Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8093163

Update JavaFX DLL Files to include appropriate meta data

    Details

    • Type: Bug
    • Status: Closed
    • Priority: P2
    • Resolution: Fixed
    • Affects Version/s: fx2.1.1, 7u10
    • Fix Version/s: 8
    • Component/s: javafx
    • Labels:
    • Environment:

      Windows OSes

      Description

      NOTE: I believe that JavaFX is now being included in the Standard JRE 7 and this may be very low priority now that is no longer a separate runtime environment.

      Can it be investigated whether the dlls and executables related to JavaFX have their appropriate File Decription, File Version, Product Name and Product Version information completed prior to release. From looking at the JRE 7 u11 it appears that the files associated with the JRE mainly contain this information, whilst fxplugins.dll, jfxmedia.dll, jfxwebkit.dll, javafx-font,dll and javafx-iio.dll are all missing this information (forgive me if any of these aren't JavaFX related I am not a developer by any stretch of the imagination).

      The main reason I am interested in this is to ensure that Vulnerability Scanners are able to detect the version of JavaFX installed by examining files. Already Secunia have advised that the current dll files are missing the version numbers so that they can't scan the files and advise of security vulnerabilities.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                loneid Leonid Popov (Inactive)
                Reporter:
                duke J. Duke (Inactive)
              • Votes:
                0 Vote for this issue
                Watchers:
                8 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Imported: