jdk14 forbidden and Sun #57591

[Greg Lewis]

On Mon, Nov 29, 2004 at 01:30:20PM -0600, Doug Poland wrote:
> I was just perusing the documentation on why jd414 is marked as
> forbidden.  On Sun's site:
> 
> http://sunsolve.sun.com/search/document.do?assetkey=1-26-57591-1
> 
> states:
> 
>  2. Contributing Factors  This issue can occur in the following
> releases:
> 
>     * SDK and JRE 1.4.2_05 and earlier, all 1.4.1 and 1.4.0 releases,
>     * and 1.3.1_12 and earlier 
> 
> ...snip...
> 
>  5. Resolution  This issue is addressed in the following releases:
> 
>     * SDK and JRE 1.4.2_06 and later
>     * SDK and JRE 1.3.1_13 and later 
> 
> 
> Our version of the jdk in java/jdk14 is: jdk14 1.4.2p6_6.  To me that
> reads, "the latest jdk14 port is not vulnerable".
> 
> Am I missing something?

You're missing that the native Java port is based on 1.4.2.  Not 1.4.2_01,
1.4.2_02, 1.4.2_03, etc.

In particular we're based on the 1.4.2 SCSL code release, which was
released long before 1.4.2_06.  The "p6" simply signifies this is the
sixth set of patches we've released in the process of porting to FreeBSD.

-- 
Greg Lewis                          Email   : glewis at eyesbeyond.com
Eyes Beyond                         Web     : http://www.eyesbeyond.com
Information Technology              FreeBSD : glewis at FreeBSD.org