On 09/05/2012 11:07 AM, Dr Andrew C Aitchison wrote:
> On Tue, 4 Sep 2012, Pat Riehecky wrote:
>
>> Synopsis:          Important: java-1.6.0-openjdk security update
>> Issue Date:        2012-09-03
>> CVE Numbers:       CVE-2012-1682
>>                   CVE-2012-0547
>>
>> These packages provide the OpenJDK 6 Java Runtime Environment and the
>> OpenJDK 6 Software Development Kit.
>
> Is this update as well as, or instead of an update to the Sun/Oracle
> jdk package which Scientific Linux 5 has shipped for the past few
> years (IIRC this was not a RHEL package) ?
>
> I know that these are not (and IIRC have never been) included in SL6
> and that there are signature problems.
> I can get similar packages direct from Oracle
> http://www.oracle.com/technetwork/java/javase/downloads/jre6u35-downloads-1836473.html 
>
> if I know not to expect them from SL.
>
> Thanks,
>

This is the openjdk version of that same update.  Openjdk is packaged by 
upstream.

Pat

-- 
Pat Riehecky
Scientific Linux Developer