[Git][security-tracker-team/security-tracker][master] new openjfx issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7ff7bc94 by Moritz Mühlenhoff at 2026-10-22T00:29:01+02:00
new openjfx issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -421,7 +421,7 @@ CVE-2026-91479 (Vulnerability in the RDBMS component of Oracle Database Server.
 CVE-2026-91478 (Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing prod ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91477 (Vulnerability in the Oracle JavaFX product of Oracle Java SE (componen ...)
-	TODO: check
+	- openjfx <not-affected> (Vulnerable code not present, only affects 25)
 CVE-2026-91476 (Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil p ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91475 (Vulnerability in the Oracle Outside In Technology product of Oracle Fu ...)
@@ -598,7 +598,9 @@ CVE-2026-91405 (Vulnerability in the Oracle Outside In Technology product of Ora
 CVE-2026-91404 (Vulnerability in the Oracle Outside In Technology product of Oracle Fu ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91402 (Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Ent ...)
-	TODO: check
+	- openjfx <unfixed>
+	[trixie] - openjfx <not-affected> (Vulnerable code not present, only affects 21 and later)
+	[bookworm] - openjfx <not-affected> (Vulnerable code not present, only affects 21 and later)
 CVE-2026-91400 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
 	- openjdk-8 <unfixed>
 	- openjdk-11 <unfixed>
@@ -651,7 +653,9 @@ CVE-2026-91387 (Vulnerability in the Siebel CRM End User product of Oracle Siebe
 CVE-2026-91386 (Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of  ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91385 (Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Ent ...)
-	TODO: check
+	- openjfx <unfixed>
+	[trixie] - openjfx <not-affected> (Vulnerable code not present, only affects 21 and later)
+	[bookworm] - openjfx <not-affected> (Vulnerable code not present, only affects 21 and later)
 CVE-2026-91384 (Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle  ...)
 	NOT-FOR-US: Oracle
 CVE-2026-91383 (Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7ff7bc94d6b520a2799cdc0d6bfa2c8826c47d62

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7ff7bc94d6b520a2799cdc0d6bfa2c8826c47d62
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261021/ea4e0090/attachment.htm>