openjdk team mailing list archive

[Bálint Réczey <balint@xxxxxxxxxxxxxxx>]

Hi Mike,

2012/11/18 Michael Gilbert <mgilbert@xxxxxxxxxx>:
> control: severity -1 important
>
>> Since icedtea-web is built with Java 6, VariableX509TrustManagerJDK7.class is
>> not built and shipped with the icedtea-netx-common package.
>>
>> This makes several Java applications using Java Web Start unusable like
>> https://ibank.cib.hu/ throwing the following exception:
>
> Hi, this does not qualify as release critical.  For that severity, the
> problem would need to actually affect debian packages; rather than
> just third party applications.
Since the package's aim is implementing the protocol required to run
those external
applications IMO the issue makes the package useless with Java 7 thus
grave would
be the proper priority. :-)

Description-en: NetX - implementation of the Java Network Launching
Protocol (JNLP)
 NetX provides a drop-in replacement for javaws (Java Web Start). Since
 upstream NetX is dormant, IcedTea is hosting and modifying the sources
 in the IcedTea-Web directory.

grave
    makes the package in question unusable or mostly so, or causes
data loss, or introduces a security hole allowing access to the
accounts of users who use the package.

Cheers,
Balint

>
> Best wishes,
> Mike