[Git][security-tracker-team/security-tracker][master] Track fixed version for openjdk-17 issues via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Thu Oct 22 07:47:03 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
e3cba4c5 by Salvatore Bonaccorso at 2026-10-22T08:39:34+02:00
Track fixed version for openjdk-17 issues via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -438,7 +438,7 @@ CVE-2026-91488 (Vulnerability in the Oracle Identity Manager Connector product o
CVE-2026-91487 (Vulnerability in Oracle Java SE (component: Compiler). Supported vers ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-91486 (Vulnerability in the PeopleSoft Enterprise FIN General Ledger Brazil p ...)
@@ -482,25 +482,25 @@ CVE-2026-91465 (Vulnerability in the PeopleSoft Enterprise FIN Common Objects Ar
CVE-2026-91464 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-91463 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-91462 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-91461 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-91460 (Vulnerability in the Oracle Outside In Technology product of Oracle Fu ...)
@@ -516,19 +516,19 @@ CVE-2026-91455 (Vulnerability in the JD Edwards EnterpriseOne Tools product of O
CVE-2026-91453 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-91452 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-91451 (Vulnerability in Oracle Java SE (component: Networking). Supported ve ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-91450 (Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CR ...)
@@ -596,7 +596,7 @@ CVE-2026-91419 (Vulnerability in the Oracle HTTP Server product of Oracle Fusion
CVE-2026-91418 (Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-91417 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition ...)
@@ -604,7 +604,7 @@ CVE-2026-91417 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise E
CVE-2026-91415 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-91414 (Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CR ...)
@@ -616,12 +616,12 @@ CVE-2026-91412 (Vulnerability in the Siebel CRM End User product of Oracle Siebe
CVE-2026-91411 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
CVE-2026-91410 (Vulnerability in Oracle Java SE (component: Libraries). Supported ver ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-91409 (Vulnerability in Oracle Java SE (component: Networking). The support ...)
@@ -643,7 +643,7 @@ CVE-2026-91402 (Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle Graal
CVE-2026-91400 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-91399 (Vulnerability in the Primavera P6 Enterprise Project Portfolio Managem ...)
@@ -651,13 +651,13 @@ CVE-2026-91399 (Vulnerability in the Primavera P6 Enterprise Project Portfolio M
CVE-2026-91398 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-91397 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-91396 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
@@ -672,7 +672,7 @@ CVE-2026-91395 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-21 <unfixed>
CVE-2026-91394 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of ...)
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-91393 (Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM ...)
@@ -702,20 +702,20 @@ CVE-2026-91383 (Vulnerability in the JD Edwards EnterpriseOne Tools product of O
CVE-2026-91382 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
CVE-2026-91381 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition ...)
- openjdk-8 <unfixed>
CVE-2026-91380 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-91379 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-91378 (Vulnerability in the Siebel CRM Integration product of Oracle Siebel C ...)
@@ -727,19 +727,19 @@ CVE-2026-91376 (Vulnerability in the Primavera P6 Enterprise Project Portfolio M
CVE-2026-91375 (Vulnerability in Oracle Java SE (component: Libraries). Supported ver ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-91374 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-91373 (Vulnerability in Oracle Java SE (component: JSSE). Supported versions ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-91372 (Vulnerability in the Siebel CRM Cloud Applications product of Oracle S ...)
@@ -819,13 +819,13 @@ CVE-2026-91336 (Vulnerability in the Oracle Solaris product of Oracle Systems (c
CVE-2026-91335 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-91334 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-91333 (Vulnerability in Oracle Java SE (component: Security). Supported vers ...)
@@ -834,7 +834,7 @@ CVE-2026-91333 (Vulnerability in Oracle Java SE (component: Security). Supporte
CVE-2026-91332 (Vulnerability in Oracle Java SE (component: Networking). Supported ve ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-91331 (Vulnerability in the PeopleSoft Enterprise CC Common Application Objec ...)
@@ -1200,7 +1200,7 @@ CVE-2026-87369 (Vulnerability in the Oracle Service Bus product of Oracle Fusion
CVE-2026-87367 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-87366 (Vulnerability in the Oracle Applications Framework product of Oracle E ...)
@@ -1348,7 +1348,7 @@ CVE-2026-87295 (Vulnerability in the Oracle HRMS (India) product of Oracle E-Bus
CVE-2026-87294 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-87293 (Vulnerability in Oracle Java SE (component: RMI). Supported versions ...)
@@ -1356,7 +1356,7 @@ CVE-2026-87293 (Vulnerability in Oracle Java SE (component: RMI). Supported ver
CVE-2026-87292 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-87291 (Vulnerability in Oracle Java SE (component: Networking). Supported ve ...)
@@ -1365,7 +1365,7 @@ CVE-2026-87291 (Vulnerability in Oracle Java SE (component: Networking). Suppor
CVE-2026-87290 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-87263 (Vulnerability in the Oracle Business Intelligence Enterprise Edition p ...)
@@ -1399,7 +1399,7 @@ CVE-2026-83401 (Vulnerability in the Oracle Identity Manager product of Oracle F
CVE-2026-83400 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-83399 (Vulnerability in the Oracle WebLogic Server product of Oracle Fusion M ...)
@@ -1413,7 +1413,7 @@ CVE-2026-83396 (Vulnerability in the Oracle Data Integrator product of Oracle Fu
CVE-2026-83395 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-83394 (Vulnerability in the Oracle Demand Planning product of Oracle Supply C ...)
@@ -1433,7 +1433,7 @@ CVE-2026-83388 (Vulnerability in the Oracle Applications Manager product of Orac
CVE-2026-83387 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-83386 (Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Sui ...)
@@ -1449,13 +1449,13 @@ CVE-2026-83382 (Vulnerability in the Oracle Report Manager product of Oracle E-B
CVE-2026-83381 (Vulnerability in Oracle Java SE (component: Security). Supported vers ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-83380 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-83379 (Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of O ...)
@@ -1468,7 +1468,7 @@ CVE-2026-83377 (Vulnerability in the Oracle HRMS (US) product of Oracle E-Busine
CVE-2026-83376 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-83375 (Vulnerability in the PeopleSoft Enterprise HCM Human Resources product ...)
@@ -1476,7 +1476,7 @@ CVE-2026-83375 (Vulnerability in the PeopleSoft Enterprise HCM Human Resources p
CVE-2026-83374 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
+ - openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
CVE-2026-83373 (Vulnerability in the PeopleSoft Enterprise PeopleTools product of Orac ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e3cba4c5a20edd6e5682317740d4030101cdc4c2
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e3cba4c5a20edd6e5682317740d4030101cdc4c2
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261022/6d791fdc/attachment.htm>
More information about the debian-security-tracker-commits
mailing list