On 2012-03-14 03:43, Willian Braga wrote: > Hello Maintainers: > Hi,
> My name's Willian and I'm a Linux Mint 12 user (wheezy/sid in > /etc/debian_version) > :) > I was checking the plugins I'm using in Firefox with Plugin Check page ( > http://www.mozilla.org/en-US/plugincheck/) and it reported me that my Java > plugin is outdated. Also, they told me there are some security risk running > this outdated version. The version it reported me was 1.6.0_26, which is > the same I'm using over here. I was reading the changelog from version from > 1.6.0_27 to 1.6.0_31 and there are some security vulnerabilities which were > fixed, but we are missing them because the official debian package is not > updated. Those security are below: > I am a bit pedantic here, but there never was an "official Debian package" for sun-java (it was non-free and therefore not a "part of Debian"). > [...] > > So I would like to know if you guys could update it. I know how to manually > update it, but i think it's important to update the debian package as well > because it would update all Debian users and alike. > > [...] > > Thanks, > > Willian. > > Unfortunately we cannot. Oracle no longer provides "sun-java" (or "oracle-java") under a license we can use for distributing the non-free Java[1]. We can offer you is openjdk-6 or openjdk-7; I know there have been (and probably still are) cases were openjdk did not work as well as sun-java. If you experience such with openjdk, I would highly recommend you report those so those issues can be fixed. If openjdk is simply not a feasible alternative, I believe that the package "java-package" (in sid/Wheezy) can be used to construct a "deb" from the manual downloaded sun-java. It has the advantage that dpkg/apt is aware of your local Java installation and will use that if possible. ~Niels [1] http://sylvestre.ledru.info/blog/sylvestre/2011/08/26/sun_java6_packages_removed_from_debian_u http://sylvestre.ledru.info/blog/sylvestre/2011/10/25/removal_of_sun_java6_from_debian http://mrpogson.com/2011/12/14/sun-java-no-longer-welcome-in-debian-gnulinux/ __ This is the maintainer address of Debian's Java team <http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. Please use [email protected] for discussions and questions.
