JDK-7109885 : security baseline for 7u2 or above is not set correctly
  • Type: Bug
  • Component: deploy
  • Sub-Component: deployment_toolkit
  • Affected Version: 7
  • Priority: P2
  • Status: Closed
  • Resolution: Fixed
  • OS: windows
  • CPU: x86
  • Submitted: 2011-11-09
  • Updated: 2013-09-12
  • Resolved: 2012-01-13
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 7 JDK 8
7u4 b05Fixed 8Fixed
Description
security baseline for 7u2 or above is not set correctly

currently - the security baseline for 7u2 is set at 7u2.

it should be 7u1 instead.
Comments
EVALUATION see MR
20-12-2011
EVALUATION problem is specific only to apps requesting JRE 7u1 specifically. and for machines that has 7u1 + FX 2.0.2, there will not be ssv dialog shown either when running apps. not a showstopper for jre 7u2.
10-11-2011
EVALUATION problem is in SecurityBaseline.java it's missing getBaselineVersion170() now. (and simply return CURRENT_VERSION - which is the bug) private static String getBaselineVersion(String requestedVersion) { if (requestedVersion.startsWith("1.3.1")) { return getBaselineVersion131(); } else if (requestedVersion.startsWith("1.4.2")) { return getBaselineVersion142(); } else if (requestedVersion.startsWith("1.5")) { return getBaselineVersion150(); } else if (requestedVersion.startsWith("1.6")) { return getBaselineVersion160(); } else { return CURRENT_VERSION; } }
09-11-2011
EVALUATION fix for 7u2
09-11-2011