On 09/05/2012 11:07 AM, Dr Andrew C Aitchison wrote: > On Tue, 4 Sep 2012, Pat Riehecky wrote: > >> Synopsis: Important: java-1.6.0-openjdk security update >> Issue Date: 2012-09-03 >> CVE Numbers: CVE-2012-1682 >> CVE-2012-0547 >> >> These packages provide the OpenJDK 6 Java Runtime Environment and the >> OpenJDK 6 Software Development Kit. > > Is this update as well as, or instead of an update to the Sun/Oracle > jdk package which Scientific Linux 5 has shipped for the past few > years (IIRC this was not a RHEL package) ? > > I know that these are not (and IIRC have never been) included in SL6 > and that there are signature problems. > I can get similar packages direct from Oracle > http://www.oracle.com/technetwork/java/javase/downloads/jre6u35-downloads-1836473.html > > if I know not to expect them from SL. > > Thanks, > This is the openjdk version of that same update. Openjdk is packaged by upstream. Pat -- Pat Riehecky Scientific Linux Developer