Bug#611138: CVE-2010-4438

[Steve McIntyre]

On Wed, Jan 04, 2012 at 09:12:31PM +0100, Damien Raude-Morvan wrote:
>On 01/01/2012 19:47, Julien Cristau wrote:
>>Hi,
>
>Hi Julien,
>
>>On Wed, Jan 26, 2011 at 19:46:32 +0100, Damien Raude-Morvan wrote:
>>
>>>So I don't think Debian package is affected by this issue, but we'll have to
>>>wait until Oracle/Glassfish team publish some source code to confirm ths.
>>>
>>Did that happen in the last year?
>
>Sadly, no :/ I must admit that Oracle does not publish details of its
>fixes so it's hard to confirm firmly what's component is exactly
>impacted.
>
>I'll try to revive my contact @Oracle to get some feedback on this
>issue (on future security issues).

Hi,

Any news on this?

-- 
Steve McIntyre, Cambridge, UK.                                steve at einval.com
"This dress doesn't reverse." -- Alden Spiess