On Tue, 4 Sep 2012, Pat Riehecky wrote:

> Synopsis:          Important: java-1.6.0-openjdk security update
> Issue Date:        2012-09-03
> CVE Numbers:       CVE-2012-1682
>                   CVE-2012-0547
>
> These packages provide the OpenJDK 6 Java Runtime Environment and the
> OpenJDK 6 Software Development Kit.

Is this update as well as, or instead of an update to the Sun/Oracle
jdk package which Scientific Linux 5 has shipped for the past few
years (IIRC this was not a RHEL package) ?

I know that these are not (and IIRC have never been) included in SL6
and that there are signature problems.
I can get similar packages direct from Oracle
http://www.oracle.com/technetwork/java/javase/downloads/jre6u35-downloads-1836473.html
if I know not to expect them from SL.

Thanks,

-- 
Dr. Andrew C. Aitchison		Computer Officer, DPMMS, Cambridge
[log in to unmask]	http://www.dpmms.cam.ac.uk/~werdna