[Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Oracle rule

Moritz Muehlenhoff (@jmm) jmm at debian.org
Thu Sep 17 08:03:23 BST 2026



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fed1b87e by Moritz Muehlenhoff at 2026-09-17T09:02:58+02:00
auto-nfu: Extend Oracle rule

- - - - -


2 changed files:

- data/CVE/list
- data/packages/nfu.yaml


Changes:

=====================================
data/CVE/list
=====================================
@@ -316,11 +316,11 @@ CVE-2026-87828 (The Seraphinite Accelerator WordPress plugin before 2.29.24 does
 CVE-2026-87289 (Vulnerability in the Helidon product of Oracle Fusion Middleware (comp ...)
 	NOT-FOR-US: Oracle
 CVE-2026-87288 (Vulnerability in the Oracle GraalVM product of Oracle Java SE (compone ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-87287 (Vulnerability in the Oracle GraalVM product of Oracle Java SE (compone ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-87286 (Vulnerability in the Oracle GraalVM product of Oracle Java SE (compone ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-87285 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza ...)
 	TODO: check
 CVE-2026-87284 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza ...)
@@ -548,7 +548,7 @@ CVE-2026-87171 (Vulnerability in the Oracle Hyperion Financial Management produc
 CVE-2026-87170 (Vulnerability in the Oracle Hyperion Financial Management product of O ...)
 	NOT-FOR-US: Oracle
 CVE-2026-87169 (Vulnerability in the Oracle Contract Lifecycle Management for Public S ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-87168 (Vulnerability in the Oracle Purchasing product of Oracle E-Business Su ...)
 	NOT-FOR-US: Oracle
 CVE-2026-87167 (Vulnerability in the Oracle Purchasing product of Oracle E-Business Su ...)
@@ -556,19 +556,19 @@ CVE-2026-87167 (Vulnerability in the Oracle Purchasing product of Oracle E-Busin
 CVE-2026-87166 (Vulnerability in the Oracle Purchasing product of Oracle E-Business Su ...)
 	NOT-FOR-US: Oracle
 CVE-2026-87165 (Vulnerability in the Oracle Contract Lifecycle Management for Public S ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-87164 (Vulnerability in the Oracle Banking Branch product of Oracle Financial ...)
 	TODO: check
 CVE-2026-87163 (Vulnerability in the Oracle Purchasing product of Oracle E-Business Su ...)
 	NOT-FOR-US: Oracle
 CVE-2026-87162 (Vulnerability in the Oracle Contract Lifecycle Management for Public S ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-87161 (Vulnerability in the Oracle HRMS (India) product of Oracle E-Business  ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-87160 (Vulnerability in the Oracle HRMS (India) product of Oracle E-Business  ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-87159 (Vulnerability in the Oracle HRMS (India) product of Oracle E-Business  ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-87158 (Vulnerability in the Oracle Order Management product of Oracle E-Busin ...)
 	NOT-FOR-US: Oracle
 CVE-2026-87157 (Vulnerability in the Oracle Order Management product of Oracle E-Busin ...)
@@ -584,11 +584,11 @@ CVE-2026-87153 (Vulnerability in the Oracle Product Hub product of Oracle E-Busi
 CVE-2026-87152 (Vulnerability in the Oracle Installed Base product of Oracle E-Busines ...)
 	TODO: check
 CVE-2026-87151 (Vulnerability in the Oracle Bills of Material product of Oracle E-Busi ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-87150 (Vulnerability in the Oracle Bills of Material product of Oracle E-Busi ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-87149 (Vulnerability in the Oracle Contract Lifecycle Management for Public S ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-87148 (Vulnerability in the Oracle Hyperion Data Relationship Management prod ...)
 	NOT-FOR-US: Oracle
 CVE-2026-87147 (Vulnerability in the Oracle Hyperion Data Relationship Management prod ...)
@@ -634,7 +634,7 @@ CVE-2026-87128 (Vulnerability in the Oracle Hyperion Data Relationship Managemen
 CVE-2026-87127 (Vulnerability in the Oracle Purchasing product of Oracle E-Business Su ...)
 	NOT-FOR-US: Oracle
 CVE-2026-87126 (Vulnerability in the Oracle Report Manager product of Oracle E-Busines ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-87125 (Vulnerability in the Oracle Financials for Asia/Pacific product of Ora ...)
 	NOT-FOR-US: Oracle
 CVE-2026-87124 (Vulnerability in the Oracle iRecruitment product of Oracle E-Business  ...)
@@ -814,13 +814,13 @@ CVE-2026-83452 (Vulnerability in the Oracle Document Management and Collaboratio
 CVE-2026-83451 (Vulnerability in the Oracle Product Workbench product of Oracle E-Busi ...)
 	TODO: check
 CVE-2026-83450 (Vulnerability in the Oracle Bills of Material product of Oracle E-Busi ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-83449 (Vulnerability in the Oracle Bills of Material product of Oracle E-Busi ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-83448 (Vulnerability in the Oracle Bills of Material product of Oracle E-Busi ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-83447 (Vulnerability in the Oracle Bills of Material product of Oracle E-Busi ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-83446 (Vulnerability in the Oracle Financials Common Modules product of Oracl ...)
 	TODO: check
 CVE-2026-83445 (Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul p ...)
@@ -844,7 +844,7 @@ CVE-2026-83437 (Vulnerability in the Oracle Engineering product of Oracle E-Busi
 CVE-2026-83436 (Vulnerability in the Oracle Depot Repair product of Oracle E-Business  ...)
 	TODO: check
 CVE-2026-83435 (Vulnerability in the Oracle Bills of Material product of Oracle E-Busi ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-83434 (Vulnerability in the Oracle Product Workbench product of Oracle E-Busi ...)
 	TODO: check
 CVE-2026-83433 (Vulnerability in the Oracle Depot Repair product of Oracle E-Business  ...)
@@ -1356,13 +1356,13 @@ CVE-2026-83127 (Vulnerability in the Oracle Sales Offline product of Oracle E-Bu
 CVE-2026-83126 (Vulnerability in the Oracle Sales Online product of Oracle E-Business  ...)
 	TODO: check
 CVE-2026-83125 (Vulnerability in the Oracle Report Manager product of Oracle E-Busines ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-83124 (Vulnerability in the Oracle Sales Online product of Oracle E-Business  ...)
 	TODO: check
 CVE-2026-83123 (Vulnerability in the Oracle Report Manager product of Oracle E-Busines ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-83122 (Vulnerability in the Oracle Report Manager product of Oracle E-Busines ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2026-83121 (Vulnerability in the Oracle Marketing product of Oracle E-Business Sui ...)
 	NOT-FOR-US: Oracle
 CVE-2026-83120 (Vulnerability in the Oracle Alert product of Oracle E-Business Suite ( ...)


=====================================
data/packages/nfu.yaml
=====================================
@@ -698,6 +698,7 @@
       - product: Oracle Applications Platform Engineering
       - product: Oracle Applications Technology Stack
       - product: Oracle BI Publisher
+      - product: Oracle Bills of Material
       - product: Oracle Business Intelligence Enterprise Edition
       - product: Oracle Business Process Management Suite
       - product: Oracle CRM Technical Foundation
@@ -712,6 +713,7 @@
       - product: Oracle Concurrent Processing
       - product: Oracle Configurator
       - product: Oracle Configure to Order
+      - product: Oracle Contract Lifecycle Management for Public Sector
       - product: Oracle Cost Management
       - product: Oracle Data Integrator
       - product: Oracle Database Server
@@ -733,8 +735,10 @@
       - product: Oracle Fusion Middleware
       - product: Oracle General Ledger
       - product: Oracle GoldenGate
+      - product: Oracle GraalVM
       - product: Oracle HCM Common Architecture
       - product: Oracle HR Intelligence
+      - product: Oracle HRMS (India)
       - product: Oracle HRMS (Netherlands)
       - product: Oracle HRMS (UK)
       - product: Oracle HRMS (US)
@@ -785,6 +789,7 @@
       - product: Oracle Quality
       - product: Oracle REST Data Services
       - product: Oracle Receivables
+      - product: Oracle Report Manager
       - product: Oracle Reports Developer
       - product: Oracle Risk Management
       - product: Oracle SDP Number Portability



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fed1b87e44e3b8e757e7ee74cc2186f06eac89aa

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fed1b87e44e3b8e757e7ee74cc2186f06eac89aa
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260917/a8f7b6f4/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list