[OpenIndiana-discuss] JRE/JDK 6u24 released for security patches

[Dmitry G. Kozhinov]

Thanks for the alert. I have updated my JRE on my OSol 2010.03 (though 
it was a bit tricky and involved manual folder rename/move). The box is 
used for production as a web and ftp server.

This issue have forced me to look again at OpenSUSE - I am thinking of 
migrating to it while OpenIndiana is not yet matured enough and not yet 
receiving critical security patches in time. There is no Java at all by 
default in OpenSUSE (and maybe in all other Linuxes). No Java, no (this) 
vulnerability. Other security holes are patched in time (I think).

No Java, no ZFS, no a lot other great stuff... But it will do web and 
ftp for me... Still with OSol yet :) Cannot just waste the favorite OS.

Dmitry.


On 18.02.2011 6:29, Ivan Wang wrote:
> Hi list,
>
> Not sure if the vulnerability does actually affect solaris based systems.
> But Oracle advises to update JRE/JDK to 6u24 to pick up patches
> preventing remote exploit.
>
> Here is the link:
> http://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.html
>
> Any plan to bump Java version in oi ips repo?
>
> Cheers,
> Ivan.
>
> _______________________________________________
> OpenIndiana-discuss mailing list
> OpenIndiana-discuss at openindiana.org
> http://openindiana.org/mailman/listinfo/openindiana-discuss
>