Just to be clear, even though Oracle
had stated that they would not support Java 6 past February they
have released two updates since then to the public, including the
one yesterday. Apple thankfully has supplied those updates for OS
X, as Shawn has stated when Oracle is done publicly supporting
Java 6 with updates Apple will be done repackaging them for OS X
(rough summary.) It appears that Oracle is done with public fixes
on Java 6 (or at least they want to convince everyone they are.)
https://www.java.com/en/download/manual_v6.jsp
This is the last public release of Java 6.
Oracle recommends that users migrate to Java 7 in order to
continue receiving public updates and security enhancements. All
Java 6 releases up to and including 6u45 will be moved to the Java
Archive, where they will remain available but not receive
updates. » More
info
If you are having problems using Java 7, please report them
using our support
form.
On 4/17/13 11:11 AM, John Oliver wrote:
For enterprise customers, who need continued
access to critical bug fixes and security fixes as well as
general maintenance for Java SE 6 or older versions, long term
support is available through Oracle Java SE
Support .
That does not preclude the possibility of Apple continuing to
support Java 6. I'm certainly not asking them to… Java is bad
enough, Java 6 needs to be dead. What I AM looking for,
though, is a statement one way or the other.
You said, "Apple is not going to pursue the continued
operation of Java on OSX" But Apple just released a patch for
u45, so clearly, as of extremely recently, there is or was still
some kind of ongoing effort regarding Java 6. If that was the
last patch Apple is every going to release, fantastic… but I'd
like to know that. If they're going to continue to patch it so
long as Snow Leopard remains supported, fine, I'd like to know
that. If they have some particular drop-dead date in mind, I'd
like to know that. Not the thinking behind their decision, not
an opportunity to argue with them, just a statement… "X is the
last patch or date of support for Java 6" I need that as a
lever to pry at one particular company that thinks it's
perfectly reasonable to require Java 6 and ignore Java 7.
From: "Link, Peter R."
< email@hidden>
Date: Wednesday, April
17, 2013 7:53 AM
To: Shawn Geddis < email@hidden>
Cc: Apple Fed-Talk
< email@hidden>
Subject: Re:
[Fed-Talk] Java for OS X 2013-003 and Mac OS X v10.6 Update 15
Shawn never talks directly about anything Apple is planning
for the future (properly so) but I see his comments as
giving a clear indication of Apple's future concerning Java.
Apple is not going to pursue the continued operation of Java
on OSX, that's up to Oracle to provide it and users to
install and use it. Reading into this, I see Apple
ultimately dropping Java support the same way they dropped
Flash on iOS. It's not a necessary application environment
for OSX and actually conflicts with OSX's security model
(just like Flash). Shawn might reply saying I'm taking his
comments too far but look at what's been happening with
Java. Every time Java has a vulnerability, Apple is the one
who takes the heat, not Oracle. Analysts, security experts,
bloggers all point the finger at Apple instead of where it
belongs. Apple has every right to make sure it keeps its
software clean and I see their change in how Java is
delivered as being the first step in removing Java for OSX.
Of course, I need Java running on my work computer
because we have applications that require it.
On Apr 17, 2013, at 7:28 AM, Shawn Geddis < email@hidden>
wrote:
On Apr 17, 2013, at 9:51 AM, Joel Esler
< email@hidden>
wrote:
Shawn, I think the implied question
was, when is Apple going to move past 6?
Oracle is on 7 now.
I think Java should die in a glorious
fire, but the question remains.
Joel,
I understood that and thought it was clear in
my statement.
"Oracle owns and manages Java, not Apple."
Starting with Java 7, Oracle has taken over
100% responsibility for Java on OS X. Are
people not aware of this ?
To answer your question specifically,
" when is Apple going to move past 6?"
.... Well, never, since Oracle controls all
updates and distribution of Java 7 and later….
Peter Link
Cyber Security Analyst
Cyber Security Program
Lawrence Livermore
National Laboratory
PO Box 808, L-315
Livermore, CA 94551-0808
The contents of this
message are mine personally and do not
reflect the views or position of the U.S.
Department of Energy, Federal Government,
National Nuclear Security Administration,
Lawrence Livermore National Security, or
Lawrence Livermore National Laboratory.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
email@hidden
--
********************************************************
Ron Colvin CISSP, CAP, CEH
Certified Security Analyst
NASA - Goddard Space Flight Center
<email@hidden>
Direct phone 301-286-2451
NASA Jabber (email@hidden) AIM rcolvin13
NASA LCS (email@hidden)
********************************************************
|