[Git][security-tracker-team/security-tracker][master] 2 commits: Track openjdk-8 issues fixed in unstable
Emilio Pozuelo Monfort (@pochu)
pochu at debian.org
Mon Aug 3 11:08:43 BST 2026
Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker
Commits:
dcf316c0 by Emilio Pozuelo Monfort at 2026-08-03T12:07:01+02:00
Track openjdk-8 issues fixed in unstable
- - - - -
0532e745 by Emilio Pozuelo Monfort at 2026-08-03T12:08:15+02:00
Drop CVE-2026-46917/openjdk-8 association
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -11800,7 +11800,7 @@ CVE-2026-47010 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-21 21.0.12+8-1
- openjdk-17 17.0.20+8-1
- openjdk-11 11.0.32+9-1
- - openjdk-8 <unfixed>
+ - openjdk-8 8u502-ga-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-07-21
CVE-2026-46917 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DLA-4703-1 DLA-4702-1}
@@ -11809,7 +11809,6 @@ CVE-2026-46917 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-21 21.0.12+8-1
- openjdk-17 17.0.20+8-1
- openjdk-11 11.0.32+9-1
- - openjdk-8 <unfixed>
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-07-21
CVE-2026-47021 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DLA-4703-1 DLA-4702-1}
@@ -11818,7 +11817,7 @@ CVE-2026-47021 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-21 21.0.12+8-1
- openjdk-17 17.0.20+8-1
- openjdk-11 11.0.32+9-1
- - openjdk-8 <unfixed>
+ - openjdk-8 8u502-ga-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-07-21
CVE-2026-47027 (Vulnerability in Oracle Java SE (component: Libraries). Supported ver ...)
{DLA-4703-1 DLA-4702-1}
@@ -11827,7 +11826,7 @@ CVE-2026-47027 (Vulnerability in Oracle Java SE (component: Libraries). Support
- openjdk-21 21.0.12+8-1
- openjdk-17 17.0.20+8-1
- openjdk-11 11.0.32+9-1
- - openjdk-8 <unfixed>
+ - openjdk-8 8u502-ga-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-07-21
CVE-2026-47059 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DLA-4703-1 DLA-4702-1}
@@ -11836,7 +11835,7 @@ CVE-2026-47059 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-21 21.0.12+8-1
- openjdk-17 17.0.20+8-1
- openjdk-11 11.0.32+9-1
- - openjdk-8 <unfixed>
+ - openjdk-8 8u502-ga-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-07-21
CVE-2026-46968 (Vulnerability in Oracle Java SE (component: JSSE). Supported versions ...)
{DLA-4703-1 DLA-4702-1}
@@ -11845,7 +11844,7 @@ CVE-2026-46968 (Vulnerability in Oracle Java SE (component: JSSE). Supported ve
- openjdk-21 21.0.12+8-1
- openjdk-17 17.0.20+8-1
- openjdk-11 11.0.32+9-1
- - openjdk-8 <unfixed>
+ - openjdk-8 8u502-ga-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-07-21
CVE-2026-60147 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DLA-4703-1 DLA-4702-1}
@@ -11854,12 +11853,12 @@ CVE-2026-60147 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-21 21.0.12+8-1
- openjdk-17 17.0.20+8-1
- openjdk-11 11.0.32+9-1
- - openjdk-8 <unfixed>
+ - openjdk-8 8u502-ga-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-07-21
CVE-2026-47058 (Vulnerability in Oracle Java SE (component: Scripting). Supported ver ...)
{DLA-4702-1}
- openjdk-11 11.0.32+9-1
- - openjdk-8 <unfixed>
+ - openjdk-8 8u502-ga-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-07-21
CVE-2026-47063 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DLA-4703-1 DLA-4702-1}
@@ -11868,12 +11867,12 @@ CVE-2026-47063 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-21 21.0.12+8-1
- openjdk-17 17.0.20+8-1
- openjdk-11 11.0.32+9-1
- - openjdk-8 <unfixed>
+ - openjdk-8 8u502-ga-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-07-21
CVE-2026-47057 (Vulnerability in Oracle Java SE (component: Scripting). Supported ver ...)
{DLA-4702-1}
- openjdk-11 11.0.32+9-1
- - openjdk-8 <unfixed>
+ - openjdk-8 8u502-ga-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-07-21
CVE-2026-25832
- mbedtls 3.6.7-2
@@ -79955,7 +79954,7 @@ CVE-2026-41254 (Little CMS (lcms2) through 2.18 has an integer overflow in CubeS
- openjdk-21 21.0.12+8-1
- openjdk-17 17.0.20+8-1
- openjdk-11 11.0.32+9-1
- - openjdk-8 <unfixed>
+ - openjdk-8 8u502-ga-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-07-21
NOTE: https://www.openwall.com/lists/oss-security/2026/04/17/16
NOTE: https://abhinavagarwal07.github.io/posts/lcms2-cubesize-overflow/
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/b47572688395b71863eabed56e26aab9b54f2bc2...0532e7455784bc0235c41436c5d9f5004eabc696
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/b47572688395b71863eabed56e26aab9b54f2bc2...0532e7455784bc0235c41436c5d9f5004eabc696
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260803/7f725c37/attachment.htm>
More information about the debian-security-tracker-commits
mailing list