News for hackers. Stuff that matters.

A comment on Canonical to remove all Sun JDK packages from the Partner archive. Parent comment

Re:Canonical to remove all Sun JDK packages from the Partner... by cleaver on Thursday December 15, 2011 @06:50PM (#3358652)
That sounds like good behaviour for the browser plugin, but removing the entire JDK would be annoying if you used Eclipse. I suspect that non-plugin use of the JDK would not be as impacted by the security issues.
[ Parent | on HN ]
Re:Canonical to remove all Sun JDK packages from the Partner... by modoc on Friday December 16, 2011 @12:16AM (#3359530)
And would BREAK things if you run Tomcat/JBoss/Glassfish/etc... Seriously the idea of running a package update that would erase key requirements to running my production J2EE apps is totally insane. I guess I'll stick with RHEL. For all it's issues, they've never talked about silently deleting my JDK.....
[ Parent | on HN ]
Re:Canonical to remove all Sun JDK packages from the Partner... by buntoo on Friday December 16, 2011 @07:55AM (#3360559)
redhat also removes packages when they cant update them

https://rhn.redhat.com/errata/RHSA-2011-0368.html

https://rhn.redhat.com/errata/RHSA-2008-1045.html

[ Parent | on HN ]
Re:Canonical to remove all Sun JDK packages from the Partner... by rlpb on Thursday December 15, 2011 @07:35PM (#3358796)
Fortunately, Eclipse users are generally going to be in a position to fix the problem, or they can even pin the packages in advance if they want to remain vulnerable. On the other hand, any other resolution would lead to compromised users not able to fix the problem.
[ Parent | on HN ]