Fix for Sun Alert 246387 included in OpenJDk 6 b11?

Florian Weimer fw at
Mon Jun 8 13:44:59 UTC 2009

* Mark Wielaard:

> On Mon, 2009-06-08 at 15:32 +0200, Mark Wielaard wrote:
>> Hi Florian,
>> On Mon, 2009-06-08 at 15:08 +0200, Florian Weimer wrote:
>> > Was the fix for Sun Alert 246387 (aka CVE-2008-5345) included in
>> > OpenJDK 6b11?
>> I believe CVE-2008-5345 is a catch all for a bundle of security update
>> patches:
>> which were later folded into OpenJDK6 b16:
> Better URLs of the release notes, including CVS numbers:
> and other bug numbers:
> (Note b14, I said b16 before, but that contained other security fixes)

Sorry, but this is way too late to be relevant to my question (which
is about b11, not b14): The CVE-2008-5345 fix was not listed
explicitly in the b14 round of fixes, otherwise I'd have an isolated
patch I could examine.

More information about the core-libs-dev mailing list