On Thu, Oct 18, 2012 at 11:50:21AM +0200, Matthias Klose wrote: > the references point to Oracle products, not OpenJDK.
If there were proper security references for openjdk I would post them, but openjdk and Oracle Java obviously have a common code base. > Another helpful report > from the Debian security team, like keeping long fixed security issues open > [1]. > [1] http://security-tracker.debian.org/tracker/source-package/openjdk-6 There's currently a technical problem with the Tracker not updating from the database. If you find additional entries that need fixing, follow the procedure listed here: http://security-tracker.debian.org/tracker/data/report -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
