AW: Beginner's Question on Java Security Fixes

2013-05-08 Thread Markus Karg
Following the trouble currently made around Java's security, this means that the version of Java 7 delivered with Wheezy actually implies huge security risks? If that is actually true I do not understand the Debian release policy. I mean, what should it be good for having a stable-but-unsecure (

AW: Beginner's Question on Java Security Fixes

2013-05-07 Thread Markus Karg
Maybe there is a misunderstanding. I am running Debian Wheezy, neither jessie nor sid. Certainly I want the best stability and security. Using Oracle's product, this would result in manually installing 7u21. But what if using openjdk-7-jre on wheezy? The version tag says it is 7u3, but I doubt t

AW: Beginner's Question on Java Security Fixes

2013-05-07 Thread Markus Karg
Thank you for your kind answer. So this means there is no simple answer like e. g. "On Debian, openjdk-7-jre-2.x has the same security level than OpenJDK 7u21", but I have to check each single CVE, right? Thanks! -Markus -Ursprüngliche Nachricht- Von: paul.is.w...@gmail.com [mailto:paul