Fix for Sun Alert 246387 included in OpenJDk 6 b11? (original) (raw)

Florian Weimer fw at deneb.enyo.de
Mon Jun 8 14:08:58 UTC 2009

On Mon, 2009-06-08 at 15:44 +0200, Florian Weimer wrote:

Sorry, but this is way too late to be relevant to my question (which is about b11, not b14): The CVE-2008-5345 fix was not listed explicitly in the b14 round of fixes, otherwise I'd have an isolated patch I could examine. OK. Can you give some more information about what CVE-2008-5345 precisely covers. I couldn't find any details.

This is precisely my problem. I want to make sure that we have the fix in Debian stable.

If it was included in the b11 source drop, we should be fine. I thought Sun might be willing to share this piece of information, even if they don't want to disclose the precise nature of the bug.

More information about the core-libs-dev mailing list