Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
oracle java 7 update 7
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
casualx
n00b
n00b


Joined: 06 Feb 2012
Posts: 58
Location: switzerland

PostPosted: Fri Aug 31, 2012 5:47 am    Post subject: oracle java 7 update 7 Reply with quote

hi there
we need immediatley a java portage update so we can update to java version 7 update 7.
the blackhole exploit is going to be a big problem.

by the way...its now discovered that oracle knew about several exploits before and they want wait before october to close them all...
Back to top
View user's profile Send private message
cach0rr0
Bodhisattva
Bodhisattva


Joined: 13 Nov 2008
Posts: 4123
Location: Houston, Republic of Texas

PostPosted: Fri Aug 31, 2012 8:32 pm    Post subject: Reply with quote

I just synced, and it appears that it should be in portage now

Code:

[>]   == dev-java/oracle-jdk-bin ((~)1.7.0.6(1.7)^fs -> (~)1.7.0.7(1.7)^fs): Oracle's Java SE Development Kit
[U]   == dev-java/oracle-jre-bin (1.7.0.6(1.7)@08/23/12; (~)1.7.0.6(1.7)^fs -> (~)1.7.0.7(1.7)^fs): Oracle's Java SE Runtime Environment
[>]   == dev-java/sun-jdk ((~)1.6.0.34(1.6)^fs -> (~)1.6.0.35(1.6)^fs): Oracle's Java SE Development Kit


of course, i had already done this the manual way, and cp'd the 1.7.0.6 ebuild to just bump its version to 1.7.0.7 - realized after i did that that I'd sync again and check (id been syncing regularly the last 2 or 3 days to see if this update had been added, and it had not, but it is there as of right now!)
_________________
Lost configuring your system?
dump lspci -n here | see Pappy's guide | Link Stash
Back to top
View user's profile Send private message
ackle
Retired Dev
Retired Dev


Joined: 22 Nov 2011
Posts: 4

PostPosted: Fri Aug 31, 2012 8:48 pm    Post subject: Reply with quote

New Oracle Java packages are currently being stabilized [1] and new IcedTea packages are in the works [2].

However, it looks like another vulnerability [3] allowing a remote attacker to escape Java's sandbox and execute arbitrary code may be in the updated versions just released by Oracle.

[1] https://bugs.gentoo.org/433094
[2] https://bugs.gentoo.org/433389
[3] http://seclists.org/fulldisclosure/2012/Aug/388
Back to top
View user's profile Send private message
casualx
n00b
n00b


Joined: 06 Feb 2012
Posts: 58
Location: switzerland

PostPosted: Sat Sep 01, 2012 1:19 am    Post subject: Reply with quote

thx a lot
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum