[Git][security-tracker-team/security-tracker][master] fix status for two Java issues and add OpenJDK advisories
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Thu Oct 22 20:35:49 BST 2026
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
8aa178e4 by Moritz Muehlenhoff at 2026-10-22T20:25:43+02:00
fix status for two Java issues and add OpenJDK advisories
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -156,6 +156,7 @@ CVE-2026-91403 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-21
CVE-2026-90484 (The MySQL client response parser in Apache bRPC dereferences a null po ...)
- brpc <itp> (bug #1060006)
CVE-2026-89052 (A hardcoded cryptographic key management vulnerability exists in Arche ...)
@@ -1494,12 +1495,14 @@ CVE-2026-91487 (Vulnerability in Oracle Java SE (component: Compiler). Supporte
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91486 (Vulnerability in the PeopleSoft Enterprise FIN General Ledger Brazil p ...)
NOT-FOR-US: Oracle
CVE-2026-91485 (Vulnerability in the PeopleSoft Enterprise FIN Cash Management product ...)
NOT-FOR-US: Oracle
CVE-2026-91484 (Vulnerability in Oracle Java SE (component: Java plugin). Supported v ...)
- openjdk-8 <unfixed>
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91483 (Vulnerability in the Oracle Outside In Technology product of Oracle Fu ...)
NOT-FOR-US: Oracle
CVE-2026-91482 (Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing prod ...)
@@ -1538,24 +1541,28 @@ CVE-2026-91464 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91463 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91462 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91461 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91460 (Vulnerability in the Oracle Outside In Technology product of Oracle Fu ...)
NOT-FOR-US: Oracle
CVE-2026-91459 (Vulnerability in the Oracle Outside In Technology product of Oracle Fu ...)
@@ -1572,18 +1579,21 @@ CVE-2026-91453 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91452 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91451 (Vulnerability in Oracle Java SE (component: Networking). Supported ve ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91450 (Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CR ...)
NOT-FOR-US: Oracle
CVE-2026-91449 (Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CR ...)
@@ -1652,14 +1662,17 @@ CVE-2026-91418 (Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle Graal
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91417 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition ...)
- openjdk-8 <unfixed>
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91415 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91414 (Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CR ...)
NOT-FOR-US: Oracle
CVE-2026-91413 (Vulnerability in the Siebel CRM Development product of Oracle Siebel C ...)
@@ -1671,14 +1684,17 @@ CVE-2026-91411 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91410 (Vulnerability in Oracle Java SE (component: Libraries). Supported ver ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91409 (Vulnerability in Oracle Java SE (component: Networking). The support ...)
- openjdk-27 <unfixed>
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91408 (Vulnerability in the Oracle Identity Manager product of Oracle Fusion ...)
NOT-FOR-US: Oracle
CVE-2026-91407 (Vulnerability in the Oracle Identity Manager product of Oracle Fusion ...)
@@ -1693,12 +1709,14 @@ CVE-2026-91402 (Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle Graal
- openjfx <unfixed>
[trixie] - openjfx <not-affected> (Vulnerable code not present, only affects 21 and later)
[bookworm] - openjfx <not-affected> (Vulnerable code not present, only affects 21 and later)
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91400 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91399 (Vulnerability in the Primavera P6 Enterprise Project Portfolio Managem ...)
NOT-FOR-US: Oracle
CVE-2026-91398 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
@@ -1707,27 +1725,28 @@ CVE-2026-91398 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91397 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91396 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
- - openjdk-21 <unfixed>
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91395 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- - openjdk-17 <unfixed>
- - openjdk-21 <unfixed>
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91394 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of ...)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91393 (Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM ...)
NOT-FOR-US: Oracle
CVE-2026-91392 (Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM ...)
@@ -1748,6 +1767,7 @@ CVE-2026-91385 (Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle Graal
- openjfx <unfixed>
[trixie] - openjfx <not-affected> (Vulnerable code not present, only affects 21 and later)
[bookworm] - openjfx <not-affected> (Vulnerable code not present, only affects 21 and later)
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91384 (Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle ...)
NOT-FOR-US: Oracle
CVE-2026-91383 (Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle ...)
@@ -1757,20 +1777,24 @@ CVE-2026-91382 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91381 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition ...)
- openjdk-8 <unfixed>
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91380 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91379 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91378 (Vulnerability in the Siebel CRM Integration product of Oracle Siebel C ...)
NOT-FOR-US: Oracle
CVE-2026-91377 (Vulnerability in the Siebel CRM Integration product of Oracle Siebel C ...)
@@ -1783,18 +1807,21 @@ CVE-2026-91375 (Vulnerability in Oracle Java SE (component: Libraries). Support
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91374 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91373 (Vulnerability in Oracle Java SE (component: JSSE). Supported versions ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91372 (Vulnerability in the Siebel CRM Cloud Applications product of Oracle S ...)
NOT-FOR-US: Oracle
CVE-2026-91371 (Vulnerability in the Siebel CRM Cloud Applications product of Oracle S ...)
@@ -1875,21 +1902,25 @@ CVE-2026-91335 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91334 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91333 (Vulnerability in Oracle Java SE (component: Security). Supported vers ...)
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91332 (Vulnerability in Oracle Java SE (component: Networking). Supported ve ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91331 (Vulnerability in the PeopleSoft Enterprise CC Common Application Objec ...)
NOT-FOR-US: Oracle
CVE-2026-91330 (Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle ...)
@@ -2256,6 +2287,7 @@ CVE-2026-87367 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87366 (Vulnerability in the Oracle Applications Framework product of Oracle E ...)
NOT-FOR-US: Oracle
CVE-2026-87365 (Vulnerability in the Oracle WebCenter Content product of Oracle Fusion ...)
@@ -2404,27 +2436,33 @@ CVE-2026-87294 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87293 (Vulnerability in Oracle Java SE (component: RMI). Supported versions ...)
- openjdk-8 <unfixed>
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87292 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87291 (Vulnerability in Oracle Java SE (component: Networking). Supported ve ...)
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87290 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87263 (Vulnerability in the Oracle Business Intelligence Enterprise Edition p ...)
NOT-FOR-US: Oracle
CVE-2026-87255 (Vulnerability in Oracle Java SE (component: Compiler). Supported vers ...)
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87251 (Vulnerability in the Oracle Access Manager product of Oracle Fusion Mi ...)
NOT-FOR-US: Oracle
CVE-2026-86611 (The Download Manager WordPress plugin before 3.3.71, Download Manager ...)
@@ -2455,6 +2493,7 @@ CVE-2026-83400 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-83399 (Vulnerability in the Oracle WebLogic Server product of Oracle Fusion M ...)
NOT-FOR-US: Oracle
CVE-2026-83398 (Vulnerability in the Oracle Data Integrator product of Oracle Fusion M ...)
@@ -2469,6 +2508,7 @@ CVE-2026-83395 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-83394 (Vulnerability in the Oracle Demand Planning product of Oracle Supply C ...)
NOT-FOR-US: Oracle
CVE-2026-83393 (Vulnerability in the Oracle Product Hub product of Oracle E-Business S ...)
@@ -2489,6 +2529,7 @@ CVE-2026-83387 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-83386 (Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Sui ...)
NOT-FOR-US: Oracle
CVE-2026-83385 (Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Sui ...)
@@ -2505,17 +2546,20 @@ CVE-2026-83381 (Vulnerability in Oracle Java SE (component: Security). Supporte
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-83380 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-83379 (Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of O ...)
NOT-FOR-US: Oracle
CVE-2026-83378 (Vulnerability in Oracle Java SE (component: Compiler). Supported vers ...)
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-83377 (Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Sui ...)
NOT-FOR-US: Oracle
CVE-2026-83376 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
@@ -2524,6 +2568,7 @@ CVE-2026-83376 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-83375 (Vulnerability in the PeopleSoft Enterprise HCM Human Resources product ...)
NOT-FOR-US: Oracle
CVE-2026-83374 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
@@ -2532,6 +2577,7 @@ CVE-2026-83374 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-83373 (Vulnerability in the PeopleSoft Enterprise PeopleTools product of Orac ...)
NOT-FOR-US: Oracle
CVE-2026-83372 (Vulnerability in the PeopleSoft Enterprise PeopleTools product of Orac ...)
@@ -3240,6 +3286,7 @@ CVE-2026-101738 (Vulnerability in the Oracle Agile Engineering Data Management p
NOT-FOR-US: Oracle
CVE-2026-101737 (Vulnerability in Oracle Java SE (component: Compiler). The supported ...)
- openjdk-26 <unfixed>
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-101736 (Vulnerability in the Primavera Unifier product of Oracle Construction ...)
NOT-FOR-US: Oracle
CVE-2026-101735 (Vulnerability in the Primavera Unifier product of Oracle Construction ...)
@@ -3662,6 +3709,7 @@ CVE-2026-101516 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Or
- openjdk-17 <unfixed>
- openjdk-21 <unfixed>
- openjdk-25 <unfixed>
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-101515 (Vulnerability in the Oracle WebLogic Server product of Oracle Fusion M ...)
NOT-FOR-US: Oracle
CVE-2026-101513 (Vulnerability in the MySQL Cluster product of Oracle MySQL (component: ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8aa178e4114ffdd8f3bc33406872851f68f9baef
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8aa178e4114ffdd8f3bc33406872851f68f9baef
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261022/0f0f6c3b/attachment.htm>
More information about the debian-security-tracker-commits
mailing list