Does anybody know if this auto-update of java on SL3 is going to break anything LCG that relies on java, ie, requires a certain version? We still have SL3 service & WN. Grateful for advice... ---------- Forwarded message ---------- Date: Fri, 28 Dec 2007 13:54:58 -0600 From: Troy Dawson <[log in to unmask]> Subject: TESTING - jdk 1.5.0 update for SL3, SL4 Hello, java has had several security issues that need to be addressed. The problem is that the j2sdk-1.4.2 in SL3 and SL4 has several irritating issues. The worst issue is that it will uninstall newer versions of java. So, the goal has been to update the java in SL3 and SL4 to jdk 1.5.0 without hurting things too much. I think I've gotten it sorted out with some modified java-compat rpm's. I have done some testing and found that things work the way that I'm expecting, mainly that the j2sdk-1.4.2 is removed and jdk-1.5.0 is added and in place. But I'd like some testers. If nobody has any complaints, I want to push this out in the errata on wed 2 Jan. 2008. To Test SL3 ------- yum -c ftp://ftp.scientificlinux.org/linux/scientific/30rolling/testing/yum.conf update j\* Before: java-1.4.2-sun-compat-1.4.2.13-1jpp.i586 j2sdk-1.4.2_13-fcs.i586 After: java-1.4.2-sun-compat-1.4.2.90-1jpp.i586 java-1.5.0-sun-compat-1.5.0.14-1.sl.jpp.noarch jdk-1.5.0_14-fcs.i586 To Test SL4 ------- yum --enablerepo=sl-testing update j\* Before: java-1.4.2-sun-compat-1.4.2.13-1jpp.i586 j2sdk-1.4.2_13-fcs.i586 After: java-1.4.2-sun-compat-1.4.2.90-1jpp.i586 java-1.5.0-sun-compat-1.5.0.14-1.sl4.jpp.noarch jdk-1.5.0_14-fcs.i586 Thanks Troy -- __________________________________________________ Troy Dawson [log in to unmask] (630)840-6468 Fermilab ComputingDivision/LCSI/CSI DSS Group __________________________________________________ ------------------------------ Date: Fri, 28 Dec 2007 22:47:57 -0700 From: Stephen John Smoogen <[log in to unmask]> Subject: Re: TESTING - jdk 1.5.0 update for SLF3, SLF4 On Dec 28, 2007 12:57 PM, Troy Dawson <[log in to unmask]> wrote: > Hello, > java has had several security issues that need to be addressed. The problem is > that the j2sdk-1.4.2 in SLF3 and SLF4 has several irritating issues. The worst > issue is that it will uninstall newer versions of java. > So, the goal has been to update the java in SLF3 and SLF4 to jdk 1.5.0 without > hurting things too much. > I think I've gotten it sorted out with some modified java-compat rpm's. > I have done some testing and found that things work the way that I'm expecting, > mainly that the j2sdk-1.4.2 is removed and jdk-1.5.0 is added and in place. > But I'd like some testers. > If nobody has any complaints, I want to push this out in the errata on wed 2 > Jan. 2008. > This definately needs some testing by people using Java. There are major code changes between 1.4.x and 1.5.x and you can end up with some nonworking stuff quickly. If you are using third party software then it can also 'break' things quickly if 1.5.0 replaces the 1.4.2 your webservlets were using. So please make sure you let Troy know about where this would break you. -- Stephen J Smoogen. -- CSIRT/Linux System Administrator