Bug#1093878: Q about 8u442 applicability of JDK-8330045 (Enhance array handling) / CVE-2025-21502

[Thorsten Glaser]

On Mon, 10 Feb 2025, David Holmes wrote:

> 8u-perf is an Oracle product. You won't find any links to commits for it.

Guess so.

>> I also cannot read JDK-8330045 (wants a login, in contrast to the
>> other JDK-####### bugs I peeked into).
>>
>> So, what’s the state of this?
>
> The entry here lists all the affected versions:
>
> https://www.oracle.com/security-alerts/cpujan2025.html

It doesn’t, it doesn’t list OpenJDK after all, and I know that at
least some OpenJDK versions are affected.

bye,
//mirabilos
-- 
>> Why don't you use JavaScript? I also don't like enabling JavaScript in
> Because I use lynx as browser.
+1
	-- Octavio Alvarez, me and ⡍⠁⠗⠊⠕ (Mario Lang) on debian-devel