<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<br>
<div class="moz-cite-prefix">On 7/23/15 10:49 AM, Cantor, Scott
wrote:<br>
</div>
<blockquote cite="mid:262E81CA-8A1E-47F9-B59D-76155A8D2197@osu.edu"
type="cite">
<pre wrap="">On 7/23/15, 2:20 AM, "users on behalf of Brent Putman" <a class="moz-txt-link-rfc2396E" href="mailto:users-bounces@shibboleth.netonbehalfofputmanb@georgetown.edu"><users-bounces@shibboleth.net on behalf of putmanb@georgetown.edu></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">
I really did not believe that they could do something so egregious. So I had to test it (on "old" vs. "new" Java 8, since I don't have and can't currently get the last Java 7 with this change). And in fact that is exactly what they have done.
</pre>
</blockquote>
<pre wrap="">
So this isn't in the original Java 8 but is now? What's the version cut off? Would be useful to document that.</pre>
</blockquote>
<br>
Yes. My understanding from the RedHat issue Takeshi originally
posted [1] in JOWS-39 is that they "fixed" it in the July 2015
updates for all 3 versions: 6u101, 7u85, and 8u51
<meta http-equiv="content-type" content="text/html;
charset=windows-1252">
<br>
<br>
[1] <a class="moz-txt-link-freetext" href="https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-2625">https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-2625</a><br>
<br>
<br>
</body>
</html>