On Thu, Nov 21, 2013 at 4:17 AM, Dr Andrew C Aitchison <[log in to unmask]> wrote: > On Wed, 20 Nov 2013, Mark Stodola wrote: > >> On 11/20/2013 04:27 PM, ToddAndMargo wrote: >>> >>> On 11/20/2013 01:50 PM, Chris Schanzle wrote: >>>> >>>> On 11/20/2013 04:34 PM, ToddAndMargo wrote: >>>>> >>>>> Hi All, >>>>> >>>>> Just got a security advisory on java-1.6.0-openjdk (MDVSA-2013:266) >>>>> and java-1.7.0-openjdk (MDVSA-2013:267). >>>>> >>>>> Went to try to upgrade it and can't figure out how. >>>>> >>>>> # rpm -qa \*openjdk\* >>>>> java-1.7.0-openjdk-1.7.0.45-2.4.3.2.el6_4.x86_64 >>>>> >>>>> How do you do a yum when the name has a moving target >>>>> (number) in the middle of the name? > > > The number in the middle of the name is either 1.6.0 (Java 6) > or 1.7.0 (Java 7). As long as you remember that there are two > they aren't really moving targets. And the *package* name is "java-1.7.0-openjdk", indicating which java upstream it comes from. The "yum list" format gets pesky to process, but I find this really helpful to produce a sorted list of all installed packages. rpm -qa --qf '%{name}\t%{version}\t%{release}\n' | LANG=C sort -n I'd also strongly urge dropping all the "java-1.6.0-*" packages on the floor. Java 6, aka "java-1.6.0" in Sun's actual software repositories, has basically fallen off the support truck. The "update-alternatives" tools, run post-installation of tools like java or smtp servers, tries to negotiate which tool you get by default when you just type "java". But it's an adventure, because you typically wind up with a default of whichever tool you installed last. So if possible, pick *one* java version, and clear away the others. The only really problematic package for this is the jdk RPM's for Java 6 from Oracle, which have some dependencies that mismatch Red Hat's layout. If you need to use Oracle's Java 6 JDK, you're in compatibility hell most easily resolved with my little add-on widget at https://github.com/nkadel/java-1.6.0-sun-compat-srpm. JPackage used to publish bundled compatibility packages, but I've found it difficult to resolve dependencies with their other packages, and the weird Sun.Oracle licensing made that awkward. Oracle is now supporting openjdk-1.7.0 almost exclusive. Basically, at this point, get off Java 6 if you can. Like supporting out of date versions of Samba, it's usually not worth the pain.