Dr Andrew C Aitchison wrote:
> On Wed, 13 Oct 2010, Troy Dawson wrote:
> 
>> Synopsis:	Important: java-1.6.0-openjdk security and bug fix update
>> Issue date:	2010-10-13
>> CVE Names:	CVE-2009-3555 CVE-2010-3541 CVE-2010-3548
>>                  CVE-2010-3549 CVE-2010-3551 CVE-2010-3553
>>                  CVE-2010-3554 CVE-2010-3557 CVE-2010-3561
>>                  CVE-2010-3562 CVE-2010-3564 CVE-2010-3565
>>                  CVE-2010-3567 CVE-2010-3568 CVE-2010-3569
>>                  CVE-2010-3573 CVE-2010-3574
> 
> 
>>    SRPMS:
>> java-1.6.0-openjdk-1.6.0.0-1.16.b17.el5.src.rpm
>>    i386:
>> java-1.6.0-openjdk-1.6.0.0-1.16.b17.el5.i386.rpm
>> java-1.6.0-openjdk-demo-1.6.0.0-1.16.b17.el5.i386.rpm
>> java-1.6.0-openjdk-devel-1.6.0.0-1.16.b17.el5.i386.rpm
>> java-1.6.0-openjdk-javadoc-1.6.0.0-1.16.b17.el5.i386.rpm
>> java-1.6.0-openjdk-src-1.6.0.0-1.16.b17.el5.i386.rpm
>>    x86_64:
>> java-1.6.0-openjdk-1.6.0.0-1.16.b17.el5.x86_64.rpm
>> java-1.6.0-openjdk-demo-1.6.0.0-1.16.b17.el5.x86_64.rpm
>> java-1.6.0-openjdk-devel-1.6.0.0-1.16.b17.el5.x86_64.rpm
>> java-1.6.0-openjdk-javadoc-1.6.0.0-1.16.b17.el5.x86_64.rpm
>> java-1.6.0-openjdk-src-1.6.0.0-1.16.b17.el5.x86_64.rpm
> 
> There is also an update to Sun/Oracle's Java (update 22)
> http://www.oracle.com/technetwork/java/javase/6u22releasenotes-176121.html
> 
> Are you still releasing updated versions of java-1.6.0-sun-compat
> (is there a new name such as java-1.6.0-oracle-compat? ) or
> is java-1.6.0-openjdk a replacement ?
> 
> Am I right in thinking that java-1.6.0-openjdk cannot yet be used
> inside firefox or other browsers ?
> 
> Thanks,
> 

Yes, we are working on the corresponding jdk update for both SL4 and SL5.
I currently have no plans on changing the name of java-1.6.0-sun-compat. 
  Changing the name hadn't even crossed my mind until you said 
something.  I'm not saying we won't change the name, but at least for 
this update, it will be the same.

The openjdk in SL5 (and RHEL5) doesn't fully replace the jdk from 
Sun/Oracle that we put in SL5.  Since there is no openjdk for SL4, we 
will continue to keep it in there, and since it isn't much more work to 
support it for both SL4 and SL5, we will keep it in both.
But for SL6, we are not planning on adding the jdk from Oracle, only the 
openjdk that comes from RHEL6.

As far as I know, the openjdk that we have (that comes from RHEL5) does 
not have a plugin for firefox.  The openjdk that comes with RHEL6 *does* 
have a plugin for firefox.

Troy
-- 
__________________________________________________
Troy Dawson  [log in to unmask]  (630)840-6468
Fermilab  ComputingDivision/SCF/FEF/SLSMS Group
__________________________________________________