From owner-freebsd-java  Tue Mar 19 16:34:32 2002
Delivered-To: freebsd-java@freebsd.org
Received: from cafe.muraoka.info.waseda.ac.jp (cafe.muraoka.info.waseda.ac.jp [133.9.68.49])
	by hub.freebsd.org (Postfix) with ESMTP id B0F0A37B402
	for <java@FreeBSD.ORG>; Tue, 19 Mar 2002 16:34:26 -0800 (PST)
Received: from muraoka.info.waseda.ac.jp (shudoh@localhost [127.0.0.1])
	by cafe.muraoka.info.waseda.ac.jp (8.9.1a/3.7W) with ESMTP id JAA14371
	for <java@FreeBSD.ORG>; Wed, 20 Mar 2002 09:34:02 +0900
Message-Id: <200203200034.JAA14371@cafe.muraoka.info.waseda.ac.jp>
To: java@FreeBSD.ORG
From: shudo@computer.org
Subject: Re: [setantae@submonkey.net:
	[body_114818111878816447@hermes.sun.com: Sun Security Bulletin #00218]]
In-Reply-To: <20020319162422.A26883@shikima.mine.nu>
References: <20020319162422.A26883@shikima.mine.nu>
Date: Wed, 20 Mar 2002 09:34:02 +0900
Sender: owner-freebsd-java@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-java.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-java>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-java>
X-Loop: FreeBSD.org

From: Rasputin <rasputin@shikima.mine.nu>

> Sorry for the length of this - I couldn't find a URL.

The #00218 of Sun Security Bulletin is at:
  http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=secbull/218
We are also be able to find past bulletins at:
  http://sunsolve.sun.com/security

> Is our SCSL version vulnerable?

Probably.  The FreeBSD port of JDK 1.3.1 is based on the source code
of the plain 1.3.1, which is the newer one Sun provides as source
code.  The source code of 1.4.1 and even 1.3.1_02 has not been
released.


> ________________________________________________________________________________
>                     Sun Microsystems, Inc. Security Bulletin
>
> Bulletin Number:        #00218
> Date:                   March 18, 2002
> Cross-Ref:
> Title:                  Bytecode Verifier

> 2. Affected Releases

>    Solaris OE Production Releases
>
>      SDK and JRE 1.3.1_01 or earlier

>    Linux Production Releases
>
>      SDK and JRE 1.3.1_01 or earlier


  Kazuyuki Shudo	shudo@computer.org	http://www.shudo.net/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-java" in the body of the message