Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Reminder: Java 6 end-of-live February 2013 - SANS Internet Storm Center SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Reminder: Java 6 end-of-live February 2013

Reader Josh reports that while downloading the latest version of Java 6 (version 37) from Oracle's website he received a reminder from Oracle that Java 6 will reach end of life in February 2013.   After February 2013 security updates will only be available to customer who purchase extended support contracts.    If you haven't already done so, now is a good time to mark your calendars for this upgrade.   More details are available here:

http://www.oracle.com/technetwork/java/javase/eol-135779.html

Mark Baggett

Mark

81 Posts
ISC Handler
Has Oracle certified their E-Business suite with Java 1.7 yet? They hadn't sone so as of a few weeks ago. We routinely cannot upgrade Oracle's Java on our desktops because Oracle won't make their own applications work with the current version of Oracle Java until way late.
Anonymous
Posts
Considering the security mess that Java 7 has been....good luck getting folks off 6.
Anonymous
Posts
Agreed - going from JRE 6 to 7 is jumping out of the frying pan and into the fire. We're looking at using EMET but haven't seen any evidence anywhere that it provides any mitigation. My preference is to get rid of it altogether and to serve up a VDI for Java apps as needed.
Anonymous
Posts
How is 1.7 worse than 1.6?
Anonymous
Posts
Looks like Oracle has certified it.
https://blogs.oracle.com/stevenChan/entry/jre_7_certified_with_oracle

We use the USPTO for e-filings. They do not support it.
Anonymous
Posts
Oracle just released Java 6 (version 38) and Java 7 (version 10)
ELBE

13 Posts Posts
ELBE Thanks for the release notice. The Oracle site claims a 12-11-12 release. I hadn't seen any announcement until yours. Hoping this is a small bugfix and doesn't need immediate action.
G.Scott H.

48 Posts Posts
Found the release notes for 7u10 and 6u38 the security baseline remains at 7u09 and 6u37. No rush for this one, just some features and added platform support.
G.Scott H.

48 Posts Posts

Sign Up for Free or Log In to start participating in the conversation!