ELA-1228-1 openjdk-8 security update

multiple vulnerabilities

2024-11-04
Packageopenjdk-8
Version8u432-b06-2~deb8u1 (jessie), 8u432-b06-2~deb9u1 (stretch)
Related CVEs CVE-2024-21208 CVE-2024-21210 CVE-2024-21217 CVE-2024-21235


Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service, information disclosure or bypass of Java sandbox restrictions.



For Debian 8 jessie, these problems have been fixed in version 8u432-b06-2~deb8u1.

For Debian 9 stretch, these problems have been fixed in version 8u432-b06-2~deb9u1.

We recommend that you upgrade your openjdk-8 packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.