Security Resources
Sun Security Coordination Team
The Sun Security Coordination Team investigates reports of security vulnerabilities, responds to customer inquiries about security problems with Sun software, and publishes Sun Alerts for security issues.
Security Bulletins and Sun Alerts
Sun Security Bulletins have been superseded by Sun Alerts. Security Sun Alerts contain the same type of information such as the impact of the issue, factors to help determine if one is at risk, related symptoms, workaround information and resolution details.
Sun Alerts are flexible and are updated with the latest information as it becomes available. Sun Alerts are "dynamic" documents, as opposed to Security Bulletins which were published as "static" documents. Sun Alerts are published for all security issues at Sun.
The Security Sun Alerts collection contains the latest information on security issues.
More information on Security Sun Alerts, including details about the various sections of a security Sun Alert and definitions of commonly used terminology can be found in Technical Instruction 213557.
We are currently working on a mechanism to e-mail Security Sun Alerts using a free registration tool. Until this is in place, one can subscribe to a weekly Sun Alert newsletter which sends reports of new and updated Sun Alerts.
If Sun is not vulnerable to a reported security issue a Security Sun Alert will not be published. However depending on community and/or customer interest Sun may publish a statement on Sun's Security Blog.
Contact Sun Security Coordination Team
To report a security vulnerability or a potential security bug which could lead to a security advisory, send an email to security-alert@sun.com. Please encrypt sensitive mail using the Sun Security Coordination Team's PGP key. The PGP key is available via HTTP or HTTPS.
