Debian alert DLA-4248-1 (openjdk-11)

From:
             
 
Emilio Pozuelo Monfort <pochu@debian.org>
To:
             
 
<debian-lts-announce@lists.debian.org>
Subject:
             
 
[SECURITY] [DLA 4248-1] openjdk-11 security update
Date:
             
 
Wed, 23 Jul 2025 12:19:39 +0200
Message-ID:
             
 
<20250723101939.E68965F00099@kamino>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4248-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/               Emilio Pozuelo Monfort
July 23, 2025                                 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : openjdk-11
Version        : 11.0.28+6-1~deb11u1
CVE ID         : CVE-2025-30749 CVE-2025-30754 CVE-2025-30761 CVE-2025-50059
                 CVE-2025-50106

Several vulnerabilities have been discovered in the OpenJDK Java
runtime, which may result in denial of service, information disclosure
or bypass of sandbox restrictions.

For Debian 11 bullseye, these problems have been fixed in version
11.0.28+6-1~deb11u1.

We recommend that you upgrade your openjdk-11 packages.

For the detailed security status of openjdk-11 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/openjdk-11

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=ItQq
-----END PGP SIGNATURE-----