Re: CVE-2012-5083 does not affect openjdk
Hi Steven
On Tue, Apr 30, 2013 at 07:21:29PM +0100, Steven Chamberlain wrote:
> Bug #690774 was closed (as invalid), and the remaining CVEs from the
> Oracle Java October 2012 updates have been marked as invalid, except
> for CVE-2012-5083, which is still open in the security tracker.
>
> I don't think it was obvious at the time, but I agree now that this
> (and some of the other CVEs) affected the Oracle Fusion Middleware
> and not OpenJDK. This is vaguely implied in the description of:
> http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3202
>
> Please could this CVE be closed like the others?
Have update it.
Regards,
Salvatore
Reply to: