-17	22.04	`17+35-1`	vulnerable
Ubuntu	openjdk-17	22.04	`17.0.1+12-1`	vulnerable
Ubuntu	openjdk-17	22.04	`17.0.2+8-1`	vulnerable
Ubuntu	openjdk-17	22.04	`17.0.3+7-0ubuntu0.22.04.1`	vulnerable
Ubuntu	openjdk-17	22.04	`17.0.4+8-1~22.04`	vulnerable
Ubuntu	openjdk-17	22.04	`17.0.5+8-2ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-17	22.04	`17.0.6+10-0ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-17	22.04	`17.0.7+7~us1-0ubuntu1~22.04.2`	vulnerable
Ubuntu	openjdk-17	22.04	`17.0.8+7-1~22.04`	vulnerable
Ubuntu	openjdk-17	22.04	`17.0.8.1+1~us1-0ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-17	22.04	`17.0.9+9-1~22.04`	vulnerable
Ubuntu	openjdk-17	22.04	`17.0.10+7-1~22.04.1`	vulnerable
Ubuntu	openjdk-17	22.04	`17.0.11+9-1~22.04.1`	vulnerable
Ubuntu	openjdk-17	22.04	`17.0.12+7-1ubuntu2~22.04`	vulnerable
Ubuntu	openjdk-17	22.04	`17.0.13+11-2ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-17	22.04	`17.0.14+7-1~22.04.1`	vulnerable
Ubuntu	openjdk-17	22.04	`17.0.15+6~us1-0ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-17	22.04	`17.0.16+8~us1-0ubuntu1~22.04.1`	vulnerable
Ubuntu	openjdk-17	22.04	`17.0.17+10-1~22.04`	vulnerable
Ubuntu	openjdk-17	22.04	`17.0.18+8-1~22.04.1`	vulnerable
Ubuntu	openjdk-17	22.04	`17.0.19+10-1~22.04.2`	vulnerable
Ubuntu	openjdk-17	22.04	`17.0.20+8-1~22.04`	vulnerable
Ubuntu	openjdk-17	22.04	`17.0.20.1+1-1~22.04`	vulnerable
Ubuntu	openjdk-18	22.04	`18~15ea-4`	vulnerable
Ubuntu	openjdk-18	22.04	`18~20ea-1`	vulnerable
Ubuntu	openjdk-18	22.04	`18~32ea-1`	vulnerable
Ubuntu	openjdk-18	22.04	`18~36ea-1`	vulnerable
Ubuntu	openjdk-18	22.04	`18.0.2+9-2~22.04`	vulnerable
Ubuntu	openjdk-21	22.04	`21.0.1+12-2~22.04`	vulnerable
Ubuntu	openjdk-21	22.04	`21.0.2+13-1~22.04.1`	vulnerable
Ubuntu	openjdk-21	22.04	`21.0.3+9-1ubuntu1~22.04.1`	vulnerable
Ubuntu	openjdk-21	22.04	`21.0.4+7-1ubuntu2~22.04`	vulnerable
Ubuntu	openjdk-21	22.04	`21.0.5+11-1ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-21	22.04	`21.0.6+7-1~22.04.1`	vulnerable
Ubuntu	openjdk-21	22.04	`21.0.7+6~us1-0ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-21	22.04	`21.0.8+9~us1-0ubuntu1~22.04.1`	vulnerable
Ubuntu	openjdk-21	22.04	`21.0.9+10-1~22.04`	vulnerable
Ubuntu	openjdk-21	22.04	`21.0.10+7-1~22.04`	vulnerable
Ubuntu	openjdk-21	22.04	`21.0.11+10-1~22.04.2`	vulnerable
Ubuntu	openjdk-21	22.04	`21.0.12+8-1~22.04`	vulnerable
Ubuntu	openjdk-21	22.04	`21.0.12.1+1-1~22.04.4`	vulnerable
Ubuntu	openjdk-25	22.04	`25+36-1~22.04.2`	vulnerable
Ubuntu	openjdk-25	22.04	`25.0.1+8-1~22.04`	vulnerable
Ubuntu	openjdk-25	22.04	`25.0.2+10-1~22.04`	vulnerable
Ubuntu	openjdk-25	22.04	`25.0.3+9-2~22.04.2`	vulnerable
Ubuntu	openjdk-25	22.04	`25.0.4+7-1~22.04`	vulnerable
Ubuntu	openjdk-25	22.04	`25.0.4.1+1-1~22.04.4`	vulnerable
Ubuntu	openjdk-8	22.04	`8u302-b08-0ubuntu2`	vulnerable
Ubuntu	openjdk-8	22.04	`8u312-b07-0ubuntu1`	vulnerable
Ubuntu	openjdk-8	22.04	`8u342-b07-0ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-8	22.04	`8u352-ga-1~22.04`	vulnerable
Ubuntu	openjdk-8	22.04	`8u362-ga-0ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-8	22.04	`8u372-ga~us1-0ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-8	22.04	`8u382-ga-1~22.04.1`	vulnerable
Ubuntu	openjdk-8	22.04	`8u392-ga-1~22.04`	vulnerable
Ubuntu	openjdk-8	22.04	`8u402-ga-2ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-8	22.04	`8u412-ga-1~22.04.1`	vulnerable
Ubuntu	openjdk-8	22.04	`8u422-b05-1~22.04`	vulnerable
Ubuntu	openjdk-8	22.04	`8u432-ga~us1-0ubuntu2~22.04`	vulnerable
Ubuntu	openjdk-8	22.04	`8u442-b06~us1-0ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-8	22.04	`8u452-ga~us1-0ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-8	22.04	`8u462-ga~us1-0ubuntu2~22.04.2`	vulnerable
Ubuntu	openjdk-8	22.04	`8u472-ga-1~22.04`	vulnerable
Ubuntu	openjdk-8	22.04	`8u482-ga~us1-0ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-8	22.04	`8u492-ga~us2-0ubuntu1~22.04.1`	vulnerable
Ubuntu	openjdk-8	22.04	`8u502-ga~us1-0ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-8	22.04	`8u504-ga-1ubuntu1~22.04.3`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.12+7-0ubuntu3`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.13+8-0ubuntu1`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.14+9-0ubuntu2`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.14.1+1-0ubuntu1`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.15+10-0ubuntu0.22.04.1`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.16+8-0ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.17+8-1ubuntu2~22.04`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.18+10-0ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.19+7~us1-0ubuntu1~22.04.1`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.20+8-1ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.20.1+1-0ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.21+9-0ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.22+7-0ubuntu2~22.04.1`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.23+9-1ubuntu1~22.04.1`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.24+8-1ubuntu3~22.04`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.25+9-1ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.26+4-1ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.27+6~us1-0ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.28+6-1ubuntu1~22.04.1`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.29+7-1ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.30+7-1ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.31+11-1ubuntu1~22.04.2`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.32+9-1ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-lts	22.04	`11.0.32.1+1-1ubuntu1~22.04`	vulnerable
Ubuntu	openjdk-17	24.04	`17.0.9~6ea-1`	vulnerable
Ubuntu	openjdk-17	24.04	`17.0.9+9-1`	vulnerable
Ubuntu	openjdk-17	24.04	`17.0.9+9-2`	vulnerable
Ubuntu	openjdk-17	24.04	`17.0.10~6ea-1`	vulnerable
Ubuntu	openjdk-17	24.04	`17.0.10+7-1`	vulnerable
Ubuntu	openjdk-17	24.04	`17.0.11~7ea-1`	vulnerable
Ubuntu	openjdk-17	24.04	`17.0.11~7ea-1build1`	vulnerable
Ubuntu	openjdk-17	24.04	`17.0.11+9-1`	vulnerable
Ubuntu	openjdk-17	24.04	`17.0.12+7-1ubuntu2~24.04`	vulnerable
Ubuntu	openjdk-17	24.04	`17.0.13+11-2ubuntu1~24.04`	vulnerable
Ubuntu	openjdk-17	24.04	`17.0.14+7-1~24.04`	vulnerable
Ubuntu	openjdk-17	24.04	`17.0.15+6~us1-0ubuntu1~24.04`	vulnerable
Ubuntu	openjdk-17	24.04	`17.0.16+8~us1-0ubuntu1~24.04.1`	vulnerable
Ubuntu	openjdk-17	24.04	`17.0.17+10-1~24.04`	vulnerable
Ubuntu	openjdk-17	24.04	`17.0.18+8-1~24.04.1`	vulnerable
Ubuntu	openjdk-17	24.04	`17.0.19+10-1~24.04.2`	vulnerable
Ubuntu	openjdk-17	24.04	`17.0.20+8-1~24.04`	vulnerable
Ubuntu	openjdk-17	24.04	`17.0.20.1+1-1~24.04`	vulnerable
Ubuntu	openjdk-21	24.04	`21+35-1`	vulnerable
Ubuntu	openjdk-21	24.04	`21.0.1+12-2`	vulnerable
Ubuntu	openjdk-21	24.04	`21.0.1+12-3`	vulnerable
Ubuntu	openjdk-21	24.04	`21.0.2+13-1`	vulnerable
Ubuntu	openjdk-21	24.04	`21.0.2+13-2`	vulnerable
Ubuntu	openjdk-21	24.04	`21.0.3~7ea-1`	vulnerable
Ubuntu	openjdk-21	24.04	`21.0.3~7ea-1build1`	vulnerable
Ubuntu	openjdk-21	24.04	`21.0.3~7ea-1build2`	vulnerable
Ubuntu	openjdk-21	24.04	`21.0.3+9-1`	vulnerable
Ubuntu	openjdk-21	24.04	`21.0.3+9-1ubuntu1`	vulnerable
Ubuntu	openjdk-21	24.04	`21.0.4+7-1ubuntu2~24.04`	vulnerable
Ubuntu	openjdk-21	24.04	`21.0.5+11-1ubuntu1~24.04`	vulnerable
Ubuntu	openjdk-21	24.04	`21.0.6+7-1~24.04.1`	vulnerable
Ubuntu	openjdk-21	24.04	`21.0.7+6~us1-0ubuntu1~24.04`	vulnerable
Ubuntu	openjdk-21	24.04	`21.0.8+9~us1-0ubuntu1~24.04.1`	vulnerable
Ubuntu	openjdk-21	24.04	`21.0.9+10-1~24.04`	vulnerable
Ubuntu	openjdk-21	24.04	`21.0.10+7-1~24.04`	vulnerable
Ubuntu	openjdk-21	24.04	`21.0.11+10-1~24.04.2`	vulnerable
Ubuntu	openjdk-21	24.04	`21.0.12+8-1~24.04`	vulnerable
Ubuntu	openjdk-21	24.04	`21.0.12.1+1-1~24.04.4`	vulnerable
Ubuntu	openjdk-25	24.04	`25+36-1~24.04.2`	vulnerable
Ubuntu	openjdk-25	24.04	`25.0.1+8-1~24.04`	vulnerable
Ubuntu	openjdk-25	24.04	`25.0.2+10-1~24.04`	vulnerable
Ubuntu	openjdk-25	24.04	`25.0.3+9-2~24.04.2`	vulnerable
Ubuntu	openjdk-25	24.04	`25.0.4+7-1~24.04`	vulnerable
Ubuntu	openjdk-25	24.04	`25.0.4.1+1-1~24.04.4`	vulnerable
Ubuntu	openjdk-8	24.04	`8u382-ga-1ubuntu1`	vulnerable
Ubuntu	openjdk-8	24.04	`8u392-ga-1`	vulnerable
Ubuntu	openjdk-8	24.04	`8u402-ga-1`	vulnerable
Ubuntu	openjdk-8	24.04	`8u402-ga-2`	vulnerable
Ubuntu	openjdk-8	24.04	`8u402-ga-2ubuntu1`	vulnerable
Ubuntu	openjdk-8	24.04	`8u402-ga-2ubuntu6`	vulnerable
Ubuntu	openjdk-8	24.04	`8u402-ga-2ubuntu7`	vulnerable
Ubuntu	openjdk-8	24.04	`8u402-ga-8build1`	vulnerable
Ubuntu	openjdk-8	24.04	`8u412-ga-1~24.04.2`	vulnerable
Ubuntu	openjdk-8	24.04	`8u422-b05-1~24.04`	vulnerable
Ubuntu	openjdk-8	24.04	`8u432-ga~us1-0ubuntu2~24.04`	vulnerable
Ubuntu	openjdk-8	24.04	`8u442-b06~us1-0ubuntu1~24.04`	vulnerable
Ubuntu	openjdk-8	24.04	`8u452-ga~us1-0ubuntu1~24.04`	vulnerable
Ubuntu	openjdk-8	24.04	`8u462-ga~us1-0ubuntu2~24.04.2`	vulnerable
Ubuntu	openjdk-8	24.04	`8u472-ga-1~24.04`	vulnerable
Ubuntu	openjdk-8	24.04	`8u482-ga~us1-0ubuntu1~24.04`	vulnerable
Ubuntu	openjdk-8	24.04	`8u492-ga~us2-0ubuntu1~24.04.1`	vulnerable
Ubuntu	openjdk-8	24.04	`8u502-ga~us1-0ubuntu1~24.04`	vulnerable
Ubuntu	openjdk-8	24.04	`8u504-ga-1ubuntu1~24.04.3`	vulnerable
Ubuntu	openjdk-17	26.10	`17.0.18+8-1`	vulnerable
Ubuntu	openjdk-17	26.10	`17.0.19+10-1`	vulnerable
Ubuntu	openjdk-17	26.10	`17.0.20~5ea-1`	vulnerable
Ubuntu	openjdk-17	26.10	`17.0.20+8-1`	vulnerable
Ubuntu	openjdk-17	26.10	`17.0.20.1+1-1`	vulnerable
Ubuntu	openjdk-17	26.10	`17.0.21~6ea-1`	vulnerable
Ubuntu	openjdk-17-crac	26.10	`17.0.18+8-0ubuntu1`	vulnerable
Ubuntu	openjdk-17-crac	26.10	`17.0.19+10-0ubuntu1`	vulnerable
Ubuntu	openjdk-17-crac	26.10	`17.0.20+8-0ubuntu1`	vulnerable
Ubuntu	openjdk-21	26.10	`21.0.11~8ea-1`	vulnerable
Ubuntu	openjdk-21	26.10	`21.0.11+10-1`	vulnerable
Ubuntu	openjdk-21	26.10	`21.0.12~5ea-1`	vulnerable
Ubuntu	openjdk-21	26.10	`21.0.12+8-1`	vulnerable
Ubuntu	openjdk-21	26.10	`21.0.12.1+1-1`	vulnerable
Ubuntu	openjdk-21-crac	26.10	`21.0.10+7-0ubuntu1`	vulnerable
Ubuntu	openjdk-21-crac	26.10	`21.0.11+10-0ubuntu1`	vulnerable
Ubuntu	openjdk-21-crac	26.10	`21.0.12+8-0ubuntu1`	vulnerable
Ubuntu	openjdk-25	26.10	`25.0.3~7ea-2`	vulnerable
Ubuntu	openjdk-25	26.10	`25.0.3+9-2`	vulnerable
Ubuntu	openjdk-25	26.10	`25.0.4~4ea-1`	vulnerable
Ubuntu	openjdk-25	26.10	`25.0.4+7-1`	vulnerable
Ubuntu	openjdk-25	26.10	`25.0.4.1+1-1`	vulnerable
Ubuntu	openjdk-8	26.10	`8u482-ga~us1-0ubuntu1`	vulnerable
Ubuntu	openjdk-8	26.10	`8u492-ga~us2-0ubuntu2`	vulnerable
Ubuntu	openjdk-8	26.10	`8u502-ga~us1-0ubuntu1`	vulnerable
Ubuntu	openjdk-8	26.10	`8u504-ga-1ubuntu1`	vulnerable
Ubuntu	openjdk-lts	26.10	`11.0.30+7-1ubuntu1`	vulnerable
Ubuntu	openjdk-lts	26.10	`11.0.31+11-1ubuntu2`	vulnerable
Ubuntu	openjdk-lts	26.10	`11.0.32+9-1ubuntu1`	vulnerable
Ubuntu	openjdk-lts	26.10	`11.0.32.1+1-1ubuntu1`	vulnerable
Ubuntu	openjdk-lts	26.10	`11.0.32.1+1-1ubuntu2`	vulnerable
Ubuntu	openjdk-17	26.04	`17.0.17~8ea-1`	vulnerable
Ubuntu	openjdk-17	26.04	`17.0.17+10-1`	vulnerable
Ubuntu	openjdk-17	26.04	`17.0.18~7ea-1`	vulnerable
Ubuntu	openjdk-17	26.04	`17.0.18+8-1`	vulnerable
Ubuntu	openjdk-17	26.04	`17.0.19+10-1~26.04.2`	vulnerable
Ubuntu	openjdk-17	26.04	`17.0.20+8-1~26.04`	vulnerable
Ubuntu	openjdk-17	26.04	`17.0.20.1+1-1~26.04`	vulnerable
Ubuntu	openjdk-17-crac	26.04	`17.0.16+8-0ubuntu1`	vulnerable
Ubuntu	openjdk-17-crac	26.04	`17.0.17+10-0ubuntu1`	vulnerable
Ubuntu	openjdk-17-crac	26.04	`17.0.18+8-0ubuntu1`	vulnerable
Ubuntu	openjdk-17-crac	26.04	`17.0.19+10-0ubuntu1~26.04.1`	vulnerable
Ubuntu	openjdk-17-crac	26.04	`17.0.20+8-0ubuntu1~26.04`	vulnerable
Ubuntu	openjdk-21	26.04	`21.0.9~8ea-1`	vulnerable
Ubuntu	openjdk-21	26.04	`21.0.9+10-1`	vulnerable
Ubuntu	openjdk-21	26.04	`21.0.10~4ea-1`	vulnerable
Ubuntu	openjdk-21	26.04	`21.0.10~6ea-1`	vulnerable
Ubuntu	openjdk-21	26.04	`21.0.10+7-1`	vulnerable
Ubuntu	openjdk-21	26.04	`21.0.11~5ea-1`	vulnerable
Ubuntu	openjdk-21	26.04	`21.0.11~8ea-1`	vulnerable
Ubuntu	openjdk-21	26.04	`21.0.11+10-1~26.04.2`	vulnerable
Ubuntu	openjdk-21	26.04	`21.0.12+8-1~26.04`	vulnerable
Ubuntu	openjdk-21	26.04	`21.0.12.1+1-1~26.04.4`	vulnerable
Ubuntu	openjdk-21-crac	26.04	`21.0.8+9-0ubuntu1`	vulnerable
Ubuntu	openjdk-21-crac	26.04	`21.0.9+10-0ubuntu1`	vulnerable
Ubuntu	openjdk-21-crac	26.04	`21.0.10+7-0ubuntu1`	vulnerable
Ubuntu	openjdk-21-crac	26.04	`21.0.11+10-0ubuntu1~26.04.1`	vulnerable
Ubuntu	openjdk-21-crac	26.04	`21.0.12+8-0ubuntu1~26.04`	vulnerable
Ubuntu	openjdk-25	26.04	`25+36-1`	vulnerable
Ubuntu	openjdk-25	26.04	`25.0.1+8-1`	vulnerable
Ubuntu	openjdk-25	26.04	`25.0.1+8-2`	vulnerable
Ubuntu	openjdk-25	26.04	`25.0.1+8-3`	vulnerable
Ubuntu	openjdk-25	26.04	`25.0.2+10-1`	vulnerable
Ubuntu	openjdk-25	26.04	`25.0.3~5ea-2`	vulnerable
Ubuntu	openjdk-25	26.04	`25.0.3~7ea-2`	vulnerable
Ubuntu	openjdk-25	26.04	`25.0.3+9-2~26.04.2`	vulnerable
Ubuntu	openjdk-25	26.04	`25.0.4+7-1~26.04`	vulnerable
Ubuntu	openjdk-25	26.04	`25.0.4.1+1-1~26.04.4`	vulnerable
Ubuntu	openjdk-8	26.04	`8u462-ga-1`	vulnerable
Ubuntu	openjdk-8	26.04	`8u472-ga~us1-0ubuntu1`	vulnerable
Ubuntu	openjdk-8	26.04	`8u472-ga-1`	vulnerable
Ubuntu	openjdk-8	26.04	`8u482-ga~us1-0ubuntu1`	vulnerable
Ubuntu	openjdk-8	26.04	`8u492-ga~us2-0ubuntu1~26.04.1`	vulnerable
Ubuntu	openjdk-8	26.04	`8u502-ga~us1-0ubuntu1~26.04`	vulnerable
Ubuntu	openjdk-8	26.04	`8u504-ga-1ubuntu1~26.04.3`	vulnerable
Ubuntu	openjdk-lts	26.04	`11.0.28+6-1ubuntu1`	vulnerable
Ubuntu	openjdk-lts	26.04	`11.0.29+7-1ubuntu1`	vulnerable
Ubuntu	openjdk-lts	26.04	`11.0.30+7-1ubuntu1`	vulnerable
Ubuntu	openjdk-lts	26.04	`11.0.31+11-1ubuntu1~26.04.2`	vulnerable
Ubuntu	openjdk-lts	26.04	`11.0.32+9-1ubuntu1~26.04`	vulnerable
Ubuntu	openjdk-lts	26.04	`11.0.32.1+1-1ubuntu1~26.04`	vulnerable

Fixed-version evidence

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[openjdk-17-dbg]Affected
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-demo]Affected
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-doc]Affected
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · all · bookworm
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · all · bookworm
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · all · bookworm-security
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · all · bookworm-security
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-jdk]Affected
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-jdk-headless]Affected
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-jre]Affected
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-jre-headless]Affected
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-jre-zero]Affected
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-source]Affected
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · all · bookworm
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · all · bookworm
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · all · bookworm-security
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · all · bookworm-security
  Affected
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12

[Debian 13 (Trixie)]

[openjdk-21-dbg]Affected
Source package: [openjdk-21]
Details (6)
- 21.0.11+10-1~deb13u2 · amd64 · trixie
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.11+10-1~deb13u2 · arm64 · trixie
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12.1+1-1~deb13u1 · amd64 · trixie-security · Historical version
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12.1+1-1~deb13u1 · arm64 · trixie-security
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12+8-1~deb13u1 · amd64 · trixie-security · Historical version
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.13+9-1~deb13u2 · amd64 · trixie-security
  Affected
  dsa · openjdk-21 · debian · 13
[openjdk-21-demo]Affected
Source package: [openjdk-21]
Details (6)
- 21.0.11+10-1~deb13u2 · amd64 · trixie
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.11+10-1~deb13u2 · arm64 · trixie
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12.1+1-1~deb13u1 · amd64 · trixie-security · Historical version
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12.1+1-1~deb13u1 · arm64 · trixie-security
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12+8-1~deb13u1 · amd64 · trixie-security · Historical version
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.13+9-1~deb13u2 · amd64 · trixie-security
  Affected
  dsa · openjdk-21 · debian · 13
[openjdk-21-doc]Affected
Source package: [openjdk-21]
Details (6)
- 21.0.11+10-1~deb13u2 · all · trixie
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.11+10-1~deb13u2 · all · trixie
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12.1+1-1~deb13u1 · all · trixie-security
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12.1+1-1~deb13u1 · all · trixie-security · Historical version
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12+8-1~deb13u1 · all · trixie-security · Historical version
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.13+9-1~deb13u2 · all · trixie-security
  Affected
  dsa · openjdk-21 · debian · 13
[openjdk-21-jdk]Affected
Source package: [openjdk-21]
Details (6)
- 21.0.11+10-1~deb13u2 · amd64 · trixie
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.11+10-1~deb13u2 · arm64 · trixie
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12.1+1-1~deb13u1 · amd64 · trixie-security · Historical version
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12.1+1-1~deb13u1 · arm64 · trixie-security
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12+8-1~deb13u1 · amd64 · trixie-security · Historical version
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.13+9-1~deb13u2 · amd64 · trixie-security
  Affected
  dsa · openjdk-21 · debian · 13
[openjdk-21-jdk-headless]Affected
Source package: [openjdk-21]
Details (6)
- 21.0.11+10-1~deb13u2 · amd64 · trixie
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.11+10-1~deb13u2 · arm64 · trixie
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12.1+1-1~deb13u1 · amd64 · trixie-security · Historical version
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12.1+1-1~deb13u1 · arm64 · trixie-security
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12+8-1~deb13u1 · amd64 · trixie-security · Historical version
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.13+9-1~deb13u2 · amd64 · trixie-security
  Affected
  dsa · openjdk-21 · debian · 13
[openjdk-21-jre]Affected
Source package: [openjdk-21]
Details (6)
- 21.0.11+10-1~deb13u2 · amd64 · trixie
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.11+10-1~deb13u2 · arm64 · trixie
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12.1+1-1~deb13u1 · amd64 · trixie-security · Historical version
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12.1+1-1~deb13u1 · arm64 · trixie-security
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12+8-1~deb13u1 · amd64 · trixie-security · Historical version
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.13+9-1~deb13u2 · amd64 · trixie-security
  Affected
  dsa · openjdk-21 · debian · 13
[openjdk-21-jre-headless]Affected
Source package: [openjdk-21]
Details (6)
- 21.0.11+10-1~deb13u2 · amd64 · trixie
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.11+10-1~deb13u2 · arm64 · trixie
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12.1+1-1~deb13u1 · amd64 · trixie-security · Historical version
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12.1+1-1~deb13u1 · arm64 · trixie-security
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12+8-1~deb13u1 · amd64 · trixie-security · Historical version
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.13+9-1~deb13u2 · amd64 · trixie-security
  Affected
  dsa · openjdk-21 · debian · 13
[openjdk-21-jre-zero]Affected
Source package: [openjdk-21]
Details (6)
- 21.0.11+10-1~deb13u2 · amd64 · trixie
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.11+10-1~deb13u2 · arm64 · trixie
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12.1+1-1~deb13u1 · amd64 · trixie-security · Historical version
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12.1+1-1~deb13u1 · arm64 · trixie-security
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12+8-1~deb13u1 · amd64 · trixie-security · Historical version
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.13+9-1~deb13u2 · amd64 · trixie-security
  Affected
  dsa · openjdk-21 · debian · 13
[openjdk-21-source]Affected
Source package: [openjdk-21]
Details (6)
- 21.0.11+10-1~deb13u2 · all · trixie
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.11+10-1~deb13u2 · all · trixie
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12.1+1-1~deb13u1 · all · trixie-security · Historical version
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12.1+1-1~deb13u1 · all · trixie-security
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12+8-1~deb13u1 · all · trixie-security · Historical version
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.13+9-1~deb13u2 · all · trixie-security
  Affected
  dsa · openjdk-21 · debian · 13
[openjdk-21-testsupport]Affected
Source package: [openjdk-21]
Details (6)
- 21.0.11+10-1~deb13u2 · amd64 · trixie
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.11+10-1~deb13u2 · arm64 · trixie
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12.1+1-1~deb13u1 · amd64 · trixie-security · Historical version
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12.1+1-1~deb13u1 · arm64 · trixie-security
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.12+8-1~deb13u1 · amd64 · trixie-security · Historical version
  Affected
  dsa · openjdk-21 · debian · 13
- 21.0.13+9-1~deb13u2 · amd64 · trixie-security
  Affected
  dsa · openjdk-21 · debian · 13

Observed: Oct 27, 2026, 8:41:09 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]