Firefox java plugin

[AnotherUser]

I have a fully updated system. Today, I happen to look into my "Mange Add-ons" page and noticed that the Java plugin is correctly disabled due to the recently discovered vulnerability in version 6 (specifically, 1.6.0_38). Reading elsewhere, it looks like Java 7 update 11 may or may not actually address this known vulnerability. Frankly, I haven't had the time to follow all of those development. Which leads me to my questions:

• Is 7.11 the latest version of Java?
• Whatever that latest version is, does it address the known 0-day vulnerability?
• If it does, should I request an updated package for this in the appropriate forum section? I did a quick search but did not find such a request yet

[MBantz]

For JavaSE, version 1.6.38 seems to be the latest version, for JavaSE 1.7 it is build 11,

http://www.oracle.com/technetwork/java/javase/downloads/index.html

cheers,
MBantz

[promeneur]

to install the rpm from java site is not sufficient to make a good install.

pclos (mandriva also) java installation is not a replacement but an addition of version x+1 to version x
thus you have permanently the choice between 2 versions

when installing new java release you must complete the java installation by creating info in /etc/alternatives
according to use the "alternative" tool to choose what java you want to use.

this job must be done by a script.

this script is in java pclos rpm till 1.6

more : if i remember the new oracle java .so has a different name and and are not put at the right place

[promeneur]

here is doc about to install java

http://mib.pianetalinux.org/forum/viewtopic.php?f=20&t=3432

http://mib.pianetalinux.org/forum/viewtopic.php?f=53&t=3439

http://www.if-not-true-then-false.com/2010/install-sun-oracle-java-jdk-jre-7-on-fedora-centos-red-hat-rhel/

[MBantz]

Ups, it's not a good idea to install from outside the repos, your system cannot be supported by the forum if you do. Instead make a package update request against Java and wait for votes (not sure if there is a package request or not),

please don't encourage others to install from outside the repo,

cheers,
Mbantz

[menotu]

I have a fully updated system. Today, I happen to look into my "Mange Add-ons" page and noticed that the Java plugin is correctly disabled due to the recently discovered vulnerability in version 6 (specifically, 1.6.0_38). Reading elsewhere, it looks like Java 7 update 11 may or may not actually address this known vulnerability. Frankly, I haven't had the time to follow all of those development. Which leads me to my questions:

• Is 7.11 the latest version of Java?
• Whatever that latest version is, does it address the known 0-day vulnerability?
• If it does, should I request an updated package for this in the appropriate forum section? I did a quick search but did not find such a request yet

I'm unsure if Java is considered part of the regular updates but please see the following link which provides info on some  packages that don't require Package Request Updates in the normal manner.

Package Request Updates

To see which are the latest versions of Java go herel

Some useful Java info
   
Zero-Day Java Exploit - All versions of Java 7 upto and inc Java 7 Update 10


What You Need to Know About the Java Exploit

One quick question - do you use or need Java?

[AnotherUser]

One quick question - do you use or need Java?

Yes. I need Java (and no, it's not JavaScript). There are several work related tools that require Java plugin to run through the browser interface.

[menotu]

One quick question - do you use or need Java?

Yes. I need Java (and no, it's not JavaScript). There are several work related tools that require Java plugin to run through the browser interface.

?

[AnotherUser]

One quick question - do you use or need Java?

Yes. I need Java (and no, it's not JavaScript). There are several work related tools that require Java plugin to run through the browser interface.

?

Which part of my answer would you like me to clarify?