Re: Sun Security Bulletin #00208

From: Stanley G. Bubrouski (stanat_private)
Date: Wed Oct 24 2001 - 06:30:03 PDT

  • Next message: MASA: "Cross-site Scripting Flaw in webalizer"

    Jay,
    
    It appears it affects all versions of JDK before 1.3.1x...
    
    Regards,
    
    Stan
    
    --
    Stan Bubrouski                                       stanat_private
    23 Westmoreland Road, Hingham, MA 02043        Cell:   (617) 835-3284
    
    
    On Tue, 23 Oct 2001, Jay Sekora wrote:
    
    > >From the Sun Security Bulletin:
    > > 2. Affected Releases
    > > 
    > >    The following releases are affected:
    > 
    >     [...]
    >     
    > >    Solaris OE Production Releases
    > > 
    > >      SDK and JRE 1.3.0_02 or earlier
    > >      SDK and JRE 1.2.2_07 or earlier
    > >      SDK and JRE 1.2.1
    > >      SDK and JRE 1.2
    > 
    > The version of the JDK that is shipped with Solaris 8 4/01 is
    > (according to "/bin/java -version") "build Solaris_JDK_1.2.2_07a".
    > Note trailing "a".  Does anybody know for certain whether that counts
    > as "SDK and JRE 1.2.2_07 or earlier" for purposes of this discussion?
    > (We do lots of Java coursework here, and I'd prefer not to upgrade
    > under people while school is in session if it can safely be avoided.)
    > 
    > Sincerely,
    > 
    > Jay Sekora
    > for <systemsat_private>
    > 
    



    This archive was generated by hypermail 2b30 : Wed Oct 24 2001 - 10:47:39 PDT