Hi, I just got this and I'm curious how we can be sure these problems 
were reported upstream (to Sun)?  It doesn't say in this announcement 
anything of that sort.  Oh, hmm, I was thinking you could have made the 
announcement reference pages on bugs.sun.com but I just remembered we 
generally don't make visible any security bugs.

Any thoughts are appreciated.

- David Herron