[Git][security-tracker-team/security-tracker][master] Track fixed verison for openjdk-11 via unstable

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue May 3 06:14:26 BST 2022



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4b4844f1 by Salvatore Bonaccorso at 2022-05-03T07:13:29+02:00
Track fixed verison for openjdk-11 via unstable

Note fore reviewers: there is one CVE not listed which remains unfixed,
double check if this one is fixed as well with the 11.0.15 based
version.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -32204,7 +32204,7 @@ CVE-2022-21497 (Vulnerability in the Oracle Web Services Manager product of Orac
 	NOT-FOR-US: Oracle
 CVE-2022-21496 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition ...)
 	- openjdk-8 8u332-ga-1
-	- openjdk-11 <unfixed>
+	- openjdk-11 11.0.15+10-1
 	- openjdk-17 <unfixed>
 CVE-2022-21495
 	RESERVED
@@ -32246,7 +32246,7 @@ CVE-2022-21477 (Vulnerability in the Oracle Applications Framework product of Or
 	NOT-FOR-US: Oracle
 CVE-2022-21476 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition ...)
 	- openjdk-8 8u332-ga-1
-	- openjdk-11 <unfixed>
+	- openjdk-11 11.0.15+10-1
 	- openjdk-17 <unfixed>
 CVE-2022-21475 (Vulnerability in the Oracle Banking Payments product of Oracle Financi ...)
 	NOT-FOR-US: Oracle
@@ -32320,7 +32320,7 @@ CVE-2022-21444 (Vulnerability in the MySQL Server product of Oracle MySQL (compo
 	- mysql-5.7 <removed>
 CVE-2022-21443 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition ...)
 	- openjdk-8 8u332-ga-1
-	- openjdk-11 <unfixed>
+	- openjdk-11 11.0.15+10-1
 	- openjdk-17 <unfixed>
 CVE-2022-21442 (Vulnerability in Oracle GoldenGate (component: OGG Core Library). The  ...)
 	NOT-FOR-US: Oracle
@@ -32340,7 +32340,7 @@ CVE-2022-21435 (Vulnerability in the MySQL Server product of Oracle MySQL (compo
 	- mysql-8.0 <unfixed>
 CVE-2022-21434 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition ...)
 	- openjdk-8 8u332-ga-1
-	- openjdk-11 <unfixed>
+	- openjdk-11 11.0.15+10-1
 	- openjdk-17 <unfixed>
 CVE-2022-21433
 	RESERVED
@@ -32359,7 +32359,7 @@ CVE-2022-21427 (Vulnerability in the MySQL Server product of Oracle MySQL (compo
 	- mysql-5.7 <removed>
 CVE-2022-21426 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition ...)
 	- openjdk-8 8u332-ga-1
-	- openjdk-11 <unfixed>
+	- openjdk-11 11.0.15+10-1
 	- openjdk-17 <unfixed>
 CVE-2022-21425 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
 	- mysql-8.0 <unfixed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4b4844f1c7b527de62e420268e909de91463321c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4b4844f1c7b527de62e420268e909de91463321c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220503/19dab375/attachment.htm>


More information about the debian-security-tracker-commits mailing list