Bug 251540

Summary:	dev-java/sun-j2me-bin has internal copies of zlib-1.1.4 and libpng-1.2.0
Product:	Gentoo Linux	Reporter:	Diego Elio Pettenò (RETIRED) <flameeyes>
Component:	[OLD] Java	Assignee:	Java team <java>
Status:	RESOLVED OBSOLETE
Severity:	normal	CC:	esigra, security
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	251464

Description Diego Elio Pettenò (RETIRED) gentoo-dev

2008-12-18 20:56:38 UTC

yamato ~ # ./test-zlib /opt/sun-j2me-bin-2.2/bin/libzayit.so
zlib version in /opt/sun-j2me-bin-2.2/bin/libzayit.so: 1.1.4
yamato ~ # ./test-libpng /opt/sun-j2me-bin-2.2/bin/libzayit.so
libpng version in /opt/sun-j2me-bin-2.2/bin/libzayit.so: 1.2.0

Comment 1 Samuli Suominen (RETIRED) gentoo-dev

2010-03-03 19:11:18 UTC

Well, these are vulnerable to several CVEs, including the latest libpng one (bug 307637).

Comment 2 Tom Wijsman (TomWij) (RETIRED) gentoo-dev

2014-03-31 19:28:57 UTC

Are these still bundled in newer versions?

Comment 3 James Le Cuirot gentoo-dev

2015-05-26 22:22:49 UTC

sun-j2me-bin has been removed from the tree.