OpenJDK Vulnerability Advisories

We publish fixes to vulnerabilities in OpenJDK source code four times per year, in January, April, July, and October, on the Tuesday closest to the seventeenth of the month. We post advisories describing the severity, area, and affected versions of each fix to the vuln-announce mailing list, signed with the advisory key for integrity.

We encourage you to update to the latest version of your preferred JDK distribution as soon as possible.


How to report a vulnerability

Please see the reporting instructions for information about how to report a vulnerability.

Last update: 2024/04/16 20:24 UTC