jdk14 forbidden and Sun #57591

[Doug Poland]

On Mon, Nov 29, 2004 at 03:04:23PM -0700, Greg Lewis wrote:
> On Mon, Nov 29, 2004 at 01:30:20PM -0600, Doug Poland wrote:
> > I was just perusing the documentation on why jd414 is marked as
> > forbidden.  On Sun's site:
> > 
> >  5. Resolution  This issue is addressed in the following releases:
> > 
> >     * SDK and JRE 1.4.2_06 and later
> >     * SDK and JRE 1.3.1_13 and later 
> > 
> > Our version of the jdk in java/jdk14 is: jdk14 1.4.2p6_6.  To me
> > that reads, "the latest jdk14 port is not vulnerable".
> > 
> > Am I missing something?
> 
> You're missing that the native Java port is based on 1.4.2.  Not
> 1.4.2_01, 1.4.2_02, 1.4.2_03, etc.
> 
> In particular we're based on the 1.4.2 SCSL code release, which was
> released long before 1.4.2_06.  The "p6" simply signifies this is the
> sixth set of patches we've released in the process of porting to
> FreeBSD.
> 
Ah, I made the erroneous correlation that 1.4.2p6_6 == 1.4.2_06.
Thanks for setting me straight.  And thank you for contributing to the
freebsd-java community.

-- 
Regards,
Doug