[Git][security-tracker-team/security-tracker][master] java commit references

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
34fe55e6 by Moritz Muehlenhoff at 2025-10-24T22:15:42+02:00
java commit references

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1515,6 +1515,7 @@ CVE-2025-61748 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
 	- openjdk-21 21.0.9+10-1
 	- openjdk-25 25.0.1+8-1
 	NOTE: https://openjdk.org/groups/vulnerability/advisories/2025-10-21
+	NOTE: https://github.com/openjdk/jdk21u/commit/23bd6b50dbbf33975c21c122f8b7e4c7b0d57fdc (jdk-21.0.9-ga)
 CVE-2025-61457 (code16 Sharp v9.6.6 is vulnerable to Cross Site Scripting (XSS) src/Fo ...)
 	NOT-FOR-US: code16 Sharp
 CVE-2025-61255 (Bank Locker Management System by PHPGurukul is affected by a Cross-Sit ...)
@@ -1596,6 +1597,8 @@ CVE-2025-53066 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
 	- openjdk-21 21.0.9+10-1
 	- openjdk-25 25.0.1+8-1
 	NOTE: https://openjdk.org/groups/vulnerability/advisories/2025-10-21
+	NOTE: https://github.com/openjdk/jdk17u/commit/770db9328cc5ad574bd61a2e42f1a4c5601c0405 (jdk-17.0.17-ga)
+	NOTE: https://github.com/openjdk/jdk21u/commit/bb9edcc4a43362aaa49a7b8621291c461f483e24 (jdk-21.0.9-ga)
 CVE-2025-53065 (Vulnerability in the PeopleSoft Enterprise PeopleTools product of Orac ...)
 	NOT-FOR-US: Oracle
 CVE-2025-53064 (Vulnerability in the Oracle Applications Framework product of Oracle E ...)
@@ -1620,6 +1623,8 @@ CVE-2025-53057 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
 	- openjdk-21 21.0.9+10-1
 	- openjdk-25 25.0.1+8-1
 	NOTE: https://openjdk.org/groups/vulnerability/advisories/2025-10-21
+	NOTE: https://github.com/openjdk/jdk17u/commit/cbba8b9dc39c7e484549fd765c9eb8feb7e122e0 (jdk-17.0.17-ga)
+	NOTE: https://github.com/openjdk/jdk21u/commit/643330569baa7c835c2970f0272e9c83883d2a31 (jdk-21.0.9-ga)
 CVE-2025-53056 (Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle  ...)
 	NOT-FOR-US: Oracle
 CVE-2025-53055 (Vulnerability in the PeopleSoft Enterprise PeopleTools product of Orac ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/34fe55e6234fa692063562f18dfa352a3bbd2d42

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/34fe55e6234fa692063562f18dfa352a3bbd2d42
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251024/b4e428ea/attachment.htm>