Bug#645881: critical update 29 available

[Nico Kadel-Garcia]

On Wed, Oct 19, 2011 at 6:50 AM, Sylvestre Ledru <sylvestre at debian.org> wrote:
> CC debian release & security
>
> Le mercredi 19 octobre 2011 à 12:21 +0200, Thijs Kinkhorst a écrit :
>> Upstream has released Java SE 6 update 29 yesterday:
>> http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html
>> with security fixes.
>
> Well, that especially means that it is now time to consider the removal
> of sun-java6 from Debian.
>
> We, the distros, are no longer allowed by Oracle to redistribute this
> version [1] [2].
> The OpenJDK (6 or 7) is now the way to go.
>
> About stable, I don't know what the security team would recommend
> here ?!

I can personally recommend the openjdk from other work I'm doing. The
improvement in the packaging alone justifies the switch for software
maintainers, but it's also worked well under load for me with Ant and
JBoss tests I've done recently.