[Git][security-tracker-team/security-tracker][master] Sync fixed version for openjdk-8 with unstable upload

Salvatore Bonaccorso carnil at debian.org
Fri Oct 18 06:25:06 BST 2019



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
eaf1a4da by Salvatore Bonaccorso at 2019-10-18T05:23:48Z
Sync fixed version for openjdk-8 with unstable upload

One seem additionally reference which was not tracked and needs double
check which side was wrong: CVE-2019-2987

One is Oracle specific and not further tracked.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -44505,7 +44505,7 @@ CVE-2019-3000 (Vulnerability in the Oracle Marketing product of Oracle E-Busines
 	NOT-FOR-US: Oracle
 CVE-2019-2999 (Vulnerability in the Java SE product of Oracle Java SE (component: Jav ...)
 	- openjdk-11 11.0.5+10-1
-	- openjdk-8 <unfixed>
+	- openjdk-8 8u232-b09-1
 	- openjdk-7 <removed>
 CVE-2019-2998 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
 	- mysql-5.7 <not-affected> (Only affects MySQL 8)
@@ -44522,7 +44522,7 @@ CVE-2019-2993 (Vulnerability in the MySQL Server product of Oracle MySQL (compon
 	NOTE: https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html#AppendixMSQL
 CVE-2019-2992 (Vulnerability in the Java SE, Java SE Embedded product of Oracle Java  ...)
 	- openjdk-11 11.0.5+10-1
-	- openjdk-8 <unfixed>
+	- openjdk-8 8u232-b09-1
 	- openjdk-7 <removed>
 CVE-2019-2991 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
 	- mysql-5.7 <not-affected> (Only affects MySQL 8)
@@ -44530,14 +44530,15 @@ CVE-2019-2990 (Vulnerability in the Oracle iStore product of Oracle E-Business S
 	NOT-FOR-US: Oracle
 CVE-2019-2989 (Vulnerability in the Oracle GraalVM Enterprise Edition product of Orac ...)
 	- openjdk-11 11.0.5+10-1
-	- openjdk-8 <unfixed>
+	- openjdk-8 8u232-b09-1
 	- openjdk-7 <removed>
 CVE-2019-2988 (Vulnerability in the Java SE, Java SE Embedded product of Oracle Java  ...)
 	- openjdk-11 11.0.5+10-1
-	- openjdk-8 <unfixed>
+	- openjdk-8 8u232-b09-1
 	- openjdk-7 <removed>
 CVE-2019-2987 (Vulnerability in the Java SE product of Oracle Java SE (component: 2D) ...)
 	- openjdk-11 11.0.5+10-1
+	- openjdk-8 8u232-b09-1
 CVE-2019-2986 (Vulnerability in the Oracle GraalVM Enterprise Edition product of Orac ...)
 	NOT-FOR-US: Oracle
 CVE-2019-2985 (Vulnerability in the PeopleSoft Enterprise PeopleTools product of Orac ...)
@@ -44547,13 +44548,13 @@ CVE-2019-2984 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virtu
 	[jessie] - virtualbox <end-of-life> (DSA-3699-1)
 CVE-2019-2983 (Vulnerability in the Java SE, Java SE Embedded product of Oracle Java  ...)
 	- openjdk-11 11.0.5+10-1
-	- openjdk-8 <unfixed>
+	- openjdk-8 8u232-b09-1
 	- openjdk-7 <removed>
 CVE-2019-2982 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
 	- mysql-5.7 <not-affected> (Only affects MySQL 8)
 CVE-2019-2981 (Vulnerability in the Java SE, Java SE Embedded product of Oracle Java  ...)
 	- openjdk-11 11.0.5+10-1
-	- openjdk-8 <unfixed>
+	- openjdk-8 8u232-b09-1
 	- openjdk-7 <removed>
 CVE-2019-2980 (Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle  ...)
 	NOT-FOR-US: Oracle
@@ -44561,7 +44562,7 @@ CVE-2019-2979 (Vulnerability in the Oracle FLEXCUBE Direct Banking product of Or
 	NOT-FOR-US: Oracle
 CVE-2019-2978 (Vulnerability in the Java SE, Java SE Embedded product of Oracle Java  ...)
 	- openjdk-11 11.0.5+10-1
-	- openjdk-8 <unfixed>
+	- openjdk-8 8u232-b09-1
 	- openjdk-7 <removed>
 CVE-2019-2977 (Vulnerability in the Java SE product of Oracle Java SE (component: Hot ...)
 	- openjdk-11 11.0.5+10-1
@@ -44569,13 +44570,13 @@ CVE-2019-2976 (Vulnerability in the Primavera P6 Enterprise Project Portfolio Ma
 	NOT-FOR-US: Oracle
 CVE-2019-2975 (Vulnerability in the Java SE, Java SE Embedded product of Oracle Java  ...)
 	- openjdk-11 11.0.5+10-1
-	- openjdk-8 <unfixed>
+	- openjdk-8 8u232-b09-1
 CVE-2019-2974 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
 	- mysql-5.7 <unfixed> (bug #942443)
 	NOTE: https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html#AppendixMSQL
 CVE-2019-2973 (Vulnerability in the Java SE, Java SE Embedded product of Oracle Java  ...)
 	- openjdk-11 11.0.5+10-1
-	- openjdk-8 <unfixed>
+	- openjdk-8 8u232-b09-1
 	- openjdk-7 <removed>
 CVE-2019-2972 (Vulnerability in the Oracle Outside In Technology product of Oracle Fu ...)
 	NOT-FOR-US: Oracle
@@ -44596,13 +44597,13 @@ CVE-2019-2965 (Vulnerability in the Siebel Core - DB Deployment and Configuratio
 	NOT-FOR-US: Oracle
 CVE-2019-2964 (Vulnerability in the Java SE, Java SE Embedded product of Oracle Java  ...)
 	- openjdk-11 11.0.5+10-1
-	- openjdk-8 <unfixed>
+	- openjdk-8 8u232-b09-1
 	- openjdk-7 <removed>
 CVE-2019-2963 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
 	- mysql-5.7 <not-affected> (Only affects MySQL 8)
 CVE-2019-2962 (Vulnerability in the Java SE, Java SE Embedded product of Oracle Java  ...)
 	- openjdk-11 11.0.5+10-1
-	- openjdk-8 <unfixed>
+	- openjdk-8 8u232-b09-1
 	- openjdk-7 <removed>
 CVE-2019-2961 (Vulnerability in the Oracle Solaris product of Oracle Systems (compone ...)
 	NOT-FOR-US: Oracle
@@ -44613,7 +44614,7 @@ CVE-2019-2959 (Vulnerability in the Hyperion Financial Reporting product of Orac
 	NOT-FOR-US: Oracle
 CVE-2019-2958 (Vulnerability in the Java SE, Java SE Embedded product of Oracle Java  ...)
 	- openjdk-11 11.0.5+10-1
-	- openjdk-8 <unfixed>
+	- openjdk-8 8u232-b09-1
 	- openjdk-7 <removed>
 CVE-2019-2957 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
 	- mysql-5.7 <not-affected> (Only affects MySQL 8)
@@ -44633,7 +44634,7 @@ CVE-2019-2950 (Vulnerability in the MySQL Server product of Oracle MySQL (compon
 	- mysql-5.7 <not-affected> (Only affects MySQL 8)
 CVE-2019-2949 (Vulnerability in the Java SE, Java SE Embedded product of Oracle Java  ...)
 	- openjdk-11 11.0.5+10-1
-	- openjdk-8 <unfixed>
+	- openjdk-8 8u232-b09-1
 	- openjdk-7 <removed>
 CVE-2019-2948 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
 	- mysql-5.7 <unfixed> (bug #942443)
@@ -44645,7 +44646,7 @@ CVE-2019-2946 (Vulnerability in the MySQL Server product of Oracle MySQL (compon
 	NOTE: https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html#AppendixMSQL
 CVE-2019-2945 (Vulnerability in the Java SE, Java SE Embedded product of Oracle Java  ...)
 	- openjdk-11 11.0.5+10-1
-	- openjdk-8 <unfixed>
+	- openjdk-8 8u232-b09-1
 	- openjdk-7 <removed>
 CVE-2019-2944 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza ...)
 	- virtualbox 6.0.14-dfsg-1
@@ -44673,7 +44674,7 @@ CVE-2019-2934 (Vulnerability in the Oracle Hospitality Reporting and Analytics c
 	NOT-FOR-US: Oracle
 CVE-2019-2933 (Vulnerability in the Java SE, Java SE Embedded product of Oracle Java  ...)
 	- openjdk-11 11.0.5+10-1
-	- openjdk-8 <unfixed>
+	- openjdk-8 8u232-b09-1
 	- openjdk-7 <removed>
 CVE-2019-2932 (Vulnerability in the PeopleSoft Enterprise PeopleTools product of Orac ...)
 	NOT-FOR-US: Oracle
@@ -44761,7 +44762,7 @@ CVE-2019-2895 (Vulnerability in the Enterprise Manager for Exadata product of Or
 	NOT-FOR-US: Oracle
 CVE-2019-2894 (Vulnerability in the Java SE, Java SE Embedded product of Oracle Java  ...)
 	- openjdk-11 11.0.5+10-1
-	- openjdk-8 <unfixed>
+	- openjdk-8 8u232-b09-1
 	- openjdk-7 <removed>
 CVE-2019-2893
 	RESERVED



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/eaf1a4dabf96f36a579d7edb2787e16e24e25ce0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/eaf1a4dabf96f36a579d7edb2787e16e24e25ce0
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191018/1fa72476/attachment.html>


More information about the debian-security-tracker-commits mailing list