[Git][security-tracker-team/security-tracker][master] Add CVEs for openjdk-27
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Thu Oct 22 22:23:28 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
8cbc655b by Salvatore Bonaccorso at 2026-10-22T21:25:34+02:00
Add CVEs for openjdk-27
Link: https://tracker.debian.org/news/1813742/accepted-openjdk-27-27019-1-source-into-unstable/
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1542,6 +1542,7 @@ CVE-2026-91487 (Vulnerability in Oracle Java SE (component: Compiler). Supporte
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91486 (Vulnerability in the PeopleSoft Enterprise FIN General Ledger Brazil p ...)
NOT-FOR-US: Oracle
@@ -1588,6 +1589,7 @@ CVE-2026-91464 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91463 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
@@ -1595,6 +1597,7 @@ CVE-2026-91463 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91462 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
@@ -1602,6 +1605,7 @@ CVE-2026-91462 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91461 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
@@ -1609,6 +1613,7 @@ CVE-2026-91461 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91460 (Vulnerability in the Oracle Outside In Technology product of Oracle Fu ...)
NOT-FOR-US: Oracle
@@ -1626,6 +1631,7 @@ CVE-2026-91453 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91452 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
@@ -1633,6 +1639,7 @@ CVE-2026-91452 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91451 (Vulnerability in Oracle Java SE (component: Networking). Supported ve ...)
- openjdk-8 <unfixed>
@@ -1640,6 +1647,7 @@ CVE-2026-91451 (Vulnerability in Oracle Java SE (component: Networking). Suppor
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91450 (Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CR ...)
NOT-FOR-US: Oracle
@@ -1709,6 +1717,7 @@ CVE-2026-91418 (Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle Graal
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91417 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition ...)
- openjdk-8 <unfixed>
@@ -1719,6 +1728,7 @@ CVE-2026-91415 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91414 (Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CR ...)
NOT-FOR-US: Oracle
@@ -1763,6 +1773,7 @@ CVE-2026-91400 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91399 (Vulnerability in the Primavera P6 Enterprise Project Portfolio Managem ...)
NOT-FOR-US: Oracle
@@ -1772,6 +1783,7 @@ CVE-2026-91398 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91397 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
@@ -1779,6 +1791,7 @@ CVE-2026-91397 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91396 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
@@ -1793,6 +1806,7 @@ CVE-2026-91394 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK prod
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91393 (Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM ...)
NOT-FOR-US: Oracle
@@ -1834,6 +1848,7 @@ CVE-2026-91380 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91379 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
@@ -1841,6 +1856,7 @@ CVE-2026-91379 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91378 (Vulnerability in the Siebel CRM Integration product of Oracle Siebel C ...)
NOT-FOR-US: Oracle
@@ -1854,6 +1870,7 @@ CVE-2026-91375 (Vulnerability in Oracle Java SE (component: Libraries). Support
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91374 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
@@ -1861,6 +1878,7 @@ CVE-2026-91374 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91373 (Vulnerability in Oracle Java SE (component: JSSE). Supported versions ...)
- openjdk-8 <unfixed>
@@ -1868,6 +1886,7 @@ CVE-2026-91373 (Vulnerability in Oracle Java SE (component: JSSE). Supported ve
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91372 (Vulnerability in the Siebel CRM Cloud Applications product of Oracle S ...)
NOT-FOR-US: Oracle
@@ -1949,6 +1968,7 @@ CVE-2026-91335 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91334 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
@@ -1956,10 +1976,12 @@ CVE-2026-91334 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91333 (Vulnerability in Oracle Java SE (component: Security). Supported vers ...)
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91332 (Vulnerability in Oracle Java SE (component: Networking). Supported ve ...)
- openjdk-8 <unfixed>
@@ -1967,6 +1989,7 @@ CVE-2026-91332 (Vulnerability in Oracle Java SE (component: Networking). Suppor
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91331 (Vulnerability in the PeopleSoft Enterprise CC Common Application Objec ...)
NOT-FOR-US: Oracle
@@ -2334,6 +2357,7 @@ CVE-2026-87367 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87366 (Vulnerability in the Oracle Applications Framework product of Oracle E ...)
NOT-FOR-US: Oracle
@@ -2483,6 +2507,7 @@ CVE-2026-87294 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87293 (Vulnerability in Oracle Java SE (component: RMI). Supported versions ...)
- openjdk-8 <unfixed>
@@ -2493,10 +2518,12 @@ CVE-2026-87292 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87291 (Vulnerability in Oracle Java SE (component: Networking). Supported ve ...)
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87290 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
@@ -2504,11 +2531,13 @@ CVE-2026-87290 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87263 (Vulnerability in the Oracle Business Intelligence Enterprise Edition p ...)
NOT-FOR-US: Oracle
CVE-2026-87255 (Vulnerability in Oracle Java SE (component: Compiler). Supported vers ...)
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87251 (Vulnerability in the Oracle Access Manager product of Oracle Fusion Mi ...)
NOT-FOR-US: Oracle
@@ -2540,6 +2569,7 @@ CVE-2026-83400 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-83399 (Vulnerability in the Oracle WebLogic Server product of Oracle Fusion M ...)
NOT-FOR-US: Oracle
@@ -2555,6 +2585,7 @@ CVE-2026-83395 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-83394 (Vulnerability in the Oracle Demand Planning product of Oracle Supply C ...)
NOT-FOR-US: Oracle
@@ -2576,6 +2607,7 @@ CVE-2026-83387 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-83386 (Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Sui ...)
NOT-FOR-US: Oracle
@@ -2593,6 +2625,7 @@ CVE-2026-83381 (Vulnerability in Oracle Java SE (component: Security). Supporte
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-83380 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed>
@@ -2600,12 +2633,14 @@ CVE-2026-83380 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-83379 (Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of O ...)
NOT-FOR-US: Oracle
CVE-2026-83378 (Vulnerability in Oracle Java SE (component: Compiler). Supported vers ...)
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-83377 (Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Sui ...)
NOT-FOR-US: Oracle
@@ -2615,6 +2650,7 @@ CVE-2026-83376 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-83375 (Vulnerability in the PeopleSoft Enterprise HCM Human Resources product ...)
NOT-FOR-US: Oracle
@@ -2624,6 +2660,7 @@ CVE-2026-83374 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-83373 (Vulnerability in the PeopleSoft Enterprise PeopleTools product of Orac ...)
NOT-FOR-US: Oracle
@@ -3333,6 +3370,7 @@ CVE-2026-101738 (Vulnerability in the Oracle Agile Engineering Data Management p
NOT-FOR-US: Oracle
CVE-2026-101737 (Vulnerability in Oracle Java SE (component: Compiler). The supported ...)
- openjdk-26 <unfixed>
+ - openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-101736 (Vulnerability in the Primavera Unifier product of Oracle Construction ...)
NOT-FOR-US: Oracle
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8cbc655bde3efb1ebcbcb57c268f5ad1ca0ae09d
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8cbc655bde3efb1ebcbcb57c268f5ad1ca0ae09d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261022/8c0309a7/attachment.htm>
More information about the debian-security-tracker-commits
mailing list