[Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Oracle rule

Moritz Muehlenhoff (@jmm) jmm at debian.org
Wed Aug 19 13:13:49 BST 2026 


Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
aa0866b2 by Moritz Muehlenhoff at 2026-08-19T14:13:32+02:00
auto-nfu: Extend Oracle rule

- - - - -


2 changed files:

- data/CVE/list
- data/packages/nfu.yaml


Changes:

=====================================
data/CVE/list
=====================================
@@ -841,7 +841,7 @@ CVE-2026-70854 (Vulnerability in the Oracle Hyperion Financial Management produc
 CVE-2026-70853 (Vulnerability in the Oracle Hyperion Financial Management product of O ...)
 	NOT-FOR-US: Oracle
 CVE-2026-70852 (Vulnerability in the Oracle Demand Planning product of Oracle Supply C ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70851 (Vulnerability in the Oracle Hyperion Financial Management product of O ...)
 	NOT-FOR-US: Oracle
 CVE-2026-70850 (Vulnerability in the Oracle Hyperion Financial Management product of O ...)
@@ -853,7 +853,7 @@ CVE-2026-70848 (Vulnerability in the Oracle Hyperion Financial Management produc
 CVE-2026-70847 (Vulnerability in the Oracle Hyperion Financial Management product of O ...)
 	NOT-FOR-US: Oracle
 CVE-2026-70846 (Vulnerability in the Oracle Demand Planning product of Oracle Supply C ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70845 (Vulnerability in the Oracle Loans product of Oracle E-Business Suite ( ...)
 	NOT-FOR-US: Oracle
 CVE-2026-70844 (Vulnerability in the Oracle Loans product of Oracle E-Business Suite ( ...)
@@ -871,7 +871,7 @@ CVE-2026-70839 (Vulnerability in the Oracle Financials for EMEA product of Oracl
 CVE-2026-70838 (Vulnerability in the Oracle Hyperion Financial Management product of O ...)
 	NOT-FOR-US: Oracle
 CVE-2026-70837 (Vulnerability in the Oracle Financials for Asia/Pacific product of Ora ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70836 (Vulnerability in the Oracle Hyperion Financial Management product of O ...)
 	NOT-FOR-US: Oracle
 CVE-2026-70835 (Vulnerability in the Oracle iRecruitment product of Oracle E-Business  ...)
@@ -885,9 +885,9 @@ CVE-2026-70832 (Vulnerability in the Oracle Hyperion Financial Management produc
 CVE-2026-70831 (Vulnerability in the Oracle Hyperion Financial Management product of O ...)
 	NOT-FOR-US: Oracle
 CVE-2026-70830 (Vulnerability in the Oracle Process Manufacturing Systems product of O ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70829 (Vulnerability in the Oracle Process Manufacturing Systems product of O ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70828 (Vulnerability in the Oracle Hyperion Financial Management product of O ...)
 	NOT-FOR-US: Oracle
 CVE-2026-70827 (Vulnerability in the Oracle MES for Process Manufacturing product of O ...)
@@ -939,21 +939,21 @@ CVE-2026-70805 (Vulnerability in the Oracle Project Planning and Control product
 CVE-2026-70804 (Vulnerability in the Oracle Public Sector Human Resources product of O ...)
 	TODO: check
 CVE-2026-70803 (Vulnerability in the Oracle General Ledger product of Oracle E-Busines ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70802 (Vulnerability in the Oracle Public Sector Human Resources product of O ...)
 	TODO: check
 CVE-2026-70801 (Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Bus ...)
 	TODO: check
 CVE-2026-70800 (Vulnerability in the Oracle SDP Number Portability product of Oracle E ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70799 (Vulnerability in the Oracle SDP Number Portability product of Oracle E ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70798 (Vulnerability in the Oracle Purchasing product of Oracle E-Business Su ...)
 	NOT-FOR-US: Oracle
 CVE-2026-70797 (Vulnerability in the Oracle Purchasing product of Oracle E-Business Su ...)
 	NOT-FOR-US: Oracle
 CVE-2026-70796 (Vulnerability in the Oracle General Ledger product of Oracle E-Busines ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70795 (Vulnerability in the Oracle Applications Platform Engineering product  ...)
 	TODO: check
 CVE-2026-70794 (Vulnerability in the Oracle Hyperion Financial Reporting product of Or ...)
@@ -997,15 +997,15 @@ CVE-2026-70776 (Vulnerability in the Oracle Hyperion Financial Reporting product
 CVE-2026-70775 (Vulnerability in the Oracle Installed Base product of Oracle E-Busines ...)
 	TODO: check
 CVE-2026-70774 (Vulnerability in the Oracle Warehouse Management product of Oracle E-B ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70773 (Vulnerability in the Oracle HCM Common Architecture product of Oracle  ...)
 	NOT-FOR-US: Oracle
 CVE-2026-70772 (Vulnerability in the Oracle Warehouse Management product of Oracle E-B ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70771 (Vulnerability in the Oracle Warehouse Management product of Oracle E-B ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70770 (Vulnerability in the Oracle Warehouse Management product of Oracle E-B ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70769 (Vulnerability in the Oracle Hyperion Financial Reporting product of Or ...)
 	NOT-FOR-US: Oracle
 CVE-2026-70768 (Vulnerability in the Oracle Hyperion Financial Reporting product of Or ...)
@@ -1017,13 +1017,13 @@ CVE-2026-70766 (Vulnerability in the Oracle Hyperion Financial Reporting product
 CVE-2026-70765 (Vulnerability in the Oracle Hyperion Financial Reporting product of Or ...)
 	NOT-FOR-US: Oracle
 CVE-2026-70764 (Vulnerability in the Oracle General Ledger product of Oracle E-Busines ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70763 (Vulnerability in the Oracle Operations Intelligence product of Oracle  ...)
 	TODO: check
 CVE-2026-70762 (Vulnerability in the Oracle Risk Management product of Oracle E-Busine ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70761 (Vulnerability in the Oracle Risk Management product of Oracle E-Busine ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70760 (Vulnerability in the Oracle Order Management product of Oracle E-Busin ...)
 	NOT-FOR-US: Oracle
 CVE-2026-70759 (Vulnerability in the Oracle Hyperion Financial Reporting product of Or ...)
@@ -1061,23 +1061,23 @@ CVE-2026-70740 (Vulnerability in the Oracle Hyperion Financial Reporting product
 CVE-2026-70739 (Vulnerability in the Oracle Hyperion Financial Reporting product of Or ...)
 	NOT-FOR-US: Oracle
 CVE-2026-70738 (Vulnerability in the Oracle Hyperion Profitability and Cost Management ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70737 (Vulnerability in the Oracle Enterprise Manager for Systems Infrastruct ...)
 	TODO: check
 CVE-2026-70736 (Vulnerability in the Oracle Hyperion Profitability and Cost Management ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70735 (Vulnerability in the Oracle Hyperion Profitability and Cost Management ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70734 (Vulnerability in Oracle Autonomous Health Framework (component: Trace  ...)
 	TODO: check
 CVE-2026-70733 (Vulnerability in the Oracle Hyperion Profitability and Cost Management ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70732 (Vulnerability in the Oracle Mobile Application Server product of Oracl ...)
 	TODO: check
 CVE-2026-70731 (Vulnerability in Oracle Autonomous Health Framework (component: Trace  ...)
 	TODO: check
 CVE-2026-70730 (Vulnerability in the Oracle Hyperion Profitability and Cost Management ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70729 (Vulnerability in the Oracle Teleservice product of Oracle E-Business S ...)
 	NOT-FOR-US: Oracle
 CVE-2026-70728 (Vulnerability in Oracle Autonomous Health Framework (component: Trace  ...)
@@ -1091,11 +1091,11 @@ CVE-2026-70725 (Vulnerability in the Oracle Advanced Inbound Telephony product o
 CVE-2026-70724 (Vulnerability in the MySQL Cluster product of Oracle MySQL (component: ...)
 	NOT-FOR-US: Oracle
 CVE-2026-70723 (Vulnerability in the Oracle Hyperion Profitability and Cost Management ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70722 (Vulnerability in the Oracle Advanced Inbound Telephony product of Orac ...)
 	NOT-FOR-US: Oracle
 CVE-2026-70721 (Vulnerability in the Oracle Hyperion Profitability and Cost Management ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70720 (Vulnerability in the Oracle Production Scheduling product of Oracle E- ...)
 	TODO: check
 CVE-2026-70719 (Vulnerability in the Oracle Hyperion Calculation Manager product of Or ...)
@@ -1165,7 +1165,7 @@ CVE-2026-70688 (Vulnerability in Oracle Essbase (component: Calculator).   The s
 CVE-2026-70687 (Vulnerability in the Oracle Marketing product of Oracle E-Business Sui ...)
 	NOT-FOR-US: Oracle
 CVE-2026-70686 (Vulnerability in the Oracle General Ledger product of Oracle E-Busines ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-70685 (Vulnerability in the Oracle Hyperion Calculation Manager product of Or ...)
 	TODO: check
 CVE-2026-70684 (Vulnerability in the Oracle Enterprise Manager Base Platform product o ...)
@@ -1795,7 +1795,7 @@ CVE-2026-60781 (Vulnerability in the Oracle Payments product of Oracle E-Busines
 CVE-2026-60779 (Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel  ...)
 	NOT-FOR-US: Oracle
 CVE-2026-60769 (Vulnerability in the Oracle General Ledger product of Oracle E-Busines ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-60767 (Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel  ...)
 	NOT-FOR-US: Oracle
 CVE-2026-60766 (Vulnerability in the Siebel CRM Integration product of Oracle Siebel C ...)
@@ -1817,7 +1817,7 @@ CVE-2026-60752 (Vulnerability in the Siebel Apps - Marketing product of Oracle S
 CVE-2026-60751 (Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel  ...)
 	NOT-FOR-US: Oracle
 CVE-2026-60748 (Vulnerability in the Oracle General Ledger product of Oracle E-Busines ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-60742 (Vulnerability in the PeopleSoft Enterprise PeopleTools product of Orac ...)
 	NOT-FOR-US: Oracle
 CVE-2026-60737 (Vulnerability in the Oracle Web Services Manager product of Oracle Fus ...)
@@ -1857,7 +1857,7 @@ CVE-2026-60698 (Vulnerability in the Oracle WebLogic Server product of Oracle Fu
 CVE-2026-60696 (Vulnerability in the Oracle WebLogic Server product of Oracle Fusion M ...)
 	NOT-FOR-US: Oracle
 CVE-2026-60693 (Vulnerability in the Oracle General Ledger product of Oracle E-Busines ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-60682 (Vulnerability in the Oracle Hyperion Financial Reporting product of Or ...)
 	NOT-FOR-US: Oracle
 CVE-2026-60680 (Vulnerability in the Oracle WebLogic Server product of Oracle Fusion M ...)


=====================================
data/packages/nfu.yaml
=====================================
@@ -678,6 +678,7 @@
       - product: Oracle Cost Management
       - product: Oracle Data Integrator
       - product: Oracle Database Server
+      - product: Oracle Demand Planning
       - product: Oracle Enterprise Asset Management
       - product: Oracle Enterprise Command Center Framework
       - product: Oracle Enterprise Manager Base Platform
@@ -688,8 +689,10 @@
       - product: Oracle Financial Services Customer Screening
       - product: Oracle Financial Services Revenue Management and Billing
       - product: Oracle Financial Services Transaction Filtering
+      - product: Oracle Financials for Asia/Pacific
       - product: Oracle Financials for EMEA
       - product: Oracle Fusion Middleware
+      - product: Oracle General Ledger
       - product: Oracle GoldenGate
       - product: Oracle HCM Common Architecture
       - product: Oracle HR Intelligence
@@ -706,6 +709,7 @@
       - product: Oracle Hyperion Financial Management
       - product: Oracle Hyperion Financial Reporting
       - product: Oracle Hyperion Infrastructure Technology
+      - product: Oracle Hyperion Profitability and Cost Management
       - product: Oracle Identity Manager
       - product: Oracle Identity Manager Connector
       - product: Oracle In-Memory Cost Management for Discrete Industries
@@ -724,6 +728,7 @@
       - product: Oracle Planning and Budgeting Cloud Service
       - product: Oracle Process Manufacturing Process Planning
       - product: Oracle Process Manufacturing Product Development
+      - product: Oracle Process Manufacturing Systems
       - product: Oracle Product Hub
       - product: Oracle Product Lifecycle Analytics
       - product: Oracle Project Portfolio Analysis
@@ -732,10 +737,12 @@
       - product: Oracle Public Sector Payroll
       - product: Oracle Purchasing
       - product: Oracle Quality
+      - product: Oracle Risk Management
       - product: Oracle REST Data Services
       - product: Oracle Receivables
       - product: Oracle Reports Developer
       - product: Oracle Scripting
+      - product: Oracle SDP Number Portability
       - product: Oracle Secure Backup
       - product: Oracle Security Service
       - product: Oracle Smart View for Office
@@ -748,6 +755,7 @@
       - product: Oracle User Management
       - product: Oracle Utilities Application Framework
       - product: Oracle Virtual Directory
+      - product: Oracle Warehouse Management
       - product: Oracle Web Services Manager
       - product: Oracle WebCenter Content
       - product: Oracle WebCenter Enterprise Capture



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aa0866b25ec73fe49470124da68f54702a79fcd7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aa0866b25ec73fe49470124da68f54702a79fcd7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260819/7525e4de/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list