Print

Print


Does anybody know if this auto-update of java on SL3 is going to break
anything LCG that relies on java, ie, requires a certain version?

We still have SL3 service & WN.

Grateful for advice...

---------- Forwarded message ----------

Date:    Fri, 28 Dec 2007 13:54:58 -0600
From:    Troy Dawson <[log in to unmask]>
Subject: TESTING - jdk 1.5.0 update for SL3, SL4

Hello,
java has had several security issues that need to be addressed.  The problem is 
that the j2sdk-1.4.2 in SL3 and SL4 has several irritating issues.  The worst 
issue is that it will uninstall newer versions of java.
So, the goal has been to update the java in SL3 and SL4 to jdk 1.5.0 without 
hurting things too much.
I think I've gotten it sorted out with some modified java-compat rpm's.
I have done some testing and found that things work the way that I'm expecting, 
mainly that the j2sdk-1.4.2 is removed and jdk-1.5.0 is added and in place.
But I'd like some testers.
If nobody has any complaints, I want to push this out in the errata on wed 2 
Jan. 2008.

To Test SL3
-------
    yum -c 
ftp://ftp.scientificlinux.org/linux/scientific/30rolling/testing/yum.conf 
update j\*

Before:
   java-1.4.2-sun-compat-1.4.2.13-1jpp.i586
   j2sdk-1.4.2_13-fcs.i586
After:
   java-1.4.2-sun-compat-1.4.2.90-1jpp.i586
   java-1.5.0-sun-compat-1.5.0.14-1.sl.jpp.noarch
   jdk-1.5.0_14-fcs.i586


To Test SL4
-------
    yum --enablerepo=sl-testing update j\*

Before:
   java-1.4.2-sun-compat-1.4.2.13-1jpp.i586
   j2sdk-1.4.2_13-fcs.i586
After:
   java-1.4.2-sun-compat-1.4.2.90-1jpp.i586
   java-1.5.0-sun-compat-1.5.0.14-1.sl4.jpp.noarch
   jdk-1.5.0_14-fcs.i586


Thanks
Troy
--
__________________________________________________
Troy Dawson  [log in to unmask]  (630)840-6468
Fermilab  ComputingDivision/LCSI/CSI DSS Group
__________________________________________________

------------------------------

Date:    Fri, 28 Dec 2007 22:47:57 -0700
From:    Stephen John Smoogen <[log in to unmask]>
Subject: Re: TESTING - jdk 1.5.0 update for SLF3, SLF4

On Dec 28, 2007 12:57 PM, Troy Dawson <[log in to unmask]> wrote:
> Hello,
> java has had several security issues that need to be addressed.  The problem is
> that the j2sdk-1.4.2 in SLF3 and SLF4 has several irritating issues.  The worst
> issue is that it will uninstall newer versions of java.
> So, the goal has been to update the java in SLF3 and SLF4 to jdk 1.5.0 without
> hurting things too much.
> I think I've gotten it sorted out with some modified java-compat rpm's.
> I have done some testing and found that things work the way that I'm expecting,
> mainly that the j2sdk-1.4.2 is removed and jdk-1.5.0 is added and in place.
> But I'd like some testers.
> If nobody has any complaints, I want to push this out in the errata on wed 2
> Jan. 2008.
>

This definately needs some testing by people using Java. There are
major code changes between 1.4.x and 1.5.x and you can end up with
some nonworking stuff quickly. If you are using third party software
then it can also 'break' things quickly if 1.5.0 replaces the 1.4.2
your webservlets were using. So please make sure you let Troy know
about where this would break you.

-- 
Stephen J Smoogen. -- CSIRT/Linux System Administrator