An openjdk-7 security update has been released for Debian GNU/Linux 8 LTS

Package : openjdk-7
Version : 7u241-2.6.20-1~deb8u1
CVE ID : CVE-2019-2894 CVE-2019-2933 CVE-2019-2945 CVE-2019-2949
CVE-2019-2958 CVE-2019-2962 CVE-2019-2964 CVE-2019-2973
CVE-2019-2978 CVE-2019-2981 CVE-2019-2983 CVE-2019-2987
CVE-2019-2988 CVE-2019-2989 CVE-2019-2992 CVE-2019-2999

Several vulnerabilities have been discovered in OpenJDK, an
implementation of the Oracle Java platform, resulting in denial of
service, sandbox bypass, information disclosure or the execution
of arbitrary code.

Updates for the amd64 architecture are already available, new packages
for i386, armel and armhf will be available within the next 24 hours.

For Debian 8 "Jessie", these problems have been fixed in version
7u241-2.6.20-1~deb8u1.

We recommend that you upgrade your openjdk-7 packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS