Bug#1093878: openjdk-8: CVE-2025-21502

[Thorsten Glaser]

On Tue, 11 Feb 2025, Emilio Pozuelo Monfort wrote:

> From the affected versions, I believe this affects Oracle Java 8
> Enterprise Performance Pack, but not OpenJDK 8

Meanwhile, after several mails back and forth, I managed to extract
useful information from the Oracle employee who deigned to respond
to my inquiry at OpenJDK, and I got this:

https://openjdk.org/groups/vulnerability/advisories/2025-01-21

The matrix indicates that indeed 8 is not affected by this.

bye,
//mirabilos
-- 
15:41⎜<Lo-lan-do:#fusionforge> Somebody write a testsuite for helloworld :-)