> Debian OpenJDK DSA-6110-1 Critical Cert Validation Man-in-the-Middle Attack
[DATE: 25/01/2026 12:39]
[LANGUAGE: EN]
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in incorrect certificate validation, CRLF injection or man-in-the-middle attacks. For the oldstable distribution (bookworm), these problems have been fixed in version 17.0.18+8-1~deb12u1.