Re: How can I know which vulnerabilities (CVEs) are fixed in specific tag of open JDK?

2020-09-23 Thread Moshe Zuisman
Thanks! But the problem here is that this list includes only vulnerabilities, dated by 2019-2020. Vulnerabilities we (our customer) are interested in - are of 2014-2015. ср, 23 сент. 2020 г. в 13:38, Alan Bateman : > On 23/09/2020 11:29, Moshe Zuisman wrote: > > Hi. > > I have the following

Re: How can I know which vulnerabilities (CVEs) are fixed in specific tag of open JDK?

2020-09-23 Thread Alan Bateman
On 23/09/2020 11:29, Moshe Zuisman wrote: Hi. I have the following problem. We provide OpenJDK binary distro with our product. With the current version we provided JDK8u-b222 Customer comes with a list of CVEs and asks if they are fixed in distro, we provided with our product. For example he

How can I know which vulnerabilities (CVEs) are fixed in specific tag of open JDK?

2020-09-23 Thread Moshe Zuisman
Hi. I have the following problem. We provide OpenJDK binary distro with our product. With the current version we provided JDK8u-b222 Customer comes with a list of CVEs and asks if they are fixed in distro, we provided with our product. For example he asks about cve-2014-3566,