News for hackers. Stuff that matters.

A comment on Canonical to remove all Sun JDK packages from the Partner archive. Parent comment

Re:Canonical to remove all Sun JDK packages from the Partner... by mdeslaur on Thursday December 15, 2011 @04:29PM (#3358106)
If people find having the risk is acceptable, they may use apt pinning to force the older packages to remain installed.

Our users are expecting that the normal software update process ensures that software they are using is maintained in a secure state with timely security updates. To leave Java at a known vulnerable version would be irresponsible, and most likely not what our users are expecting.

[ Parent | on HN ]
Re:Canonical to remove all Sun JDK packages from the Partner... by sounds on Thursday December 15, 2011 @04:35PM (#3358130)
To add to that, once the java plugin is removed the browser will prompt them to install the default (icedtea) which is secure.

They will see the prompt the next time they visit a web page which uses java.

[ Parent | on HN ]