** No longer affects: sun-java6 (Ubuntu)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/890278
Title:
sun java outdated
To manage notifications about this bug go to:
Does this bug apply to any of the currently supported releases (i.e.
Maya, Nadia, Olivia, or Petra)? If not, this bug should be closed.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/890278
Title:
Thank you for addressing this, Clement. In my experience, the only area I've
seen compatibility issues with OpenJDK is in playing the free version of
Minecraft: http://www.minecraft.net/classic/play
I've tested a few different versions:
Oracle 6u26 (default Mint 12)-works
Oracle 6u30-works
Hi,
Thanks to all involved in participating to this bug report.
An early review of OpenJDK gave surprising results. Although it's still
not on par with the Oracle implementation (some apps/applets don't run,
others show different behavior or run slower), we were able to get
satisfying results in
The importance on this really should be raised to maximum. The version
of the Java plugin that exists in Firefox on Linux Mint 12 contains
known and published sandbox vulnerabilities that allow arbitrary Java
code execution on the system simply by visiting a Web site that loads a
malicious Java
Looking at the licensing issue again, it appears the main reason for
Debian (and consequently Ubuntu) to switch to OpenJDK is the proprietary
nature of the Oracle JRE/JDK.
At Linux Mint, we don't have such an issue with proprietary software. We
prefer open-source than closed-source alternatives
The problem with the Oracle license is, that it only allows unmodified
redistribution. Apparently the packaging as .deb, is seen as a
modification
So you'll have to use a script like the Duinsoft script that Frank de
Bruijn has created, which pulls the package from the Oracle servers and
@Clément Lefebvre: the English page for the new installation script is here:
http://www.duinsoft.nl/packages.php?t=en
The author, Frank de Bruijn, has made it available under the GPL, so you can
use it freely. The need for a secure Oracle Java is urgent, so I hope that you
can find the time to
The script Pjotr mentioned is ready for use (well, testing on a larger
scale, anyway...).
http://www.duinsoft.nl/packages.php
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/890278
Title:
sun java
Excellent work, Frank!
@Clément Lefebvre: will you consider to put this in a Mint repo (when
Frank agrees, of course)? The timing is perfect, since Canonical has
pulled Oracle Java a couple of days ago
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is
*Thanx for the hard job,well done!
*
2011/12/19 Pjotr12345 890...@bugs.launchpad.net
Excellent work, Frank!
@Clément Lefebvre: will you consider to put this in a Mint repo (when
Frank agrees, of course)? The timing is perfect, since Canonical has
pulled Oracle Java a couple of days ago
This is a **critical** bug and precludes any use of Firefox on a Linux
Mint installation. Exploits for this are live and in the wild. I wrote a
simple proof of concept that launches gnome-terminal from your browser:
http://www.ugcs.caltech.edu/~patrick/Exploit.html
--
You received this bug
Good news: a software developer, member of the Dutch Ubuntu community,
has kindly created a script that pulls Oracle Java from the Oracle
website and installs it. I've tested a prototype on a 32 bit system, and
it works fine.
He's not quite done with it yet (needs testing on 64 bit and some final
Hi Pjotr,
OK, there's different aspects to this..
1. It was included because this came to late and the risk of creating a
regression was greater than the security issue. It's consistent in our
policy, and it's geared towards our user base (mostly because most of
our users are 1. desktop users 2.
I'm also marking OpenJDK for review as a potential replacement for Java
in Mint 13.
** Changed in: linuxmint
Importance: Undecided = Medium
** Changed in: linuxmint
Assignee: (unassigned) = Clement Lefebvre (clementlefebvre)
--
You received this bug notification because you are a
@Clément Lefebvre: thanks for your reaction. I see your point and I
largely agree.
Nevertheless, a solution should come rather quickly, I think. Both for
intrinsic reasons and for the public image of Mint as a reliable and
secure distro.
I can't make scripts myself, but I'll see if I can find
Thanks Clement for marking OpenJdk to revieuw as a replacement for Java
in Mint 13.When it is not possible to find a programmer to write a
script for manually installing Java this might be the best solution for
this time.
--
You received this bug notification because you are a member of Ubuntu
https://bugs.launchpad.net/ubuntu/+source/sun-java6/+bug/881746
** Package changed: ubuntu = sun-java6 (Ubuntu)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/890278
Title:
sun java outdated
To
Changed the status back to Confirmed, because I've given the requested
information.
@Clément Lefebvre: the insecure 6u26 is present in the final edition of
Linux Mint 12. Maybe because this bug was reported too late in the final
stage of development of Mint 12? Anyway: when will Java be upgraded
Pjotr: After reading the material you linked to, can you describe in
your own words what the problem is? i.e. what the attacker would do and
how it would affect you as a user?
Thanks.
** Changed in: linuxmint
Status: Confirmed = Incomplete
--
You received this bug notification because
Clément Lefebvre: I'll try, but I'm handicapped by the fact that Oracle
doesn't disclose details about security risks:
As a matter of policy, Oracle does not disclose detailed information
about an exploit condition or results that can be used to conduct a
successful exploit. Oracle will not
You're not explaining why it's insecure and what the security issues
are.
openJDK would replace Sun Java if and only if we can verify that it
doesn't cause any regressions for users in terms of features and
compatibility with online games and applets.
** Changed in: linuxmint
Status:
I'm not an expert in this,but is it possible to make openjdk the
standard?Mint users who want to use the Sun Java instead can download it
from oracle.Better a safer standard,than an older version of sun java
who is vulnerable.I'm a normal user and openjdk works fine for me.In
case of problems i
@Clement Lefebvre:
The security issues involved are the following:
1. Oracle release notes of 6u29:
http://www.oracle.com/technetwork/java/javase/6u29-relnotes-507960.html
2. Oracle cites no less than 20 security fixes:
Changed back to confirmed, because I've supplied the requested
information.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/890278
Title:
sun java outdated
To manage notifications about this bug go
Good thing someone filed this !.
** Also affects: ubuntu
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/890278
Title:
sun java outdated
To manage
Ubuntu is being tracked in bug #881746
** Changed in: ubuntu
Status: New = Invalid
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/890278
Title:
sun java outdated
To manage notifications
Hopefully this will be fixed with the final release
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/890278
Title:
sun java outdated
To manage notifications about this bug go to:
28 matches
Mail list logo
