[Git][security-tracker-team/security-tracker][master] new Java issues

Moritz Muehlenhoff (@jmm) jmm at debian.org
Wed Oct 21 23:25:35 BST 2026



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4f0acae3 by Moritz Mühlenhoff at 2026-10-22T00:24:27+02:00
new Java issues

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -397,13 +397,17 @@ CVE-2026-91489 (Vulnerability in the Oracle Identity Manager Connector product o
 CVE-2026-91488 (Vulnerability in the Oracle Identity Manager Connector product of Orac ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91487 (Vulnerability in Oracle Java SE (component: Compiler).  Supported vers ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91486 (Vulnerability in the PeopleSoft Enterprise FIN General Ledger Brazil p ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91485 (Vulnerability in the PeopleSoft Enterprise FIN Cash Management product ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91484 (Vulnerability in Oracle Java SE (component: Java plugin).  Supported v ...)
-	TODO: check
+	- openjdk-8 <unfixed>
 CVE-2026-91483 (Vulnerability in the Oracle Outside In Technology product of Oracle Fu ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91482 (Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing prod ...)
@@ -437,13 +441,29 @@ CVE-2026-91466 (Vulnerability in the PeopleSoft Enterprise FIN Common Objects Ar
 CVE-2026-91465 (Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentin ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91464 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91463 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91462 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91461 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91460 (Vulnerability in the Oracle Outside In Technology product of Oracle Fu ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91459 (Vulnerability in the Oracle Outside In Technology product of Oracle Fu ...)
@@ -455,11 +475,23 @@ CVE-2026-91457 (Vulnerability in the Oracle Outside In Technology product of Ora
 CVE-2026-91455 (Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle  ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91453 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91452 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91451 (Vulnerability in Oracle Java SE (component: Networking).  Supported ve ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91450 (Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CR ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91449 (Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CR ...)
@@ -523,11 +555,19 @@ CVE-2026-91420 (Vulnerability in the Siebel CRM Deployment product of Oracle Sie
 CVE-2026-91419 (Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middl ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91418 (Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91417 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition ...)
-	TODO: check
+	- openjdk-8 <unfixed>
 CVE-2026-91415 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91414 (Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CR ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91413 (Vulnerability in the Siebel CRM Development product of Oracle Siebel C ...)
@@ -535,11 +575,18 @@ CVE-2026-91413 (Vulnerability in the Siebel CRM Development product of Oracle Si
 CVE-2026-91412 (Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM  ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91411 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
 CVE-2026-91410 (Vulnerability in Oracle Java SE (component: Libraries).  Supported ver ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91409 (Vulnerability in Oracle Java SE (component: Networking).   The support ...)
-	TODO: check
+	- openjdk-27 <unfixed>
 CVE-2026-91408 (Vulnerability in the Oracle Identity Manager product of Oracle Fusion  ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91407 (Vulnerability in the Oracle Identity Manager product of Oracle Fusion  ...)
@@ -553,19 +600,40 @@ CVE-2026-91404 (Vulnerability in the Oracle Outside In Technology product of Ora
 CVE-2026-91402 (Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Ent ...)
 	TODO: check
 CVE-2026-91400 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91399 (Vulnerability in the Primavera P6 Enterprise Project Portfolio Managem ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91398 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91397 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91396 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
 CVE-2026-91395 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
 CVE-2026-91394 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of ...)
-	TODO: check
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91393 (Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM  ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91392 (Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM  ...)
@@ -589,13 +657,24 @@ CVE-2026-91384 (Vulnerability in the JD Edwards EnterpriseOne Tools product of O
 CVE-2026-91383 (Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle  ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91382 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
 CVE-2026-91381 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition ...)
-	TODO: check
+	- openjdk-8 <unfixed>
 CVE-2026-91380 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91379 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91378 (Vulnerability in the Siebel CRM Integration product of Oracle Siebel C ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91377 (Vulnerability in the Siebel CRM Integration product of Oracle Siebel C ...)
@@ -603,11 +682,23 @@ CVE-2026-91377 (Vulnerability in the Siebel CRM Integration product of Oracle Si
 CVE-2026-91376 (Vulnerability in the Primavera P6 Enterprise Project Portfolio Managem ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91375 (Vulnerability in Oracle Java SE (component: Libraries).  Supported ver ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91374 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91373 (Vulnerability in Oracle Java SE (component: JSSE).  Supported versions ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91372 (Vulnerability in the Siebel CRM Cloud Applications product of Oracle S ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91371 (Vulnerability in the Siebel CRM Cloud Applications product of Oracle S ...)
@@ -683,13 +774,26 @@ CVE-2026-91337 (Vulnerability in the iProcurement product of Oracle E-Business S
 CVE-2026-91336 (Vulnerability in the Oracle Solaris product of Oracle Systems (compone ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91335 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91334 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91333 (Vulnerability in Oracle Java SE (component: Security).  Supported vers ...)
-	TODO: check
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91332 (Vulnerability in Oracle Java SE (component: Networking).  Supported ve ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-91331 (Vulnerability in the PeopleSoft Enterprise CC Common Application Objec ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91330 (Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle  ...)
@@ -1051,7 +1155,11 @@ CVE-2026-87370 (Vulnerability in the Oracle WebCenter Content product of Oracle
 CVE-2026-87369 (Vulnerability in the Oracle Service Bus product of Oracle Fusion Middl ...)
 	TODO: check
 CVE-2026-87367 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-87366 (Vulnerability in the Oracle Applications Framework product of Oracle E ...)
 	NOT-FOR-US: Oracle
 CVE-2026-87365 (Vulnerability in the Oracle WebCenter Content product of Oracle Fusion ...)
@@ -1195,19 +1303,32 @@ CVE-2026-87296 (Vulnerability in the Oracle Access Manager product of Oracle Fus
 CVE-2026-87295 (Vulnerability in the Oracle HRMS (India) product of Oracle E-Business  ...)
 	NOT-FOR-US: Oracle
 CVE-2026-87294 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-87293 (Vulnerability in Oracle Java SE (component: RMI).  Supported versions  ...)
-	TODO: check
+	- openjdk-8 <unfixed>
 CVE-2026-87292 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-87291 (Vulnerability in Oracle Java SE (component: Networking).  Supported ve ...)
-	TODO: check
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-87290 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-87263 (Vulnerability in the Oracle Business Intelligence Enterprise Edition p ...)
 	NOT-FOR-US: Oracle
 CVE-2026-87255 (Vulnerability in Oracle Java SE (component: Compiler).  Supported vers ...)
-	TODO: check
+	- openjdk-25 <unfixed>
 CVE-2026-87251 (Vulnerability in the Oracle Access Manager product of Oracle Fusion Mi ...)
 	NOT-FOR-US: Oracle
 CVE-2026-86611 (The Download Manager WordPress plugin before 3.3.71, Download Manager  ...)
@@ -1233,7 +1354,11 @@ CVE-2026-83402 (Vulnerability in the Oracle Identity Manager product of Oracle F
 CVE-2026-83401 (Vulnerability in the Oracle Identity Manager product of Oracle Fusion  ...)
 	NOT-FOR-US: Oracle
 CVE-2026-83400 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-83399 (Vulnerability in the Oracle WebLogic Server product of Oracle Fusion M ...)
 	NOT-FOR-US: Oracle
 CVE-2026-83398 (Vulnerability in the Oracle Data Integrator product of Oracle Fusion M ...)
@@ -1243,7 +1368,11 @@ CVE-2026-83397 (Vulnerability in the Oracle Data Integrator product of Oracle Fu
 CVE-2026-83396 (Vulnerability in the Oracle Data Integrator product of Oracle Fusion M ...)
 	NOT-FOR-US: Oracle
 CVE-2026-83395 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-83394 (Vulnerability in the Oracle Demand Planning product of Oracle Supply C ...)
 	NOT-FOR-US: Oracle
 CVE-2026-83393 (Vulnerability in the Oracle Product Hub product of Oracle E-Business S ...)
@@ -1259,7 +1388,11 @@ CVE-2026-83389 (Vulnerability in the Oracle HRMS (UK) product of Oracle E-Busine
 CVE-2026-83388 (Vulnerability in the Oracle Applications Manager product of Oracle E-B ...)
 	NOT-FOR-US: Oracle
 CVE-2026-83387 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-83386 (Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Sui ...)
 	NOT-FOR-US: Oracle
 CVE-2026-83385 (Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Sui ...)
@@ -1271,21 +1404,38 @@ CVE-2026-83383 (Vulnerability in the Oracle HRMS (US) product of Oracle E-Busine
 CVE-2026-83382 (Vulnerability in the Oracle Report Manager product of Oracle E-Busines ...)
 	NOT-FOR-US: Oracle
 CVE-2026-83381 (Vulnerability in Oracle Java SE (component: Security).  Supported vers ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-83380 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-83379 (Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of O ...)
 	TODO: check
 CVE-2026-83378 (Vulnerability in Oracle Java SE (component: Compiler).  Supported vers ...)
-	TODO: check
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-83377 (Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Sui ...)
 	NOT-FOR-US: Oracle
 CVE-2026-83376 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-83375 (Vulnerability in the PeopleSoft Enterprise HCM Human Resources product ...)
 	NOT-FOR-US: Oracle
 CVE-2026-83374 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-83373 (Vulnerability in the PeopleSoft Enterprise PeopleTools product of Orac ...)
 	NOT-FOR-US: Oracle
 CVE-2026-83372 (Vulnerability in the PeopleSoft Enterprise PeopleTools product of Orac ...)
@@ -1989,7 +2139,7 @@ CVE-2026-101739 (Vulnerability in the Oracle Agile Engineering Data Management p
 CVE-2026-101738 (Vulnerability in the Oracle Agile Engineering Data Management product  ...)
 	NOT-FOR-US: Oracle
 CVE-2026-101737 (Vulnerability in Oracle Java SE (component: Compiler).   The supported ...)
-	TODO: check
+	- openjdk-26 <unfixed>
 CVE-2026-101736 (Vulnerability in the Primavera Unifier product of Oracle Construction  ...)
 	TODO: check
 CVE-2026-101735 (Vulnerability in the Primavera Unifier product of Oracle Construction  ...)
@@ -2407,7 +2557,11 @@ CVE-2026-101518 (Vulnerability in the Oracle Enterprise Manager Base Platform pr
 CVE-2026-101517 (Vulnerability in the Oracle Utilities Network Management System produc ...)
 	NOT-FOR-US: Oracle
 CVE-2026-101516 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 <unfixed>
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
 CVE-2026-101515 (Vulnerability in the Oracle WebLogic Server product of Oracle Fusion M ...)
 	NOT-FOR-US: Oracle
 CVE-2026-101513 (Vulnerability in the MySQL Cluster product of Oracle MySQL (component: ...)


=====================================
data/dsa-needed.txt
=====================================
@@ -112,6 +112,10 @@ nsd
 --
 openexr
 --
+openjdk-21 (jmm)
+--
+openjdk-25 (jmm)
+--
 pacemaker
 --
 pdfminer (carnil)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4f0acae30fc46f31cd5f0683d220daac55a45564

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4f0acae30fc46f31cd5f0683d220daac55a45564
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261021/7eec6738/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list