Re: JRE JDK 1.4.1_02 vulnerable?

2003-05-05 Thread Javier Fernández-Sanguino Peña
On Fri, May 02, 2003 at 02:13:08PM -0500, Drew Scott Daniels wrote: http://www.securityfocus.com/bid/7109 says Sun's JRE and Java SDKs versions less than 1.4.1_02 are vulnerable as well as IBM's JDK. The BID seems to indicate the vulnerability is in java.util.zip I'm not sure which

JRE JDK 1.4.1_02 vulnerable?

2003-05-02 Thread Drew Scott Daniels
http://www.securityfocus.com/bid/7109 says Sun's JRE and Java SDKs versions less than 1.4.1_02 are vulnerable as well as IBM's JDK. The BID seems to indicate the vulnerability is in java.util.zip I'm not sure which versions of Java JRE's and SDKs are in Debian, but it seems to me that in Contrib