-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 23 Jan 2026 14:19:29 +0100
Source: openjdk-17
Architecture: source
Version: 17.0.18+8-1~deb11u1
Distribution: bullseye-security
Urgency: medium
Maintainer: OpenJDK Team <openjdk-17@packages.debian.org>
Changed-By: Emilio Pozuelo Monfort <pochu@debian.org>
Changes:
openjdk-17 (17.0.18+8-1~deb11u1) bullseye-security; urgency=medium
.
* Non-maintainer upload by the LTS Team.
* Backport to bullseye.
.
openjdk-17 (17.0.18+8-1) unstable; urgency=medium
.
* OpenJDK 17.0.18 release, build 8.
- CVEs:
+ CVE-2026-21945: 8368032: Enhance Certificate Checking.
+ CVE-2026-21932: 8359501: Enhance Handling of URIs.
+ CVE-2026-21933: 8362632: Improve HttpServer Request handling.
+ CVE-2026-21925: 8341496: Improve JMX connections.
Checksums-Sha1:
415ec702e7dc8b307b2fd580e4073c14de6a65b3 4639 openjdk-17_17.0.18+8-1~deb11u1.dsc
f757f831f55051a51c3dd670ea0368111b23c53a 613408 openjdk-17_17.0.18+8.orig-googletest.tar.xz
542b16846c9ace982732bfbcf65c5de17fa5aa7b 63904440 openjdk-17_17.0.18+8.orig.tar.xz
a2f38ffb258ba8281beffc96a4f0347bb9730f76 204712 openjdk-17_17.0.18+8-1~deb11u1.debian.tar.xz
57a7adab4939574340be7a31e4d49422906efc73 9347 openjdk-17_17.0.18+8-1~deb11u1_source.buildinfo
Checksums-Sha256:
dc9ec881f7338fc742c1fbf5d894ef36ec9e8876b5d1cc670dd258f7f4777b73 4639 openjdk-17_17.0.18+8-1~deb11u1.dsc
6e6699c442cd6bc008140d159b43a7a39bb811d1ecd380cf3b707cc535e04393 613408 openjdk-17_17.0.18+8.orig-googletest.tar.xz
4fcf04a097e76e2533bc11ac9f75ff2c175053431debc82ca37a00951a1f9915 63904440 openjdk-17_17.0.18+8.orig.tar.xz
0b92f2283e1a6270a4e094f4da6bd85a3258168bf9aa4a808236ef614a628ccc 204712 openjdk-17_17.0.18+8-1~deb11u1.debian.tar.xz
06f38cbd509acec673bce59703e2b86b6b350d4db95904141e78ce2aa97ea7cf 9347 openjdk-17_17.0.18+8-1~deb11u1_source.buildinfo
Files:
208a5f52e7e8986c7756071f695a6000 4639 java optional openjdk-17_17.0.18+8-1~deb11u1.dsc
ae1c58d38d39133ebcdc47e09d77a661 613408 java optional openjdk-17_17.0.18+8.orig-googletest.tar.xz
8411b97360d51c47a62f530e57d7cbc5 63904440 java optional openjdk-17_17.0.18+8.orig.tar.xz
c3498e19d9036462b721bee810a98ef7 204712 java optional openjdk-17_17.0.18+8-1~deb11u1.debian.tar.xz
ccf603b4d5e1c50c015a60076b4f5d55 9347 java optional openjdk-17_17.0.18+8-1~deb11u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=eVZk
-----END PGP SIGNATURE-----