Java 6u35, 7u07 are available

2012-08-31 Thread Konstantin Kolinko
Hi! Just noting that Java 6u35, 7u07 were released by Oracle a day ago http://www.oracle.com/technetwork/java/javase/downloads/ Those contain security fixes for issues exploitable when running Java from within a web browser. (Those running it on server or standalone are said to be unaffected).

Re: Java 6u35, 7u07 are available

2012-08-31 Thread Tony Anecito
inital reaction. Used to be you got actual release notes when Sun owned Java.   Regards, -Tony --- On Fri, 8/31/12, Konstantin Kolinko knst.koli...@gmail.com wrote: From: Konstantin Kolinko knst.koli...@gmail.com Subject: Java 6u35, 7u07 are available To: Tomcat Users List users@tomcat.apache.org

Re: Java 6u35, 7u07 are available

2012-08-31 Thread David kerber
/12, Konstantin Kolinkoknst.koli...@gmail.com wrote: From: Konstantin Kolinkoknst.koli...@gmail.com Subject: Java 6u35, 7u07 are available To: Tomcat Users Listusers@tomcat.apache.org Date: Friday, August 31, 2012, 8:54 AM Hi! Just noting that Java 6u35, 7u07 were released by Oracle a day ago

Re: Java 6u35, 7u07 are available

2012-08-31 Thread Giles Coochey
On 31/08/2012 16:02, Tony Anecito wrote: Hi All, I looked at the release notes and there was nearly nothing there. So justification to update was impossible. Oracle needs to realize that releases with just one security and one time clock change makes it impossible to explain to anyone why we

Re: Java 6u35, 7u07 are available

2012-08-31 Thread Casper Wandahl Schmidt
got actual release notes when Sun owned Java. Regards, -Tony --- On Fri, 8/31/12, Konstantin Kolinko knst.koli...@gmail.com wrote: From: Konstantin Kolinko knst.koli...@gmail.com Subject: Java 6u35, 7u07 are available To: Tomcat Users List users@tomcat.apache.org Date: Friday, August 31, 2012

RE: Java 6u35, 7u07 are available

2012-08-31 Thread Williams, Nick
jumping on this issue so quickly. Nick -Original Message- From: Tony Anecito [mailto:adanec...@yahoo.com] Sent: Friday, August 31, 2012 10:02 AM To: Tomcat Users List Subject: Re: Java 6u35, 7u07 are available Hi All, I looked at the release notes and there was nearly nothing there. So

Re: Java 6u35, 7u07 are available

2012-08-31 Thread Jess Holle
...@yahoo.com] Sent: Friday, August 31, 2012 10:02 AM To: Tomcat Users List Subject: Re: Java 6u35, 7u07 are available Hi All, I looked at the release notes and there was nearly nothing there. So justification to update was impossible. Oracle needs to realize that releases with just one security and one

Re: Java 6u35, 7u07 are available

2012-08-31 Thread Giles Coochey
On 31/08/2012 16:22, Jess Holle wrote: Well, don't give Oracle too much credit -- or grief. According to various articles (look them up, I didn't save the URLs), they were notified of these vulnerabilities ~4 months ago. Unfortunately several days ago serious attacks in the wild using these

Re: Java 6u35, 7u07 are available

2012-08-31 Thread Tony Anecito
: From: Jess Holle je...@ptc.com Subject: Re: Java 6u35, 7u07 are available To: Tomcat Users List users@tomcat.apache.org Cc: Williams, Nick nicholas.willi...@ul.com Date: Friday, August 31, 2012, 9:22 AM Well, don't give Oracle too much credit -- or grief. According to various articles (look them

Re: Java 6u35, 7u07 are available

2012-08-31 Thread Jess Holle
...@ptc.com wrote: From: Jess Holle je...@ptc.com Subject: Re: Java 6u35, 7u07 are available To: Tomcat Users List users@tomcat.apache.org Cc: Williams, Nick nicholas.willi...@ul.com Date: Friday, August 31, 2012, 9:22 AM Well, don't give Oracle too much credit -- or grief. According to various

Re: Java 6u35, 7u07 are available

2012-08-31 Thread Konstantin Kolinko
2012/8/31 Konstantin Kolinko knst.koli...@gmail.com: Hi! Just noting that Java 6u35, 7u07 were released by Oracle a day ago http://www.oracle.com/technetwork/java/javase/downloads/ Those contain security fixes for issues exploitable when running Java from within a web browser. (Those