Bug#692035: CVE-2012-3155: vulnerability in the CORBA ORB component

Marcos Marado mindboosternoori at gmail.com
Wed Jun 19 15:24:41 UTC 2013


According to upstream, this version is affected[1], while Glassfish 3.1.2.1 or 
later isn't. Also, take into account that Debian's current version has reached 
EOL[2].

BTW: why the severity level change?

[1] http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html
[2] http://www.oracle.com/us/support/library/lifetime-support-
middleware-069163.pdf 

Best regards,
-- 
Marcos Marado



More information about the pkg-java-maintainers mailing list