[From nobody Mon Aug 3 08:29:04 2026 Received: (at 1126119-done) by bugs.debian.org; 3 Aug 2026 07:26:43 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-9.6 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_EF,FREEMAIL_ENVFROM_END_DIGIT, FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,FROMDEVELOPER,HAS_BUG_NUMBER, HEADER_FROM_DIFFERENT_DOMAINS,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE, SPF_PASS,VERSION autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 64; hammy, 150; neutral, 28; spammy, 0. spammytokens: hammytokens:0.000-+--H*F:U*pochu, 0.000-+--H*RU:sk:pochu27, 0.000-+--H*rp:U*pochu27, 0.000-+--Hx-spam-relays-external:sk:pochu27, 0.000-+--sk:team@se Return-path: <pochu27@gmail.com> Received: from mail-wm1-x32e.google.com ([2a00:1450:4864:20::32e]:56740) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_128_GCM:128) (Exim 4.96) (envelope-from <pochu27@gmail.com>) id 1wqn4N-00AoMN-16 for 1126119-done@bugs.debian.org; Mon, 03 Aug 2026 07:26:43 +0000 Received: by mail-wm1-x32e.google.com with SMTP id 5b1f17b1804b1-49802c418b5so14051985e9.1 for <1126119-done@bugs.debian.org>; Mon, 03 Aug 2026 00:26:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1785741999; x=1786346799; darn=bugs.debian.org; h=content-transfer-encoding:content-type:in-reply-to:autocrypt :content-language:from:references:to:subject:user-agent:mime-version :date:message-id:sender:from:to:cc:subject:date:message-id:reply-to :content-type; bh=SzsGN4lD+HR1sOq2i3Okse8qVI+PZieOOUyZY3GB9V4=; b=jifricjryIKFdsBX/UfOGbp+epMA18SMfhqLYQW0pYdrFhCEhZJYezXa08XrHfjSNu 9qobvASADVFgxZahM9EDqwx5TGmquD+aG9CMxu5A6qI5uKZLRuJlCnJnP+kgrt26825v L5tH9GAuiQjo5P71M6FOr5KC+MW8GqalaFU5w/2qf4Uituh2bbpyCo+e4hEG+rfPyo8J 2rVveuxHVTEeV9IhfUp6ILhpyoNw9J2TScH+e4WEe6eb7NtowWzt6aD/2RwFGE33o4Jq IS6YwEdB0VbHxl4aaOMaM0JpSrra5roYTLi1tqJKh9EAu2K0OzArP59mj3XsVOj8fKWo EJlg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1785741999; x=1786346799; h=content-transfer-encoding:content-type:in-reply-to:autocrypt :content-language:from:references:to:subject:user-agent:mime-version :date:message-id:sender:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to:content-type; bh=SzsGN4lD+HR1sOq2i3Okse8qVI+PZieOOUyZY3GB9V4=; b=ptkDSTKiXE4dxHavmZY4FkoKuWRT7Wo2fLO70lRT77ca8gDLNOkkGvkEP6is0BlWVu 8Sa/q+2D29nfTaySCT2Wl76N6m1L83mVvittEH4ngczEaIN2/zlz7yDU66N/XSAjrOAE bFeyTlD/JTjZKGNQ6uo+lciP6ggVntU1V4zy0druPlRqbzclevEjmbkX7ukwzWAgmqF7 Niy2yEmDFcutl0ywaM7EADfZ44MKrVM99hQGa/EFIoWRYTxLfg/tUvXIyV3EC/rnI0Gp XN49nBBPxDWW1L5OXvtqaW7JZBOv1hrb89FcVsms9033J2P2bQMApTZQr8/coTndjrJt 413w== X-Forwarded-Encrypted: i=1; AHgh+RrEydWVGxKjipRtUo4xr75aK2P/sRynbgragms7PxheHcT2IWqKjy92EDwI8rBFrSCq4g3DEJT5WtuGCbQ=@bugs.debian.org X-Gm-Message-State: AOJu0YwGnixzKKbDkAFFgKnboJmzdb/g9p5J2Wl4VgGqa0FA63h9O65f Wxk/j/ZN4XRpqAVr63uH112FgfgvamTRwhs01e3PPRFKul6ejaXXkP0IAr7xzg== X-Gm-Gg: AR+sD11IdSFceDUHjA4/cNBTsBZoEFa1VU0krVS72bDkUx56gjrqMa5TCg2BS+RFVy3 oItyPZdDG1XANni7n/UuK2+OPVa9J9E144bdQLbkEBO5vdvbBSxVgbv0Lc6cz1nS58igZkZslJN KW93Yd/sujscBN9O/25sfJRBOoMRlR2poAiOEqkmXZs005h6bwiENYZQNGG83+IhpcJHYB0312s 86fs7E4y2jzqcM+kXDu2j52O0CG7tcGxzW8gUAHWai5Z0sWXg3BQEh/CTGA4ICxApHeDPwRZeM3 kveeGagdOMUuG8WdAJICGlrNdPt5qdOoLyHA5sGyNqDLqi1psjQwHYmg6B41VuxS2C/5Yc2/7n/ 68euEjdz00R/ANkzSoupKMqpJ6u+BUDotQ0efoGZe9qGFDVpauhq0x6wShZTy1g8dGj844qyoaE +RZpp8DB0FTGz+TW8VWVQQRNAvyrugCIvwWLjp8WsTceiO40RMLoIDluIhV8+nYn1USY7EKl/Hi Yl56rN23zbLgITf+HiD/eAzYSegQbGhBxo= X-Received: by 2002:a05:600c:3f0d:b0:495:641a:bd3f with SMTP id 5b1f17b1804b1-4980c673891mr201448225e9.13.1785741999242; Mon, 03 Aug 2026 00:26:39 -0700 (PDT) Received: from ?IPV6:2a0c:5a84:f40b:4500:d0e0:b365:69ce:cdab? ([2a0c:5a84:f40b:4500:d0e0:b365:69ce:cdab]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-498081a12a3sm306055785e9.8.2026.08.03.00.26.38 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 03 Aug 2026 00:26:38 -0700 (PDT) Sender: Emilio Pozuelo Monfort <pochu27@gmail.com> Message-ID: <d94896a9-d8d5-48e3-a7c6-e3936014f2ea@debian.org> Date: Mon, 3 Aug 2026 09:26:37 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: Bug#1126119: openjdk-8: CVE-2026-21945 CVE-2026-21933 CVE-2026-21932 CVE-2026-21925 To: =?UTF-8?Q?Moritz_M=C3=BChlenhoff?= <jmm@inutil.org>, 1126119-done@bugs.debian.org References: <aXFPCZDGSsPOXBst@pisco.westfalen.local> From: Emilio Pozuelo Monfort <pochu@debian.org> Content-Language: en-US Autocrypt: addr=pochu@debian.org; keydata= xsFNBE1NaIwBEADSYHqI0pM8UZrI75t4Jli3+hvc5RpmQ/fcZGyzGI/NRoedMMkrRUC7OWzp NYVhJ1R1i5NZMkK9WgWkQovA/Brv8RKsrtHRdq+clJF+gNieZVD7j/ANH8DbuP1fs+K/ar9e d8WZUKLnjH4q/Gpd1JNlxt3C5oItPAXuQkE6w9fLpKZBEyqfbn9z6TgoeXJTpk1Nh5XlbBSE S92iVKMXZQQavX1XuZNUANWT32bVGgBBZ91X7xh+umUZb4DjSR81P704pwPyJnsn6kJRqreG FcXeZJL1+8P6UdlUjDaebkOWEw3gXspNKvzenJOIGoET5m204P2d0AVb+M1IsUhWqt3CpZ0y en7F8XDzuJ8xwpZKHEXKyMBzrfmZ1aJU2xHgN9SjKAJsSZ/AmHu7eKNuOwE1mnRQ5f+wQ5qZ q93D9p0aCZn4qFN0X7d9jeRMNvZ1Vx1MQ8jdJoSBBPjZRP+THRVdPcNYipVWeqAgMbqhNytE rchbBeKP2uQXzXuFqIpvBYEqscC2MdcbV763d9844D7t+cH4yIuyPLiIJOg2XNwGTs8eyfmB r1HKSN4tdbQ8aoWNuOTj6aX7otzsrv33mB8qDeWdDtHwC5IeBKpxcS9Hfr38vdVQ9X+uPzCB NX2ablOMebFDYAmktvaYAea+VLhumbB9vmgPpv3mak2kBpt1YQARAQABzSlFbWlsaW8gUG96 dWVsbyBNb25mb3J0IDxwb2NodUBkZWJpYW4ub3JnPsLBdwQTAQgAIQIbAwULCQgHAwUVCgkI CwUWAgMBAAIeAQIXgAUCTU124gAKCRCdRsSI5DaDArjAD/9HrJsLh59de9BXoOAh/VNW4Z5i HDwuXBO9nL2bg+iPbMBDq0+FM7/pwl+0W9k2ZtntZwYo+0AYD1HmME4f2WBM+TqieS3r5tb8 YHtv6pEjXfvyEh3NhxaPx2gatjdKw7qBgppkrn/jNNK5HcoePyAVEACDZ0BnQI+c8H52suDN PDtVTv7qmuK0gZNECzIvzzjKqn4eyfQQN91VvMmtFEZAqKQqoxZNsqyckr0JKgbRQwBXjsVc kBPcnIHI1+3Ri4bmflyXa0dXBXDK/rjMm23LhuJNMTzTB9V8KE5NHeMXZO7ZCthveYiDPIAB q4vwetlAt0k7GnJNWtefXHgAGVCmS34/WjRxPktaOxZ1HJA0kjES4AtQB6wriuVPDwceF68M NObjcsdMpqoRe0Isvb7odfiGcCtWaBenHCFl1gKxfD9RqaGCrINArugP+r6SDucgtd89stGV 0W7k/sd+J52Elu7TR+wd0feiBi0s7fv80aU3XOcvmgB7DDtEV0qLkZY6ibpb3Afgc075csGW ijGYzc0vhOzud+ZDF90aBWTzkA+V7T6yHhrRBjrzcCa80rpGmqp6kdwcTPIktnDuuwocozjI MYYYHkIvDCyPeyFg4B7OnjegvOokmiiC/F2SH7XCQ1pgeBLl4kTrP9eP0YYBP7Qvni0FO67e pqLk0gtk2M7BTQRNTWiMARAA5sWOdlfkldxdBhbVQYeaeydkVb0P1IjGlqUjwNaInBw/1kHg Eo1lThW+lzZDGNa7Nf/umgTM0lqQ48Y8qJG3DoxXJRAp4oVlet0tJj0gBhEG/f/CYOOuPG40 tsCsvvovENH2tReGl33qjSwPb9TfFL8xcoDPjYo2Y2KNIpk5mb2V0sWKxPr2D/t61MsJQ0P6 FfeJk/m3kiEzkFofeUh5Hy01pmDixYKTYEbYnIOSCwrXypQHiVPtmnBMocdGxotB4wjLJ3hV UThqKcEW3o8swmuc5pWj9Gq+1MzUdg5o1N5yq29ePOrOdE+4llH5wspsjK+n8bFP15MpSVoz a+wY+uBx4G8iQx2UlOu4m0liKRytDkb1SXSalfiQqqQHjbYzzt8nBRPgoe9i6iOv2XhSNXKr JWs7BRt3bCshl+BDiQtwvTAcK1FS5n6cFemHudTQOBAo+l/hY65/CcJmn4QQfs8H/G+pgmd1 T0p6ii9ZpEDjXWhnQY2hCk3MLC8YNSwrWKG2SyZR8dk89oXv8qfrVk0gPO71Dz/KG2dQ0FfD OOpyhaCEV8knaKtGCgK8Pioa+we/KRCC1aKLvgi8Bp+shgwnCu1kFHfm1XOQcNU0TYxsWDNT 6pJdNgONinwjwrI2eyqlPfdNEmsyN1M4eXTJHH0LqfMt8GXlTVu1t2xDxVUAEQEAAcLBXwQY AQgACQUCTU1ojAIbDAAKCRCdRsSI5DaDAkRWD/9gnFELYxHGIdI+6ZiUlO89B+sCiuUKuQXG FGKj7RHpzMgKpBw/pJCK+Y8gKYTBUDYIa9REAetsMWl4DeG12a/5qfYW+h9h3kew3ABm5r2t jUVGHuSd7fWs/8uEmtffWMlnkw58hJYlcuaBlZU+BFXNI+fBj1DL4a0IazsuGu/qPsEeIhHK J/v1UJULLqo4DW9bvRsgvAO+aQZTwkGrhooj4JodRm9PRAPVwyfSrtF+ETXKJfE2rYsW/P3F A26+UG+sg9RFGrt3oPuv/06oaIgsIZKcSxpB0MMEMvmpmNO3Ffb2cv0LDhL+4wOBpgYtpseD 4np5SiXghDI4Vd72lZsZfBSCO8FcAudw4ZyQXqlfowcuK0H0aqibclnuOedVwZNrb0gsSZ5r XczNEJ30SWMGoizXOu6zTyN+iJF5NfDmPw0eVo0MbDOLdx4Jc8WgkLahv7bqAhPkxTMkxXFW wV22QsCqh4ZyRHIGJbM0U+CMuEzlAvLm4q+PzNEhLxbEhMpmrvhdPIwo9B9k39imLX739+Bi 0LdqONwjZcYAt5LODoZtT4P+mkoDUZlSURZMVd/3DAyRyptwNsZSOGtfiKupLtj27N9UT5cT mm/FwScHQKLw+U9hRIftVwgDPd67EPRyeG9oUOiDTryyX7g4wFkU2rDbz4E7HSC+VF/uXMpH vg== In-Reply-To: <aXFPCZDGSsPOXBst@pisco.westfalen.local> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Version: 8u482-ga-1 On 21/01/2026 23:11, Moritz Mühlenhoff wrote: > Package: openjdk-8 > X-Debbugs-CC: team@security.debian.org > Severity: grave > Tags: security > > Hi, > > The following vulnerabilities were published for openjdk-8. These were fixed in: openjdk-8 (8u482-ga-1) unstable; urgency=medium * New upstream release. - CVE-2026-21925, CVE-2026-21932, CVE-2026-21933, CVE-2026-21945 * Drop uabs patches, included upstream. * debian/patches/hotspot-libpath-*.diff: - updated. -- Emilio Pozuelo Monfort <pochu@debian.org> Mon, 02 Mar 2026 00:18:52 +0100 Cheers, Emilio]