I made a post about this earlier, but OpenJDK 7 has not been updated to u25
in the Trisquel repos and leaves everyone who has an older version installed
vulnerable. If anyone follows the Java world, it is always targeted for
attacks (especially the web plugin) and having the latest is ALWAYS
encouraged.
Has the script that pulls Ubuntu repos into Trisquel broken the past 10 days
or so? I haven't gotten many updates outside of PPAs for my Trisquel 6 box
this week, yet my Ubuntu 12.04 server has.
http://us.archive.ubuntu.com/ubuntu/pool/universe/o/openjdk-7/ has the
OpenJDK7 u25 as of July 16th for Precise.
http://mirror.fsf.org/trisquel/pool/main/o/openjdk-7/ is stuck on u21 as of
April 24th.
This issue needs to be fixed ASAP and Ruben needs to be aware of it.