Re: Will there be an openjdk-7 security update for wheezy?

2014-03-24 Thread Raphael Geissert
Hi, Francis Devereux wrote: > Thanks for the information (and your work on this). Is the test suite > something that would be easy for me to run myself? It is run as part of the package's build process. N.b. I think that the packages in sid have the test suite disabled due to the exact same pro

Re: Will there be an openjdk-7 security update for wheezy?

2014-03-21 Thread Francis Devereux
Hi Raphael, On 21 Mar 2014, at 08:56, Raphael Geissert wrote: > Hi, > > Francis Devereux wrote: > [...] >> Should I expect a DSA / security update of openjdk-7 for wheezy which fixes >> some/all of these vulnerabilities? If so should I expect to wait a while due >> to the complexity of backport

RE: Will there be an openjdk-7 security update for wheezy?

2014-03-21 Thread Arnoud Tijssen
Another possibility is to use the oracle java instead of the openjdk as described here: http://www.webupd8.org/2012/01/install-oracle-java-jdk-7-in-ubuntu-via.html Cheers, Arnoud Hi, Francis Devereux wrote: [...] > Should I expect a DSA / security update of openjdk-7 for wheezy which fixes >

Re: Will there be an openjdk-7 security update for wheezy?

2014-03-21 Thread Raphael Geissert
Hi, Francis Devereux wrote: [...] > Should I expect a DSA / security update of openjdk-7 for wheezy which fixes > some/all of these vulnerabilities? If so should I expect to wait a while due > to the complexity of backporting OpenJDK security fixes (which I expect is > high)? The issues would be

Will there be an openjdk-7 security update for wheezy?

2014-03-20 Thread Francis Devereux
Hi, https://security-tracker.debian.org/tracker/source-package/openjdk-7 lists wheezy as 'vulnerable' to many openjdk-7 security issues. It looks like most of these issues have been fixed in the latest version (7u51-2.4.5-2, which is in jessie and sid, whereas wheezy has 7u25-2.3.10-1~deb7u1).