PDA

View Full Version : [ubuntu] sun java update -13 on 8.0.4.2

leoquant
June 6th, 2009, 10:20 AM
Does anyone know why sun java isn't updated to update -13 on Hardy Heron?
This update is a major security update.
: https://bugs.edge.launchpad.net/ubuntu/+source/sun-java6/+bug/360414
Pjotr123
June 6th, 2009, 11:40 AM
Hardy Heron 8.04 is a current LTS version. Sun Java JRE should be kept safe in 8.04, even though it concerns a Multiverse package.

Sun has provided a security update long ago, but the updated version is only available for 9.04. That's not good.
leoquant
June 6th, 2009, 12:00 PM
Sun has provided a security update long ago, but the updated version is only available for 9.04. That's not good.

Indeed, Opensuse is up to date.
Johan!
June 6th, 2009, 12:10 PM
Related bugs:
https://bugs.edge.launchpad.net/ubuntu/+source/sun-java6/+bug/360414
https://bugs.edge.launchpad.net/ubuntu/+source/sun-java6/+bug/288658
https://bugs.edge.launchpad.net/ubuntu/+source/sun-java6/+bug/187570
https://bugs.edge.launchpad.net/ubuntu/+source/sun-java6/+bug/330262

I'd really like to know why Ubuntu isn't updating Java in current versions.
I'd also like to know why these bugs are not fixed. I don't even see any reaction from the Java maintainer.
cariboo907
June 6th, 2009, 02:58 PM
The developers normally don't read post here, you may be better off contacting the developer directly.
leoquant
June 6th, 2009, 04:22 PM
The developers normally don't read post here, you may be better off contacting the developer directly.

They are contacted several weeks (month's?) ago.
Johan!
June 7th, 2009, 11:35 AM
So there are no security updates for Java if you use an older, but still supported, Ubuntu version. When you ask a maintainer/dev about the situation, he does not reply.

This is not a good situation, in my opinion :-k
Pjotr123
June 7th, 2009, 12:57 PM
It's a serious matter. I am one of those who tried Launchpad and e-mailing the maintainer. In vain.

I really hope that this bit of extra public attention will help to wake the maintainer. Unfixed security is very bad for any Ubuntu version, but even more so for an LTS version.
testcees
June 21st, 2009, 03:50 PM
Bump: Same for 8.04.3.
cariboo907
June 21st, 2009, 04:56 PM
The LTS version isn't updated to newer versions of the package, but there are security fixes. Have a look at this list (http://www.ubuntu.com/usn) of security fixes for 8.04.2
leoquant
July 2nd, 2009, 05:37 PM
good news: https://bugs.launchpad.net/ubuntu/+source/sun-java6/+bug/382918

sun java update-14 in hardy heron proposed...fix committed
although update-14 itself has no security issue's I assume that the update-13 security issue's are also solved now with this release/update.