On 04/09/2014 10:38 AM, Jiri Vanek wrote:
On 04/08/2014 10:10 PM, Florian Weimer wrote:
> I noticed that the applet JARs in jmol and jspecview contain classes
> in the sun.applet package. How
> is this supposed to work, considering that sun.* packages are
> restricted? Do you think this is just
> accidental bundling?
> I haven't investigated the build process in detail, but there is a
> dependency on icedtea-web, and
> the class files are mostly identical to those in some icedtea-web
> version, except for
> jmol-14.0.11-1.fc21.noarch and jspecview-2-7.1464svn.fc21.noarch,
> which differ in the
> sun.applet.PluginAppletViewer class (so we currently do not provide
> matching source code, I think).
> (I found this while checking for references to sun.misc.Ref, which
> will be removed in OpenJDK 9.
> Coincidentally, icedtea-web has already been fixed.)
Och,. this scares me!
Maybe better is to ask jmoll developers - as we have been cooperating
with them long ago when itw was started to be developed....
The upstream spec file was last changed in 2003, so it seems it's a
Fedora packaging issue.
Susi, could you please comment?
Florian Weimer / Red Hat Product Security Team