Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5fb98371 by Moritz Muehlenhoff at 2025-04-16T16:16:09+02:00
new Java issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -173,7 +173,11 @@ CVE-2025-30700 (Vulnerability in the Oracle Solaris
product of Oracle Systems (c
CVE-2025-30699 (Vulnerability in the MySQL Server product of Oracle MySQL
(component: ...)
- mysql-8.0 <unfixed>
CVE-2025-30698 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- TODO: check
+ - openjdk-8 <unfixed>
+ - openjdk-11 <unfixed>
+ - openjdk-17 <unfixed>
+ - openjdk-21 <unfixed>
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2025-04-15
CVE-2025-30697 (Vulnerability in the PeopleSoft Enterprise PeopleTools product
of Orac ...)
NOT-FOR-US: Oracle
CVE-2025-30696 (Vulnerability in the MySQL Server product of Oracle MySQL
(component: ...)
@@ -187,7 +191,11 @@ CVE-2025-30693 (Vulnerability in the MySQL Server product
of Oracle MySQL (compo
CVE-2025-30692 (Vulnerability in the Oracle iSupplier Portal product of Oracle
E-Busin ...)
NOT-FOR-US: Oracle
CVE-2025-30691 (Vulnerability in Oracle Java SE (component: Compiler).
Supported vers ...)
- TODO: check
+ - openjdk-8 <unfixed>
+ - openjdk-11 <unfixed>
+ - openjdk-17 <unfixed>
+ - openjdk-21 <unfixed>
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2025-04-15
CVE-2025-30690 (Vulnerability in the Oracle Solaris product of Oracle Systems
(compone ...)
NOT-FOR-US: Oracle
CVE-2025-30689 (Vulnerability in the MySQL Server product of Oracle MySQL
(component: ...)
@@ -323,7 +331,11 @@ CVE-2025-22263 (Improper Neutralization of Input During
Web Page Generation ('Cr
CVE-2025-21588 (Vulnerability in the MySQL Server product of Oracle MySQL
(component: ...)
- mysql-8.0 <not-affected> (Only affects 8.4 and later)
CVE-2025-21587 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- TODO: check
+ - openjdk-8 <unfixed>
+ - openjdk-11 <unfixed>
+ - openjdk-17 <unfixed>
+ - openjdk-21 <unfixed>
+ NOTE: https://openjdk.org/groups/vulnerability/advisories/2025-04-15
CVE-2025-21586 (Vulnerability in the JD Edwards EnterpriseOne Tools product of
Oracle ...)
NOT-FOR-US: Oracle
CVE-2025-21585 (Vulnerability in the MySQL Server product of Oracle MySQL
(component: ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5fb98371e66dfe6647cea590d7b7a9d2309b9f4a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5fb98371e66dfe6647cea590d7b7a9d2309b9f4a
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
