SCIENTIFIC-LINUX-USERS Archives

January 2013

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Re: java vulnerability
From:
Stephan Wiesand <[log in to unmask]>
Reply To:
Stephan Wiesand <[log in to unmask]>
Date:
Thu, 17 Jan 2013 18:23:39 +0100
Content-Type:
text/plain
Parts/Attachments:
text/plain (19 lines) 
On Jan 17, 2013, at 18:15 , Connie Sieh wrote:

> On Thu, 17 Jan 2013, Ken Teh wrote:
> 
>> What's the status of the java package that's installed on SL6x? java-1.6.0-openjdk.  Is it vulnerable to this java security flaw that made the national news this week?  Cyber is advising us to remove it but a lot of packages depend on it.  The biggie is LibreOffice.
> 
> I thought that the biggest issue was with Java 7 and not Java 6.


That's what I thought. In any case, removing the browser plugin (icedtea-web with openjdk) seems to be the most important step, and advisable wherever feasible. LibreOffice shouldn't depend on that.

A related question: Does anyone know whether openjdk6 will continue to be supported after the Oracle JDK6 end of service life?

-- 
Stephan Wiesand
DESY -DV-
Platanenenallee 6
15738 Zeuthen, Germany

ATOM RSS1 RSS2