[Git][security-tracker-team/security-tracker][master] bugnums
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Thu Oct 22 23:54:57 BST 2026
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
6f41040a by Moritz Muehlenhoff at 2026-10-22T23:49:12+02:00
bugnums
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -165,7 +165,7 @@ CVE-2026-92183 (GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code E
- gimp 3.2.6-1
NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/e4b0d6bc389df4b9b439a3f4e1155e4de965869e (GIMP_3_2_6)
CVE-2026-91403 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -600,16 +600,16 @@ CVE-2026-114463 (The webhook platform gateway in Nous Research Hermes Agent vers
CVE-2026-114462 (Improper link resolution before file access ('link following') vulnera ...)
NOT-FOR-US: Velneo
CVE-2026-114460 (A flaw was found in mod_qos. An off-by-one pointer calculation error o ...)
- - mod-qos <unfixed>
+ - mod-qos <unfixed> (bug #1151674)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2558401
CVE-2026-114459 (A flaw was found in mod_qos. When inspecting HTTP response bodies, imp ...)
- - mod-qos <unfixed>
+ - mod-qos <unfixed> (bug #1151674)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2558397
CVE-2026-114458 (A flaw was found in mod_qos. An unauthenticated remote attacker can ca ...)
- - mod-qos <unfixed>
+ - mod-qos <unfixed> (bug #1151674)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2558393
CVE-2026-114457 (A flaw was found in mod_qos. An unauthenticated remote attacker could ...)
- - mod-qos <unfixed>
+ - mod-qos <unfixed> (bug #1151674)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2558311
CVE-2026-114441 (A weakness has been identified in oretnom23 php-travel-agency-system. ...)
NOT-FOR-US: php-travel-agency-system
@@ -690,7 +690,7 @@ CVE-2026-114375 (A security flaw has been discovered in leomoon-studios wiki-go
CVE-2026-114374 (A vulnerability was identified in leomoon-studios wiki-go up to 1.9.1. ...)
NOT-FOR-US: leomoon-studios wiki-go
CVE-2026-114370 (A flaw was found in the PathResourceManager component of the Undertow ...)
- - undertow <unfixed>
+ - undertow <unfixed> (bug #1151675)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2528757
CVE-2026-114362 (A flaw has been found in HarnessRouter up to 0.31.12. This impacts an ...)
NOT-FOR-US: HarnessRouter
@@ -1145,7 +1145,7 @@ CVE-2026-112921 (Robots::Validate versions from 0.4.3 before 0.4.10 for Perl rep
CVE-2026-94423 (Net::LibSSH versions before 0.004 for Perl authenticate to an unverifi ...)
NOT-FOR-US: Net::LibSSH Perl module
CVE-2026-94140 (Rex versions through 1.16.1 for Perl accept an unknown SSH host key fo ...)
- - rex <unfixed>
+ - rex <unfixed> (bug #1151676)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44533736/
CVE-2026-113811 (Algorithm::UrataniTakeda versions from 0.1.5 before 0.1.7 for Perl all ...)
NOT-FOR-US: Algorithm::UrataniTakeda Perl module
@@ -1554,7 +1554,7 @@ CVE-2026-91489 (Vulnerability in the Oracle Identity Manager Connector product o
CVE-2026-91488 (Vulnerability in the Oracle Identity Manager Connector product of Orac ...)
NOT-FOR-US: Oracle
CVE-2026-91487 (Vulnerability in Oracle Java SE (component: Compiler). Supported vers ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -1566,7 +1566,7 @@ CVE-2026-91486 (Vulnerability in the PeopleSoft Enterprise FIN General Ledger Br
CVE-2026-91485 (Vulnerability in the PeopleSoft Enterprise FIN Cash Management product ...)
NOT-FOR-US: Oracle
CVE-2026-91484 (Vulnerability in Oracle Java SE (component: Java plugin). Supported v ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91483 (Vulnerability in the Oracle Outside In Technology product of Oracle Fu ...)
NOT-FOR-US: Oracle
@@ -1601,7 +1601,7 @@ CVE-2026-91466 (Vulnerability in the PeopleSoft Enterprise FIN Common Objects Ar
CVE-2026-91465 (Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentin ...)
NOT-FOR-US: Oracle
CVE-2026-91464 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -1609,7 +1609,7 @@ CVE-2026-91464 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91463 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -1617,7 +1617,7 @@ CVE-2026-91463 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91462 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -1625,7 +1625,7 @@ CVE-2026-91462 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91461 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -1643,7 +1643,7 @@ CVE-2026-91457 (Vulnerability in the Oracle Outside In Technology product of Ora
CVE-2026-91455 (Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle ...)
NOT-FOR-US: Oracle
CVE-2026-91453 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -1651,7 +1651,7 @@ CVE-2026-91453 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91452 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -1659,7 +1659,7 @@ CVE-2026-91452 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91451 (Vulnerability in Oracle Java SE (component: Networking). Supported ve ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -1729,7 +1729,7 @@ CVE-2026-91420 (Vulnerability in the Siebel CRM Deployment product of Oracle Sie
CVE-2026-91419 (Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middl ...)
NOT-FOR-US: Oracle
CVE-2026-91418 (Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -1737,10 +1737,10 @@ CVE-2026-91418 (Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle Graal
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91417 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91415 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -1754,13 +1754,13 @@ CVE-2026-91413 (Vulnerability in the Siebel CRM Development product of Oracle Si
CVE-2026-91412 (Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM ...)
NOT-FOR-US: Oracle
CVE-2026-91411 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91410 (Vulnerability in Oracle Java SE (component: Libraries). Supported ver ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -1780,12 +1780,12 @@ CVE-2026-91405 (Vulnerability in the Oracle Outside In Technology product of Ora
CVE-2026-91404 (Vulnerability in the Oracle Outside In Technology product of Oracle Fu ...)
NOT-FOR-US: Oracle
CVE-2026-91402 (Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Ent ...)
- - openjfx <unfixed>
+ - openjfx <unfixed> (bug #1151679)
[trixie] - openjfx <not-affected> (Vulnerable code not present, only affects 21 and later)
[bookworm] - openjfx <not-affected> (Vulnerable code not present, only affects 21 and later)
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91400 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -1795,7 +1795,7 @@ CVE-2026-91400 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
CVE-2026-91399 (Vulnerability in the Primavera P6 Enterprise Project Portfolio Managem ...)
NOT-FOR-US: Oracle
CVE-2026-91398 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -1803,7 +1803,7 @@ CVE-2026-91398 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91397 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -1811,11 +1811,11 @@ CVE-2026-91397 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91396 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91395 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91394 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of ...)
@@ -1842,7 +1842,7 @@ CVE-2026-91387 (Vulnerability in the Siebel CRM End User product of Oracle Siebe
CVE-2026-91386 (Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of ...)
NOT-FOR-US: Oracle
CVE-2026-91385 (Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Ent ...)
- - openjfx <unfixed>
+ - openjfx <unfixed> (bug #1151679)
[trixie] - openjfx <not-affected> (Vulnerable code not present, only affects 21 and later)
[bookworm] - openjfx <not-affected> (Vulnerable code not present, only affects 21 and later)
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
@@ -1851,16 +1851,16 @@ CVE-2026-91384 (Vulnerability in the JD Edwards EnterpriseOne Tools product of O
CVE-2026-91383 (Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle ...)
NOT-FOR-US: Oracle
CVE-2026-91382 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91381 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91380 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -1868,7 +1868,7 @@ CVE-2026-91380 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91379 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -1882,7 +1882,7 @@ CVE-2026-91377 (Vulnerability in the Siebel CRM Integration product of Oracle Si
CVE-2026-91376 (Vulnerability in the Primavera P6 Enterprise Project Portfolio Managem ...)
NOT-FOR-US: Oracle
CVE-2026-91375 (Vulnerability in Oracle Java SE (component: Libraries). Supported ver ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -1890,7 +1890,7 @@ CVE-2026-91375 (Vulnerability in Oracle Java SE (component: Libraries). Support
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91374 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -1898,7 +1898,7 @@ CVE-2026-91374 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91373 (Vulnerability in Oracle Java SE (component: JSSE). Supported versions ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -1980,7 +1980,7 @@ CVE-2026-91337 (Vulnerability in the iProcurement product of Oracle E-Business S
CVE-2026-91336 (Vulnerability in the Oracle Solaris product of Oracle Systems (compone ...)
NOT-FOR-US: Oracle
CVE-2026-91335 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -1988,7 +1988,7 @@ CVE-2026-91335 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91334 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -2001,7 +2001,7 @@ CVE-2026-91333 (Vulnerability in Oracle Java SE (component: Security). Supporte
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91332 (Vulnerability in Oracle Java SE (component: Networking). Supported ve ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -2369,7 +2369,7 @@ CVE-2026-87370 (Vulnerability in the Oracle WebCenter Content product of Oracle
CVE-2026-87369 (Vulnerability in the Oracle Service Bus product of Oracle Fusion Middl ...)
NOT-FOR-US: Oracle
CVE-2026-87367 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -2519,7 +2519,7 @@ CVE-2026-87296 (Vulnerability in the Oracle Access Manager product of Oracle Fus
CVE-2026-87295 (Vulnerability in the Oracle HRMS (India) product of Oracle E-Business ...)
NOT-FOR-US: Oracle
CVE-2026-87294 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -2527,10 +2527,10 @@ CVE-2026-87294 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87293 (Vulnerability in Oracle Java SE (component: RMI). Supported versions ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87292 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -2543,7 +2543,7 @@ CVE-2026-87291 (Vulnerability in Oracle Java SE (component: Networking). Suppor
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87290 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -2581,7 +2581,7 @@ CVE-2026-83402 (Vulnerability in the Oracle Identity Manager product of Oracle F
CVE-2026-83401 (Vulnerability in the Oracle Identity Manager product of Oracle Fusion ...)
NOT-FOR-US: Oracle
CVE-2026-83400 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -2597,7 +2597,7 @@ CVE-2026-83397 (Vulnerability in the Oracle Data Integrator product of Oracle Fu
CVE-2026-83396 (Vulnerability in the Oracle Data Integrator product of Oracle Fusion M ...)
NOT-FOR-US: Oracle
CVE-2026-83395 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -2619,7 +2619,7 @@ CVE-2026-83389 (Vulnerability in the Oracle HRMS (UK) product of Oracle E-Busine
CVE-2026-83388 (Vulnerability in the Oracle Applications Manager product of Oracle E-B ...)
NOT-FOR-US: Oracle
CVE-2026-83387 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -2637,7 +2637,7 @@ CVE-2026-83383 (Vulnerability in the Oracle HRMS (US) product of Oracle E-Busine
CVE-2026-83382 (Vulnerability in the Oracle Report Manager product of Oracle E-Busines ...)
NOT-FOR-US: Oracle
CVE-2026-83381 (Vulnerability in Oracle Java SE (component: Security). Supported vers ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -2645,7 +2645,7 @@ CVE-2026-83381 (Vulnerability in Oracle Java SE (component: Security). Supporte
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-83380 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -2662,7 +2662,7 @@ CVE-2026-83378 (Vulnerability in Oracle Java SE (component: Compiler). Supporte
CVE-2026-83377 (Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Sui ...)
NOT-FOR-US: Oracle
CVE-2026-83376 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -2672,7 +2672,7 @@ CVE-2026-83376 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
CVE-2026-83375 (Vulnerability in the PeopleSoft Enterprise HCM Human Resources product ...)
NOT-FOR-US: Oracle
CVE-2026-83374 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -3857,7 +3857,7 @@ CVE-2026-101518 (Vulnerability in the Oracle Enterprise Manager Base Platform pr
CVE-2026-101517 (Vulnerability in the Oracle Utilities Network Management System produc ...)
NOT-FOR-US: Oracle
CVE-2026-101516 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- - openjdk-8 <unfixed>
+ - openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 <unfixed>
- openjdk-21 <unfixed>
@@ -12197,11 +12197,11 @@ CVE-2026-89067 (Authentication bypass using an alternate path or channel vulnera
CVE-2026-88998 (The Tickera WordPress plugin before 3.6.0.4 does not correctly verify ...)
NOT-FOR-US: WordPress plugin
CVE-2026-88842 (A flaw was found in BusyBox dpkg. The write_status_file() function doe ...)
- - busybox <unfixed>
+ - busybox <unfixed> (bug #1151678)
[trixie] - busybox <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2531355
CVE-2026-88829 (A flaw was found in BusyBox httpd's reverse proxy feature. When the pr ...)
- - busybox <unfixed>
+ - busybox <unfixed> (bug #1151677)
[trixie] - busybox <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2531343
CVE-2026-88164 (Missing authorization in Microsoft Office SharePoint allows an authori ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6f41040aebc46d916f0a13f9f8868b63fa85d332
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6f41040aebc46d916f0a13f9f8868b63fa85d332
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261022/c133e55a/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list