On Tue, 4 Sep 2012, Pat Riehecky wrote: > Synopsis: Important: java-1.6.0-openjdk security update > Issue Date: 2012-09-03 > CVE Numbers: CVE-2012-1682 > CVE-2012-0547 > > These packages provide the OpenJDK 6 Java Runtime Environment and the > OpenJDK 6 Software Development Kit. Is this update as well as, or instead of an update to the Sun/Oracle jdk package which Scientific Linux 5 has shipped for the past few years (IIRC this was not a RHEL package) ? I know that these are not (and IIRC have never been) included in SL6 and that there are signature problems. I can get similar packages direct from Oracle http://www.oracle.com/technetwork/java/javase/downloads/jre6u35-downloads-1836473.html if I know not to expect them from SL. Thanks, -- Dr. Andrew C. Aitchison Computer Officer, DPMMS, Cambridge [log in to unmask] http://www.dpmms.cam.ac.uk/~werdna