[Git][security-tracker-team/security-tracker][master] Add initial tracking for CVE-2026-114820

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cd2c7682 by Salvatore Bonaccorso at 2026-10-29T06:19:10+01:00
Add initial tracking for CVE-2026-114820

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -6250,7 +6250,13 @@ CVE-2026-115557 (Python has added a denylist for known compromised certificates
 	NOTE: https://github.com/python/cpython/pull/160042
 	NOTE: Security feature work, not a vulnerability itself
 CVE-2026-114820 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
-	TODO: check
+	- openjdk-8 <unfixed>
+	- openjdk-11 <unfixed>
+	- openjdk-17 17.0.21.0.3+1-1
+	- openjdk-21 <unfixed>
+	- openjdk-25 <unfixed>
+	- openjdk-27 <unfixed>
+	NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-24
 CVE-2026-114705 (Missing Authorization vulnerability in quadlayers WP Social Feed Galle ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-114704 (Deserialization of Untrusted Data vulnerability in Christoph Vielgrade ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd2c76825d27b7a24f6a4a64ebb5ca184045d02e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd2c76825d27b7a24f6a4a64ebb5ca184045d02e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261029/dee85887/attachment.htm>