Debian alert DLA-3006-1 (openjdk-8)

From:
             
 
Emilio Pozuelo Monfort <pochu@debian.org>
To:
             
 
<debian-lts-announce@lists.debian.org>
Subject:
             
 
[SECURITY] [DLA 3006-1] openjdk-8 security update
Date:
             
 
Sat, 14 May 2022 11:20:52 +0200
Message-ID:
             
 
<20220514092052.8950F2A44C0@andromeda>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-3006-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/               Emilio Pozuelo Monfort
May 14, 2022                                  https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : openjdk-8
Version        : 8u332-ga-1~deb9u1
CVE ID         : CVE-2022-21426 CVE-2022-21434 CVE-2022-21443 CVE-2022-21476
                 CVE-2022-21496

Several vulnerabilities have been discovered in the OpenJDK Java
runtime, which may result in information disclosure or denial of service.

For Debian 9 stretch, these problems have been fixed in version
8u332-ga-1~deb9u1.

We recommend that you upgrade your openjdk-8 packages.

For the detailed security status of openjdk-8 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/openjdk-8

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=x8Ur
-----END PGP SIGNATURE-----