Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 251540 - dev-java/sun-j2me-bin has internal copies of zlib-1.1.4 and libpng-1.2.0
Summary: dev-java/sun-j2me-bin has internal copies of zlib-1.1.4 and libpng-1.2.0
Status: RESOLVED OBSOLETE
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Java (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Java team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: bundled-libs
  Show dependency tree
 
Reported: 2008-12-18 20:56 UTC by Diego Elio Pettenò (RETIRED)
Modified: 2015-05-26 22:22 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Diego Elio Pettenò (RETIRED) gentoo-dev 2008-12-18 20:56:38 UTC 
yamato ~ # ./test-zlib /opt/sun-j2me-bin-2.2/bin/libzayit.so
zlib version in /opt/sun-j2me-bin-2.2/bin/libzayit.so: 1.1.4
yamato ~ # ./test-libpng /opt/sun-j2me-bin-2.2/bin/libzayit.so
libpng version in /opt/sun-j2me-bin-2.2/bin/libzayit.so: 1.2.0
Comment 1 Samuli Suominen (RETIRED) gentoo-dev 2010-03-03 19:11:18 UTC 
Well, these are vulnerable to several CVEs, including the latest libpng one (bug 307637).
Comment 2 Tom Wijsman (TomWij) (RETIRED) gentoo-dev 2014-03-31 19:28:57 UTC 
Are these still bundled in newer versions?
Comment 3 James Le Cuirot gentoo-dev 2015-05-26 22:22:49 UTC 
sun-j2me-bin has been removed from the tree.