Security packages for Java posted for testing at

ftp://ftp.scientificlinux.org/linux/scientific/5rolling/testing/i386/
ftp://ftp.scientificlinux.org/linux/scientific/5rolling/testing/x86_64/

Next week these packages will be officially released.  This delay is to
allow you time to test and verify your production applications will run
as expected once this security update is applied.

If you do not want this security update please consult your site's
local security policy to determine how you should proceed.  Scientific
Linux will automatically feature this update next week.

As a reminder, the closed source Java6 packages are not present in
Scientific Linux 5.9.  Public updates to the closed source package
are being discontinued by upstream.  Scientific Linux 6 has never
included the closed source Java packages.

http://www.oracle.com/technetwork/java/eol-135779.html


The update advisory is posted below:

Synopsis: Critical: jdk-1.6.0 security update
Issue Date: 2013-02-20
CVE Numbers:  CVE-2013-0169 CVE-2013-1486 CVE-2013-1487

This update fixes several vulnerabilities in the Oracle Java Runtime
Environment and the Oracle Java Software Development Kit. Further
information about these flaws can be found on the Oracle Java SE
Critical Patch Update Advisory page