[Git][security-tracker-team/security-tracker][master] one more java issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bd1f0aa7 by Moritz Mühlenhoff at 2026-10-22T12:09:29+02:00
one more java issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -144,7 +144,11 @@ CVE-2026-92183 (GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code E
 	- gimp 3.2.6-1
 	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/e4b0d6bc389df4b9b439a3f4e1155e4de965869e (GIMP_3_2_6)
 CVE-2026-91403 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 17.0.21+9-1
+	- openjdk-21 21.0.13+9-1
+	- openjdk-25 25.0.5+8-1
 CVE-2026-90484 (The MySQL client response parser in Apache bRPC dereferences a null po ...)
 	- brpc <itp> (bug #1060006)
 CVE-2026-89052 (A hardcoded cryptographic key management vulnerability exists in Arche ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bd1f0aa764508c0f91b7900e559b0eac15d99ba5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bd1f0aa764508c0f91b7900e559b0eac15d99ba5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261022/72fce16b/attachment.htm>