CVE catalog
CVE-2026-91464
openjdk-17 affected and fixed versions
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).
- Severity
- Medium · CVSS 5.3
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.29% · Oct 27, 2026
Projects and upstream resources
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
Version impact has not been established. The original provider fields are retained below.
Provider details and historical evidence
Original provider fields
{
"package_releases": [
{
"name": "openjdk-17",
"status": "fixed",
"release": "sid",
"version": "17.0.21+9-1"
},
{
"name": "openjdk-17",
"status": "vulnerable",
"release": "bookworm",
"version": "17.0.19+10-1~deb12u2"
},
{
"name": "openjdk-17",
"status": "fixed",
"release": "bookworm-security",
"version": "17.0.21+9-1~deb12u1"
}
],
"fixed_versions": [
{
"bug": null,
"name": "openjdk-17",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "not yet assigned",
"fixed_version": "17.0.21+9-1"
},
{
"bug": null,
"name": "openjdk-17",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "not yet assigned",
"fixed_version": "17.0.21+9-1~deb12u1"
}
],
"distribution_packages": [
{
"name": "openjdk-8",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "pro",
"versions": [
"8u232-b09-0ubuntu1",
"8u232-b09-1",
"8u242-b04-1",
"8u242-b08-0ubuntu3",
"8u252-b07-1",
"8u252-b09-1ubuntu1",
"8u265-b01-0ubuntu2~20.04",
"8u272-b10-0ubuntu1~20.04",
"8u275-b01-0ubuntu1~20.04",
"8u282-b08-0ubuntu1~20.04",
"8u292-b10-0ubuntu1~20.04",
"8u312-b07-0ubuntu1~20.04",
"8u342-b07-0ubuntu1~20.04",
"8u352-ga-1~20.04",
"8u362-ga-0ubuntu1~20.04.1",
"8u372-ga~us1-0ubuntu1~20.04",
"8u382-ga-1~20.04.1",
"8u392-ga-1~20.04",
"8u402-ga-2ubuntu1~20.04",
"8u412-ga-1~20.04.1",
"8u422-b05-1~20.04",
"8u432-ga~us1-0ubuntu2~20.04",
"8u442-b06~us1-0ubuntu1~20.04",
"8u452-ga~us1-0ubuntu1~20.04",
"8u462-ga~us1-0ubuntu2~20.04.2",
"8u472-ga-1~20.04",
"8u482-ga~us1-0ubuntu1~20.04",
"8u492-ga~us2-0ubuntu1~20.04.1",
"8u502-ga~us1-0ubuntu1~20.04",
"8u504-ga-1ubuntu1~20.04.3"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-9",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "16.04",
"versions": [
"9~b88-1",
"9~b101-2ubuntu2",
"9~b102-1",
"9~b113-0ubuntu1",
"9~b114-0ubuntu1"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-lts",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "pro",
"versions": [
"11.0.20+8-1ubuntu1",
"11.0.21+9-0ubuntu1",
"11.0.22+7-0ubuntu2",
"11.0.23~7ea-1ubuntu1",
"11.0.23~7ea-1ubuntu2",
"11.0.23+9-1ubuntu1",
"11.0.24+8-1ubuntu3~24.04.1",
"11.0.25+9-1ubuntu1~24.04",
"11.0.26+4-1ubuntu1~24.04",
"11.0.27+6~us1-0ubuntu1~24.04",
"11.0.28+6-1ubuntu1~24.04.1",
"11.0.29+7-1ubuntu1~24.04",
"11.0.30+7-1ubuntu1~24.04",
"11.0.31+11-1ubuntu1~24.04.2",
"11.0.32+9-1ubuntu1~24.04",
"11.0.32.1+1-1ubuntu1~24.04"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-17",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "pro",
"versions": [
"17+35-1~20.04",
"17.0.1+12-1~20.04",
"17.0.2+8-1~20.04",
"17.0.3+7-0ubuntu0.20.04.1",
"17.0.4+8-1~20.04",
"17.0.5+8-2ubuntu1~20.04",
"17.0.6+10-0ubuntu1~20.04.1",
"17.0.7+7~us1-0ubuntu1~20.04",
"17.0.8+7-1~20.04.2",
"17.0.8.1+1~us1-0ubuntu1~20.04",
"17.0.9+9-1~20.04",
"17.0.10+7-1~20.04.1",
"17.0.11+9-1~20.04.2",
"17.0.12+7-1ubuntu2~20.04",
"17.0.13+11-2ubuntu1~20.04",
"17.0.14+7-1~20.04",
"17.0.15+6~us1-0ubuntu1~20.04",
"17.0.16+8~us1-0ubuntu1~20.04.6",
"17.0.17+10-1~20.04",
"17.0.18+8-1~20.04",
"17.0.19+10-1~20.04.2",
"17.0.20+8-1~20.04",
"17.0.20.1+1-1~20.04"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-13",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "20.04",
"versions": [
"13+33-1",
"13.0.1+9-2",
"13.0.2+8-1",
"13.0.2+8-2",
"13.0.3+3-1ubuntu2",
"13.0.4+8-1~20.04",
"13.0.7+5-0ubuntu1~20.04"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-16",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "20.04",
"versions": [
"16.0.1+9-1~20.04"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-21",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "pro",
"versions": [
"21.0.1+12-2~20.04.1",
"21.0.2+13-1~20.04.1",
"21.0.3+9-1ubuntu1~20.04.1",
"21.0.4+7-1ubuntu2~20.04",
"21.0.5+11-1ubuntu1~20.04",
"21.0.6+7-1~20.04.1",
"21.0.7+6~us1-0ubuntu1~20.04",
"21.0.8+9~us1-0ubuntu1~20.04.1",
"21.0.9+10-1~20.04",
"21.0.10+7-1~20.04",
"21.0.11+10-1~20.04.2",
"21.0.12+8-1~20.04",
"21.0.12.1+1-1~20.04.4"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-17",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "22.04",
"versions": [
"17+35-1",
"17.0.1+12-1",
"17.0.2+8-1",
"17.0.3+7-0ubuntu0.22.04.1",
"17.0.4+8-1~22.04",
"17.0.5+8-2ubuntu1~22.04",
"17.0.6+10-0ubuntu1~22.04",
"17.0.7+7~us1-0ubuntu1~22.04.2",
"17.0.8+7-1~22.04",
"17.0.8.1+1~us1-0ubuntu1~22.04",
"17.0.9+9-1~22.04",
"17.0.10+7-1~22.04.1",
"17.0.11+9-1~22.04.1",
"17.0.12+7-1ubuntu2~22.04",
"17.0.13+11-2ubuntu1~22.04",
"17.0.14+7-1~22.04.1",
"17.0.15+6~us1-0ubuntu1~22.04",
"17.0.16+8~us1-0ubuntu1~22.04.1",
"17.0.17+10-1~22.04",
"17.0.18+8-1~22.04.1",
"17.0.19+10-1~22.04.2",
"17.0.20+8-1~22.04",
"17.0.20.1+1-1~22.04"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-18",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "22.04",
"versions": [
"18~15ea-4",
"18~20ea-1",
"18~32ea-1",
"18~36ea-1",
"18.0.2+9-2~22.04"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-21",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "22.04",
"versions": [
"21.0.1+12-2~22.04",
"21.0.2+13-1~22.04.1",
"21.0.3+9-1ubuntu1~22.04.1",
"21.0.4+7-1ubuntu2~22.04",
"21.0.5+11-1ubuntu1~22.04",
"21.0.6+7-1~22.04.1",
"21.0.7+6~us1-0ubuntu1~22.04",
"21.0.8+9~us1-0ubuntu1~22.04.1",
"21.0.9+10-1~22.04",
"21.0.10+7-1~22.04",
"21.0.11+10-1~22.04.2",
"21.0.12+8-1~22.04",
"21.0.12.1+1-1~22.04.4"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-25",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "22.04",
"versions": [
"25+36-1~22.04.2",
"25.0.1+8-1~22.04",
"25.0.2+10-1~22.04",
"25.0.3+9-2~22.04.2",
"25.0.4+7-1~22.04",
"25.0.4.1+1-1~22.04.4"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-8",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "22.04",
"versions": [
"8u302-b08-0ubuntu2",
"8u312-b07-0ubuntu1",
"8u342-b07-0ubuntu1~22.04",
"8u352-ga-1~22.04",
"8u362-ga-0ubuntu1~22.04",
"8u372-ga~us1-0ubuntu1~22.04",
"8u382-ga-1~22.04.1",
"8u392-ga-1~22.04",
"8u402-ga-2ubuntu1~22.04",
"8u412-ga-1~22.04.1",
"8u422-b05-1~22.04",
"8u432-ga~us1-0ubuntu2~22.04",
"8u442-b06~us1-0ubuntu1~22.04",
"8u452-ga~us1-0ubuntu1~22.04",
"8u462-ga~us1-0ubuntu2~22.04.2",
"8u472-ga-1~22.04",
"8u482-ga~us1-0ubuntu1~22.04",
"8u492-ga~us2-0ubuntu1~22.04.1",
"8u502-ga~us1-0ubuntu1~22.04",
"8u504-ga-1ubuntu1~22.04.3"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-lts",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "22.04",
"versions": [
"11.0.12+7-0ubuntu3",
"11.0.13+8-0ubuntu1",
"11.0.14+9-0ubuntu2",
"11.0.14.1+1-0ubuntu1",
"11.0.15+10-0ubuntu0.22.04.1",
"11.0.16+8-0ubuntu1~22.04",
"11.0.17+8-1ubuntu2~22.04",
"11.0.18+10-0ubuntu1~22.04",
"11.0.19+7~us1-0ubuntu1~22.04.1",
"11.0.20+8-1ubuntu1~22.04",
"11.0.20.1+1-0ubuntu1~22.04",
"11.0.21+9-0ubuntu1~22.04",
"11.0.22+7-0ubuntu2~22.04.1",
"11.0.23+9-1ubuntu1~22.04.1",
"11.0.24+8-1ubuntu3~22.04",
"11.0.25+9-1ubuntu1~22.04",
"11.0.26+4-1ubuntu1~22.04",
"11.0.27+6~us1-0ubuntu1~22.04",
"11.0.28+6-1ubuntu1~22.04.1",
"11.0.29+7-1ubuntu1~22.04",
"11.0.30+7-1ubuntu1~22.04",
"11.0.31+11-1ubuntu1~22.04.2",
"11.0.32+9-1ubuntu1~22.04",
"11.0.32.1+1-1ubuntu1~22.04"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-17",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "24.04",
"versions": [
"17.0.9~6ea-1",
"17.0.9+9-1",
"17.0.9+9-2",
"17.0.10~6ea-1",
"17.0.10+7-1",
"17.0.11~7ea-1",
"17.0.11~7ea-1build1",
"17.0.11+9-1",
"17.0.12+7-1ubuntu2~24.04",
"17.0.13+11-2ubuntu1~24.04",
"17.0.14+7-1~24.04",
"17.0.15+6~us1-0ubuntu1~24.04",
"17.0.16+8~us1-0ubuntu1~24.04.1",
"17.0.17+10-1~24.04",
"17.0.18+8-1~24.04.1",
"17.0.19+10-1~24.04.2",
"17.0.20+8-1~24.04",
"17.0.20.1+1-1~24.04"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-21",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "24.04",
"versions": [
"21+35-1",
"21.0.1+12-2",
"21.0.1+12-3",
"21.0.2+13-1",
"21.0.2+13-2",
"21.0.3~7ea-1",
"21.0.3~7ea-1build1",
"21.0.3~7ea-1build2",
"21.0.3+9-1",
"21.0.3+9-1ubuntu1",
"21.0.4+7-1ubuntu2~24.04",
"21.0.5+11-1ubuntu1~24.04",
"21.0.6+7-1~24.04.1",
"21.0.7+6~us1-0ubuntu1~24.04",
"21.0.8+9~us1-0ubuntu1~24.04.1",
"21.0.9+10-1~24.04",
"21.0.10+7-1~24.04",
"21.0.11+10-1~24.04.2",
"21.0.12+8-1~24.04",
"21.0.12.1+1-1~24.04.4"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-25",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "24.04",
"versions": [
"25+36-1~24.04.2",
"25.0.1+8-1~24.04",
"25.0.2+10-1~24.04",
"25.0.3+9-2~24.04.2",
"25.0.4+7-1~24.04",
"25.0.4.1+1-1~24.04.4"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-8",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "24.04",
"versions": [
"8u382-ga-1ubuntu1",
"8u392-ga-1",
"8u402-ga-1",
"8u402-ga-2",
"8u402-ga-2ubuntu1",
"8u402-ga-2ubuntu6",
"8u402-ga-2ubuntu7",
"8u402-ga-8build1",
"8u412-ga-1~24.04.2",
"8u422-b05-1~24.04",
"8u432-ga~us1-0ubuntu2~24.04",
"8u442-b06~us1-0ubuntu1~24.04",
"8u452-ga~us1-0ubuntu1~24.04",
"8u462-ga~us1-0ubuntu2~24.04.2",
"8u472-ga-1~24.04",
"8u482-ga~us1-0ubuntu1~24.04",
"8u492-ga~us2-0ubuntu1~24.04.1",
"8u502-ga~us1-0ubuntu1~24.04",
"8u504-ga-1ubuntu1~24.04.3"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-17",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "26.10",
"versions": [
"17.0.18+8-1",
"17.0.19+10-1",
"17.0.20~5ea-1",
"17.0.20+8-1",
"17.0.20.1+1-1",
"17.0.21~6ea-1"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-17-crac",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "26.10",
"versions": [
"17.0.18+8-0ubuntu1",
"17.0.19+10-0ubuntu1",
"17.0.20+8-0ubuntu1"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-21",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "26.10",
"versions": [
"21.0.11~8ea-1",
"21.0.11+10-1",
"21.0.12~5ea-1",
"21.0.12+8-1",
"21.0.12.1+1-1"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-21-crac",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "26.10",
"versions": [
"21.0.10+7-0ubuntu1",
"21.0.11+10-0ubuntu1",
"21.0.12+8-0ubuntu1"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-25",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "26.10",
"versions": [
"25.0.3~7ea-2",
"25.0.3+9-2",
"25.0.4~4ea-1",
"25.0.4+7-1",
"25.0.4.1+1-1"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-27",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "26.10",
"versions": [
"27~19ea-1",
"27~34ea-1",
"27+35-1"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-8",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "26.10",
"versions": [
"8u482-ga~us1-0ubuntu1",
"8u492-ga~us2-0ubuntu2",
"8u502-ga~us1-0ubuntu1",
"8u504-ga-1ubuntu1"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-lts",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "26.10",
"versions": [
"11.0.30+7-1ubuntu1",
"11.0.31+11-1ubuntu2",
"11.0.32+9-1ubuntu1",
"11.0.32.1+1-1ubuntu1",
"11.0.32.1+1-1ubuntu2"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-17",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "26.04",
"versions": [
"17.0.17~8ea-1",
"17.0.17+10-1",
"17.0.18~7ea-1",
"17.0.18+8-1",
"17.0.19+10-1~26.04.2",
"17.0.20+8-1~26.04",
"17.0.20.1+1-1~26.04"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-17-crac",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "26.04",
"versions": [
"17.0.16+8-0ubuntu1",
"17.0.17+10-0ubuntu1",
"17.0.18+8-0ubuntu1",
"17.0.19+10-0ubuntu1~26.04.1",
"17.0.20+8-0ubuntu1~26.04"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-21",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "26.04",
"versions": [
"21.0.9~8ea-1",
"21.0.9+10-1",
"21.0.10~4ea-1",
"21.0.10~6ea-1",
"21.0.10+7-1",
"21.0.11~5ea-1",
"21.0.11~8ea-1",
"21.0.11+10-1~26.04.2",
"21.0.12+8-1~26.04",
"21.0.12.1+1-1~26.04.4"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-21-crac",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "26.04",
"versions": [
"21.0.8+9-0ubuntu1",
"21.0.9+10-0ubuntu1",
"21.0.10+7-0ubuntu1",
"21.0.11+10-0ubuntu1~26.04.1",
"21.0.12+8-0ubuntu1~26.04"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-25",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "26.04",
"versions": [
"25+36-1",
"25.0.1+8-1",
"25.0.1+8-2",
"25.0.1+8-3",
"25.0.2+10-1",
"25.0.3~5ea-2",
"25.0.3~7ea-2",
"25.0.3+9-2~26.04.2",
"25.0.4+7-1~26.04",
"25.0.4.1+1-1~26.04.4"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-8",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "26.04",
"versions": [
"8u462-ga-1",
"8u472-ga~us1-0ubuntu1",
"8u472-ga-1",
"8u482-ga~us1-0ubuntu1",
"8u492-ga~us2-0ubuntu1~26.04.1",
"8u502-ga~us1-0ubuntu1~26.04",
"8u504-ga-1ubuntu1~26.04.3"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
},
{
"name": "openjdk-lts",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "26.04",
"versions": [
"11.0.28+6-1ubuntu1",
"11.0.29+7-1ubuntu1",
"11.0.30+7-1ubuntu1",
"11.0.31+11-1ubuntu1~26.04.2",
"11.0.32+9-1ubuntu1~26.04",
"11.0.32.1+1-1ubuntu1~26.04"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-91464"
}
]
}OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [openjdk-17-dbg]Unknown
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· amd64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· arm64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· amd64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· arm64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- [openjdk-17-demo]Unknown
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· amd64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· arm64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· amd64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· arm64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- [openjdk-17-doc]Unknown
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· all · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· all · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· all · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· all · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- [openjdk-17-jdk]Unknown
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· amd64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· arm64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· amd64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· arm64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- [openjdk-17-jdk-headless]Unknown
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· amd64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· arm64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· amd64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· arm64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- [openjdk-17-jre]Unknown
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· amd64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· arm64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· amd64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· arm64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- [openjdk-17-jre-headless]Unknown
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· amd64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· arm64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· amd64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· arm64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- [openjdk-17-jre-zero]Unknown
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· amd64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· arm64 · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· amd64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· arm64 · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- [openjdk-17-source]Unknown
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· all · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· all · bookwormAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· all · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· all · bookworm-securityAffected · Fixed:
17.0.21+9-1~deb12u1dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[Debian 13 (Trixie)]
- [openjdk-21-dbg]Unknown
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
- [openjdk-21-demo]Unknown
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
- [openjdk-21-doc]Unknown
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· all · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· all · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· all · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· all · trixie-securityAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· all · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· all · trixie-securityFixed · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
- [openjdk-21-jdk]Unknown
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
- [openjdk-21-jdk-headless]Unknown
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
- [openjdk-21-jre]Unknown
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
- [openjdk-21-jre-headless]Unknown
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
- [openjdk-21-jre-zero]Unknown
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
- [openjdk-21-source]Unknown
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· all · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· all · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· all · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· all · trixie-securityAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· all · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· all · trixie-securityFixed · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
- [openjdk-21-testsupport]Unknown
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.13+9-1~deb13u2dsa · openjdk-21 · debian · 13
- [openjdk-25-dbg]Unknown
Source package: [openjdk-25]
Details (7)
25.0.3+9-2~deb13u1· amd64 · trixieAffected · Fixed:
25.0.5+8-1~deb13u1dsa · openjdk-25 · debian · 13
25.0.3+9-2~deb13u1· arm64 · trixieAffected · Fixed:
25.0.5+8-1~deb13u1dsa · openjdk-25 · debian · 13
25.0.3+9-2~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
25.0.5+8-1~deb13u1dsa · openjdk-25 · debian · 13
25.0.4.1+1-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
25.0.5+8-1~deb13u1dsa · openjdk-25 · debian · 13
25.0.4.1+1-1~deb13u1· arm64 · trixie-securityAffected · Fixed:
25.0.5+8-1~deb13u1dsa · openjdk-25 · debian · 13
25.0.4+7-1~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
25.0.5+8-1~deb13u1dsa · openjdk-25 · debian · 13
25.0.5+8-1~deb13u1· amd64 · trixie-securityFixed · Fixed:
25.0.5+8-1~deb13u1dsa · openjdk-25 · debian · 13
Observed:
References
- [https://nvd.nist.gov/vuln/detail/CVE-2026-91464]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-91464]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2026-91464]
- [https://security-tracker.debian.org/tracker/CVE-2026-91464]
- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91464.json]
- [https://www.oracle.com/security-alerts/cpuoct2026.html]
[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]