CVE catalog
CVE-2026-91400
openjdk-17: CVE-2026-91400
- Severity
- Low · CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.26% · Oct 25, 2026
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | openjdk-17 | sid | 17.0.21+9-1 | fixed |
| Debian | openjdk-17 | bookworm | 17.0.19+10-1~deb12u2 | vulnerable |
| Debian | openjdk-17 | bookworm-security | 17.0.21+9-1~deb12u1 | fixed |
| Ubuntu | openjdk-8 | pro | 8u232-b09-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u232-b09-1 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u242-b04-1 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u242-b08-0ubuntu3 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u252-b07-1 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u252-b09-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u265-b01-0ubuntu2~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u272-b10-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u275-b01-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u282-b08-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u292-b10-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u312-b07-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u342-b07-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u352-ga-1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u362-ga-0ubuntu1~20.04.1 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u372-ga~us1-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u382-ga-1~20.04.1 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u392-ga-1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u402-ga-2ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u412-ga-1~20.04.1 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u422-b05-1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u432-ga~us1-0ubuntu2~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u442-b06~us1-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u452-ga~us1-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u462-ga~us1-0ubuntu2~20.04.2 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u472-ga-1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u482-ga~us1-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u492-ga~us2-0ubuntu1~20.04.1 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u502-ga~us1-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u504-ga-1ubuntu1~20.04.3 | vulnerable |
| Ubuntu | openjdk-9 | 16.04 | 9~b88-1 | vulnerable |
| Ubuntu | openjdk-9 | 16.04 | 9~b101-2ubuntu2 | vulnerable |
| Ubuntu | openjdk-9 | 16.04 | 9~b102-1 | vulnerable |
| Ubuntu | openjdk-9 | 16.04 | 9~b113-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-9 | 16.04 | 9~b114-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.20+8-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.21+9-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.22+7-0ubuntu2 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.23~7ea-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.23~7ea-1ubuntu2 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.23+9-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.24+8-1ubuntu3~24.04.1 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.25+9-1ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.26+4-1ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.27+6~us1-0ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.28+6-1ubuntu1~24.04.1 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.29+7-1ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.30+7-1ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.31+11-1ubuntu1~24.04.2 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.32+9-1ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.32.1+1-1ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17+35-1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.1+12-1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.2+8-1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.3+7-0ubuntu0.20.04.1 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.4+8-1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.5+8-2ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.6+10-0ubuntu1~20.04.1 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.7+7~us1-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.8+7-1~20.04.2 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.8.1+1~us1-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.9+9-1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.10+7-1~20.04.1 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.11+9-1~20.04.2 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.12+7-1ubuntu2~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.13+11-2ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.14+7-1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.15+6~us1-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.16+8~us1-0ubuntu1~20.04.6 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.17+10-1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.18+8-1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.19+10-1~20.04.2 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.20+8-1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.20.1+1-1~20.04 | vulnerable |
| Ubuntu | openjdk-13 | 20.04 | 13+33-1 | vulnerable |
| Ubuntu | openjdk-13 | 20.04 | 13.0.1+9-2 | vulnerable |
| Ubuntu | openjdk-13 | 20.04 | 13.0.2+8-1 | vulnerable |
| Ubuntu | openjdk-13 | 20.04 | 13.0.2+8-2 | vulnerable |
| Ubuntu | openjdk-13 | 20.04 | 13.0.3+3-1ubuntu2 | vulnerable |
| Ubuntu | openjdk-13 | 20.04 | 13.0.4+8-1~20.04 | vulnerable |
| Ubuntu | openjdk-13 | 20.04 | 13.0.7+5-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-16 | 20.04 | 16.0.1+9-1~20.04 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.1+12-2~20.04.1 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.2+13-1~20.04.1 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.3+9-1ubuntu1~20.04.1 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.4+7-1ubuntu2~20.04 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.5+11-1ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.6+7-1~20.04.1 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.7+6~us1-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.8+9~us1-0ubuntu1~20.04.1 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.9+10-1~20.04 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.10+7-1~20.04 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.11+10-1~20.04.2 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.12+8-1~20.04 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.12.1+1-1~20.04.4 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17+35-1 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.1+12-1 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.2+8-1 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.3+7-0ubuntu0.22.04.1 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.4+8-1~22.04 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.5+8-2ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.6+10-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.7+7~us1-0ubuntu1~22.04.2 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.8+7-1~22.04 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.8.1+1~us1-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.9+9-1~22.04 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.10+7-1~22.04.1 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.11+9-1~22.04.1 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.12+7-1ubuntu2~22.04 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.13+11-2ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.14+7-1~22.04.1 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.15+6~us1-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.16+8~us1-0ubuntu1~22.04.1 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.17+10-1~22.04 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.18+8-1~22.04.1 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.19+10-1~22.04.2 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.20+8-1~22.04 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.20.1+1-1~22.04 | vulnerable |
| Ubuntu | openjdk-18 | 22.04 | 18~15ea-4 | vulnerable |
| Ubuntu | openjdk-18 | 22.04 | 18~20ea-1 | vulnerable |
| Ubuntu | openjdk-18 | 22.04 | 18~32ea-1 | vulnerable |
| Ubuntu | openjdk-18 | 22.04 | 18~36ea-1 | vulnerable |
| Ubuntu | openjdk-18 | 22.04 | 18.0.2+9-2~22.04 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.1+12-2~22.04 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.2+13-1~22.04.1 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.3+9-1ubuntu1~22.04.1 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.4+7-1ubuntu2~22.04 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.5+11-1ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.6+7-1~22.04.1 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.7+6~us1-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.8+9~us1-0ubuntu1~22.04.1 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.9+10-1~22.04 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.10+7-1~22.04 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.11+10-1~22.04.2 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.12+8-1~22.04 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.12.1+1-1~22.04.4 | vulnerable |
| Ubuntu | openjdk-25 | 22.04 | 25+36-1~22.04.2 | vulnerable |
| Ubuntu | openjdk-25 | 22.04 | 25.0.1+8-1~22.04 | vulnerable |
| Ubuntu | openjdk-25 | 22.04 | 25.0.2+10-1~22.04 | vulnerable |
| Ubuntu | openjdk-25 | 22.04 | 25.0.3+9-2~22.04.2 | vulnerable |
| Ubuntu | openjdk-25 | 22.04 | 25.0.4+7-1~22.04 | vulnerable |
| Ubuntu | openjdk-25 | 22.04 | 25.0.4.1+1-1~22.04.4 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u302-b08-0ubuntu2 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u312-b07-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u342-b07-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u352-ga-1~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u362-ga-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u372-ga~us1-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u382-ga-1~22.04.1 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u392-ga-1~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u402-ga-2ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u412-ga-1~22.04.1 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u422-b05-1~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u432-ga~us1-0ubuntu2~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u442-b06~us1-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u452-ga~us1-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u462-ga~us1-0ubuntu2~22.04.2 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u472-ga-1~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u482-ga~us1-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u492-ga~us2-0ubuntu1~22.04.1 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u502-ga~us1-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u504-ga-1ubuntu1~22.04.3 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.12+7-0ubuntu3 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.13+8-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.14+9-0ubuntu2 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.14.1+1-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.15+10-0ubuntu0.22.04.1 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.16+8-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.17+8-1ubuntu2~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.18+10-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.19+7~us1-0ubuntu1~22.04.1 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.20+8-1ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.20.1+1-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.21+9-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.22+7-0ubuntu2~22.04.1 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.23+9-1ubuntu1~22.04.1 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.24+8-1ubuntu3~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.25+9-1ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.26+4-1ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.27+6~us1-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.28+6-1ubuntu1~22.04.1 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.29+7-1ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.30+7-1ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.31+11-1ubuntu1~22.04.2 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.32+9-1ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.32.1+1-1ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.9~6ea-1 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.9+9-1 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.9+9-2 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.10~6ea-1 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.10+7-1 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.11~7ea-1 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.11~7ea-1build1 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.11+9-1 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.12+7-1ubuntu2~24.04 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.13+11-2ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.14+7-1~24.04 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.15+6~us1-0ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.16+8~us1-0ubuntu1~24.04.1 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.17+10-1~24.04 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.18+8-1~24.04.1 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.19+10-1~24.04.2 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.20+8-1~24.04 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.20.1+1-1~24.04 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21+35-1 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.1+12-2 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.1+12-3 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.2+13-1 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.2+13-2 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.3~7ea-1 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.3~7ea-1build1 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.3~7ea-1build2 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.3+9-1 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.3+9-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.4+7-1ubuntu2~24.04 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.5+11-1ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.6+7-1~24.04.1 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.7+6~us1-0ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.8+9~us1-0ubuntu1~24.04.1 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.9+10-1~24.04 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.10+7-1~24.04 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.11+10-1~24.04.2 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.12+8-1~24.04 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.12.1+1-1~24.04.4 | vulnerable |
| Ubuntu | openjdk-25 | 24.04 | 25+36-1~24.04.2 | vulnerable |
| Ubuntu | openjdk-25 | 24.04 | 25.0.1+8-1~24.04 | vulnerable |
| Ubuntu | openjdk-25 | 24.04 | 25.0.2+10-1~24.04 | vulnerable |
| Ubuntu | openjdk-25 | 24.04 | 25.0.3+9-2~24.04.2 | vulnerable |
| Ubuntu | openjdk-25 | 24.04 | 25.0.4+7-1~24.04 | vulnerable |
| Ubuntu | openjdk-25 | 24.04 | 25.0.4.1+1-1~24.04.4 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u382-ga-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u392-ga-1 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u402-ga-1 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u402-ga-2 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u402-ga-2ubuntu1 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u402-ga-2ubuntu6 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u402-ga-2ubuntu7 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u402-ga-8build1 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u412-ga-1~24.04.2 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u422-b05-1~24.04 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u432-ga~us1-0ubuntu2~24.04 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u442-b06~us1-0ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u452-ga~us1-0ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u462-ga~us1-0ubuntu2~24.04.2 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u472-ga-1~24.04 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u482-ga~us1-0ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u492-ga~us2-0ubuntu1~24.04.1 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u502-ga~us1-0ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u504-ga-1ubuntu1~24.04.3 | vulnerable |
| Ubuntu | openjdk-17 | 26.10 | 17.0.18+8-1 | vulnerable |
| Ubuntu | openjdk-17 | 26.10 | 17.0.19+10-1 | vulnerable |
| Ubuntu | openjdk-17 | 26.10 | 17.0.20~5ea-1 | vulnerable |
| Ubuntu | openjdk-17 | 26.10 | 17.0.20+8-1 | vulnerable |
| Ubuntu | openjdk-17 | 26.10 | 17.0.20.1+1-1 | vulnerable |
| Ubuntu | openjdk-17 | 26.10 | 17.0.21~6ea-1 | vulnerable |
| Ubuntu | openjdk-17-crac | 26.10 | 17.0.18+8-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-17-crac | 26.10 | 17.0.19+10-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-17-crac | 26.10 | 17.0.20+8-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-21 | 26.10 | 21.0.11~8ea-1 | vulnerable |
| Ubuntu | openjdk-21 | 26.10 | 21.0.11+10-1 | vulnerable |
| Ubuntu | openjdk-21 | 26.10 | 21.0.12~5ea-1 | vulnerable |
| Ubuntu | openjdk-21 | 26.10 | 21.0.12+8-1 | vulnerable |
| Ubuntu | openjdk-21 | 26.10 | 21.0.12.1+1-1 | vulnerable |
| Ubuntu | openjdk-21-crac | 26.10 | 21.0.10+7-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-21-crac | 26.10 | 21.0.11+10-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-21-crac | 26.10 | 21.0.12+8-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-25 | 26.10 | 25.0.3~7ea-2 | vulnerable |
| Ubuntu | openjdk-25 | 26.10 | 25.0.3+9-2 | vulnerable |
| Ubuntu | openjdk-25 | 26.10 | 25.0.4~4ea-1 | vulnerable |
| Ubuntu | openjdk-25 | 26.10 | 25.0.4+7-1 | vulnerable |
| Ubuntu | openjdk-25 | 26.10 | 25.0.4.1+1-1 | vulnerable |
| Ubuntu | openjdk-27 | 26.10 | 27~19ea-1 | vulnerable |
| Ubuntu | openjdk-27 | 26.10 | 27~34ea-1 | vulnerable |
| Ubuntu | openjdk-27 | 26.10 | 27+35-1 | vulnerable |
| Ubuntu | openjdk-8 | 26.10 | 8u482-ga~us1-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-8 | 26.10 | 8u492-ga~us2-0ubuntu2 | vulnerable |
| Ubuntu | openjdk-8 | 26.10 | 8u502-ga~us1-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-8 | 26.10 | 8u504-ga-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | 26.10 | 11.0.30+7-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | 26.10 | 11.0.31+11-1ubuntu2 | vulnerable |
| Ubuntu | openjdk-lts | 26.10 | 11.0.32+9-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | 26.10 | 11.0.32.1+1-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | 26.10 | 11.0.32.1+1-1ubuntu2 | vulnerable |
| Ubuntu | openjdk-17 | 26.04 | 17.0.17~8ea-1 | vulnerable |
| Ubuntu | openjdk-17 | 26.04 | 17.0.17+10-1 | vulnerable |
| Ubuntu | openjdk-17 | 26.04 | 17.0.18~7ea-1 | vulnerable |
| Ubuntu | openjdk-17 | 26.04 | 17.0.18+8-1 | vulnerable |
| Ubuntu | openjdk-17 | 26.04 | 17.0.19+10-1~26.04.2 | vulnerable |
| Ubuntu | openjdk-17 | 26.04 | 17.0.20+8-1~26.04 | vulnerable |
| Ubuntu | openjdk-17 | 26.04 | 17.0.20.1+1-1~26.04 | vulnerable |
| Ubuntu | openjdk-17-crac | 26.04 | 17.0.16+8-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-17-crac | 26.04 | 17.0.17+10-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-17-crac | 26.04 | 17.0.18+8-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-17-crac | 26.04 | 17.0.19+10-0ubuntu1~26.04.1 | vulnerable |
| Ubuntu | openjdk-17-crac | 26.04 | 17.0.20+8-0ubuntu1~26.04 | vulnerable |
| Ubuntu | openjdk-21 | 26.04 | 21.0.9~8ea-1 | vulnerable |
| Ubuntu | openjdk-21 | 26.04 | 21.0.9+10-1 | vulnerable |
| Ubuntu | openjdk-21 | 26.04 | 21.0.10~4ea-1 | vulnerable |
| Ubuntu | openjdk-21 | 26.04 | 21.0.10~6ea-1 | vulnerable |
| Ubuntu | openjdk-21 | 26.04 | 21.0.10+7-1 | vulnerable |
| Ubuntu | openjdk-21 | 26.04 | 21.0.11~5ea-1 | vulnerable |
| Ubuntu | openjdk-21 | 26.04 | 21.0.11~8ea-1 | vulnerable |
| Ubuntu | openjdk-21 | 26.04 | 21.0.11+10-1~26.04.2 | vulnerable |
| Ubuntu | openjdk-21 | 26.04 | 21.0.12+8-1~26.04 | vulnerable |
| Ubuntu | openjdk-21 | 26.04 | 21.0.12.1+1-1~26.04.4 | vulnerable |
| Ubuntu | openjdk-21-crac | 26.04 | 21.0.8+9-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-21-crac | 26.04 | 21.0.9+10-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-21-crac | 26.04 | 21.0.10+7-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-21-crac | 26.04 | 21.0.11+10-0ubuntu1~26.04.1 | vulnerable |
| Ubuntu | openjdk-21-crac | 26.04 | 21.0.12+8-0ubuntu1~26.04 | vulnerable |
| Ubuntu | openjdk-25 | 26.04 | 25+36-1 | vulnerable |
| Ubuntu | openjdk-25 | 26.04 | 25.0.1+8-1 | vulnerable |
| Ubuntu | openjdk-25 | 26.04 | 25.0.1+8-2 | vulnerable |
| Ubuntu | openjdk-25 | 26.04 | 25.0.1+8-3 | vulnerable |
| Ubuntu | openjdk-25 | 26.04 | 25.0.2+10-1 | vulnerable |
| Ubuntu | openjdk-25 | 26.04 | 25.0.3~5ea-2 | vulnerable |
| Ubuntu | openjdk-25 | 26.04 | 25.0.3~7ea-2 | vulnerable |
| Ubuntu | openjdk-25 | 26.04 | 25.0.3+9-2~26.04.2 | vulnerable |
| Ubuntu | openjdk-25 | 26.04 | 25.0.4+7-1~26.04 | vulnerable |
| Ubuntu | openjdk-25 | 26.04 | 25.0.4.1+1-1~26.04.4 | vulnerable |
| Ubuntu | openjdk-8 | 26.04 | 8u462-ga-1 | vulnerable |
| Ubuntu | openjdk-8 | 26.04 | 8u472-ga~us1-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-8 | 26.04 | 8u472-ga-1 | vulnerable |
| Ubuntu | openjdk-8 | 26.04 | 8u482-ga~us1-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-8 | 26.04 | 8u492-ga~us2-0ubuntu1~26.04.1 | vulnerable |
| Ubuntu | openjdk-8 | 26.04 | 8u502-ga~us1-0ubuntu1~26.04 | vulnerable |
| Ubuntu | openjdk-8 | 26.04 | 8u504-ga-1ubuntu1~26.04.3 | vulnerable |
| Ubuntu | openjdk-lts | 26.04 | 11.0.28+6-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | 26.04 | 11.0.29+7-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | 26.04 | 11.0.30+7-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | 26.04 | 11.0.31+11-1ubuntu1~26.04.2 | vulnerable |
| Ubuntu | openjdk-lts | 26.04 | 11.0.32+9-1ubuntu1~26.04 | vulnerable |
| Ubuntu | openjdk-lts | 26.04 | 11.0.32.1+1-1ubuntu1~26.04 | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | openjdk-17 | source | sid | 17.0.21+9-1 | not yet assigned | Not reported | Not reported |
| Debian | openjdk-17 | source | bookworm | 17.0.21+9-1~deb12u1 | not yet assigned | Not reported | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [openjdk-17-dbg]Affected
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· amd64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· arm64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· amd64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· arm64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- [openjdk-17-demo]Affected
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· amd64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· arm64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· amd64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· arm64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- [openjdk-17-doc]Affected
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· all · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· all · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· all · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· all · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- [openjdk-17-jdk]Affected
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· amd64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· arm64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· amd64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· arm64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- [openjdk-17-jdk-headless]Affected
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· amd64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· arm64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· amd64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· arm64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- [openjdk-17-jre]Affected
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· amd64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· arm64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· amd64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· arm64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- [openjdk-17-jre-headless]Affected
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· amd64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· arm64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· amd64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· arm64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- [openjdk-17-jre-zero]Affected
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· amd64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· arm64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· amd64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· arm64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- [openjdk-17-source]Affected
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· all · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· all · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· all · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· all · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[Debian 13 (Trixie)]
- [openjdk-21-dbg]Affected
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
- [openjdk-21-demo]Affected
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
- [openjdk-21-doc]Affected
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· all · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· all · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· all · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· all · trixie-securityAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· all · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· all · trixie-securityFixed · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
- [openjdk-21-jdk]Affected
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
- [openjdk-21-jdk-headless]Affected
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
- [openjdk-21-jre]Affected
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
- [openjdk-21-jre-headless]Affected
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
- [openjdk-21-jre-zero]Affected
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
- [openjdk-21-source]Affected
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· all · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· all · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· all · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· all · trixie-securityAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· all · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· all · trixie-securityFixed · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
- [openjdk-21-testsupport]Affected
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
- [openjdk-25-dbg]Affected
Source package: [openjdk-25]
Details (6)
25.0.3+9-2~deb13u1· amd64 · trixieAffected
dsa · openjdk-25 · debian · 13
25.0.3+9-2~deb13u1· arm64 · trixieAffected
dsa · openjdk-25 · debian · 13
25.0.3+9-2~deb13u1· amd64 · trixie-security · Historical versionAffected
dsa · openjdk-25 · debian · 13
25.0.4.1+1-1~deb13u1· amd64 · trixie-securityAffected
dsa · openjdk-25 · debian · 13
25.0.4.1+1-1~deb13u1· arm64 · trixie-securityAffected
dsa · openjdk-25 · debian · 13
25.0.4+7-1~deb13u1· amd64 · trixie-security · Historical versionAffected
dsa · openjdk-25 · debian · 13
Observed:
References
- [https://nvd.nist.gov/vuln/detail/CVE-2026-91400]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-91400]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2026-91400]
- [https://security-tracker.debian.org/tracker/CVE-2026-91400]
- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91400.json]
- [https://www.oracle.com/security-alerts/cpuoct2026.html]
[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]