[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: CVE-2012-5083 does not affect openjdk



Hi Steven

On Tue, Apr 30, 2013 at 07:21:29PM +0100, Steven Chamberlain wrote:
> Bug #690774 was closed (as invalid), and the remaining CVEs from the
> Oracle Java October 2012 updates have been marked as invalid, except
> for CVE-2012-5083, which is still open in the security tracker.
> 
> I don't think it was obvious at the time, but I agree now that this
> (and some of the other CVEs) affected the Oracle Fusion Middleware
> and not OpenJDK.  This is vaguely implied in the description of:
> http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3202
> 
> Please could this CVE be closed like the others?

Have update it.

Regards,
Salvatore


Reply to: