[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for openjdk-11 issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Oct 28 19:30:14 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
a1750e20 by Salvatore Bonaccorso at 2026-10-28T20:29:02+01:00
Add Debian bug reference for openjdk-11 issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -8796,7 +8796,7 @@ CVE-2026-92183 (GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code E
CVE-2026-91403 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -10247,7 +10247,7 @@ CVE-2026-91488 (Vulnerability in the Oracle Identity Manager Connector product o
CVE-2026-91487 (Vulnerability in Oracle Java SE (component: Compiler). Supported vers ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -10295,7 +10295,7 @@ CVE-2026-91465 (Vulnerability in the PeopleSoft Enterprise FIN Common Objects Ar
CVE-2026-91464 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -10304,7 +10304,7 @@ CVE-2026-91464 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
CVE-2026-91463 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -10313,7 +10313,7 @@ CVE-2026-91463 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
CVE-2026-91462 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -10322,7 +10322,7 @@ CVE-2026-91462 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
CVE-2026-91461 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -10341,7 +10341,7 @@ CVE-2026-91455 (Vulnerability in the JD Edwards EnterpriseOne Tools product of O
CVE-2026-91453 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -10350,7 +10350,7 @@ CVE-2026-91453 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
CVE-2026-91452 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -10359,7 +10359,7 @@ CVE-2026-91452 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
CVE-2026-91451 (Vulnerability in Oracle Java SE (component: Networking). Supported ve ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -10430,7 +10430,7 @@ CVE-2026-91419 (Vulnerability in the Oracle HTTP Server product of Oracle Fusion
CVE-2026-91418 (Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -10442,7 +10442,7 @@ CVE-2026-91417 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise E
CVE-2026-91415 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -10457,14 +10457,14 @@ CVE-2026-91412 (Vulnerability in the Siebel CRM End User product of Oracle Siebe
CVE-2026-91411 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91410 (Vulnerability in Oracle Java SE (component: Libraries). Supported ver ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -10490,7 +10490,7 @@ CVE-2026-91402 (Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle Graal
CVE-2026-91400 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -10501,7 +10501,7 @@ CVE-2026-91399 (Vulnerability in the Primavera P6 Enterprise Project Portfolio M
CVE-2026-91398 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -10510,7 +10510,7 @@ CVE-2026-91398 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
CVE-2026-91397 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -10518,15 +10518,15 @@ CVE-2026-91397 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91396 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91395 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91394 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of ...)
{DSA-6588-1 DLA-4861-1}
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -10560,7 +10560,7 @@ CVE-2026-91383 (Vulnerability in the JD Edwards EnterpriseOne Tools product of O
CVE-2026-91382 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
@@ -10570,7 +10570,7 @@ CVE-2026-91381 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise E
CVE-2026-91380 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -10579,7 +10579,7 @@ CVE-2026-91380 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
CVE-2026-91379 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -10594,7 +10594,7 @@ CVE-2026-91376 (Vulnerability in the Primavera P6 Enterprise Project Portfolio M
CVE-2026-91375 (Vulnerability in Oracle Java SE (component: Libraries). Supported ver ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -10603,7 +10603,7 @@ CVE-2026-91375 (Vulnerability in Oracle Java SE (component: Libraries). Support
CVE-2026-91374 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -10612,7 +10612,7 @@ CVE-2026-91374 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
CVE-2026-91373 (Vulnerability in Oracle Java SE (component: JSSE). Supported versions ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -10695,7 +10695,7 @@ CVE-2026-91336 (Vulnerability in the Oracle Solaris product of Oracle Systems (c
CVE-2026-91335 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -10704,7 +10704,7 @@ CVE-2026-91335 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
CVE-2026-91334 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -10719,7 +10719,7 @@ CVE-2026-91333 (Vulnerability in Oracle Java SE (component: Security). Supporte
CVE-2026-91332 (Vulnerability in Oracle Java SE (component: Networking). Supported ve ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -11088,7 +11088,7 @@ CVE-2026-87369 (Vulnerability in the Oracle Service Bus product of Oracle Fusion
CVE-2026-87367 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -11239,7 +11239,7 @@ CVE-2026-87295 (Vulnerability in the Oracle HRMS (India) product of Oracle E-Bus
CVE-2026-87294 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -11251,7 +11251,7 @@ CVE-2026-87293 (Vulnerability in Oracle Java SE (component: RMI). Supported ver
CVE-2026-87292 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -11266,7 +11266,7 @@ CVE-2026-87291 (Vulnerability in Oracle Java SE (component: Networking). Suppor
CVE-2026-87290 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -11305,7 +11305,7 @@ CVE-2026-83401 (Vulnerability in the Oracle Identity Manager product of Oracle F
CVE-2026-83400 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -11322,7 +11322,7 @@ CVE-2026-83396 (Vulnerability in the Oracle Data Integrator product of Oracle Fu
CVE-2026-83395 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -11345,7 +11345,7 @@ CVE-2026-83388 (Vulnerability in the Oracle Applications Manager product of Orac
CVE-2026-83387 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -11364,7 +11364,7 @@ CVE-2026-83382 (Vulnerability in the Oracle Report Manager product of Oracle E-B
CVE-2026-83381 (Vulnerability in Oracle Java SE (component: Security). Supported vers ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -11373,7 +11373,7 @@ CVE-2026-83381 (Vulnerability in Oracle Java SE (component: Security). Supporte
CVE-2026-83380 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -11392,7 +11392,7 @@ CVE-2026-83377 (Vulnerability in the Oracle HRMS (US) product of Oracle E-Busine
CVE-2026-83376 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -11403,7 +11403,7 @@ CVE-2026-83375 (Vulnerability in the PeopleSoft Enterprise HCM Human Resources p
CVE-2026-83374 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
@@ -12612,7 +12612,7 @@ CVE-2026-101517 (Vulnerability in the Oracle Utilities Network Management System
CVE-2026-101516 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
{DSA-6588-1}
- openjdk-8 <unfixed> (bug #1151673)
- - openjdk-11 <unfixed>
+ - openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a1750e207d1581303c233be0c5ad3480c82f89e4
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a1750e207d1581303c233be0c5ad3480c82f89e4
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261028/0aadb7bd/attachment.htm>
More information about the debian-security-tracker-commits
mailing list