Re: java vulnerability

[Connie Sieh]

On Thu, 17 Jan 2013, Connie Sieh wrote:

On Thu, 17 Jan 2013, Ken Teh wrote:

What's the status of the java package that's installed on SL6x?
java-1.6.0-openjdk.  Is it vulnerable to this java security flaw that
made the national news this week?  Cyber is advising us to remove it but
a lot of packages depend on it.  The biggie is LibreOffice.

I thought that the biggest issue was with Java 7 and not Java 6.

And as Pat said a specific CVE should help answer this.

-Connie Sieh

-connie

Thanks!