Bug#611138: CVE-2010-4438

Steve McIntyre steve at einval.com
Sun May 13 16:54:38 UTC 2012

On Wed, Jan 04, 2012 at 09:12:31PM +0100, Damien Raude-Morvan wrote:
>On 01/01/2012 19:47, Julien Cristau wrote:
>Hi Julien,
>>On Wed, Jan 26, 2011 at 19:46:32 +0100, Damien Raude-Morvan wrote:
>>>So I don't think Debian package is affected by this issue, but we'll have to
>>>wait until Oracle/Glassfish team publish some source code to confirm ths.
>>Did that happen in the last year?
>Sadly, no :/ I must admit that Oracle does not publish details of its
>fixes so it's hard to confirm firmly what's component is exactly
>I'll try to revive my contact @Oracle to get some feedback on this
>issue (on future security issues).


Any news on this?

Steve McIntyre, Cambridge, UK.                                steve at einval.com
"This dress doesn't reverse." -- Alden Spiess

More information about the pkg-java-maintainers mailing list