jre update?

Slackovado · 04-20-2012, 04:13 AM

Isn't the one year old jre included in Slackware 13.37 vulnerable?
Why has it not been updated?
Jre is no at version .31

allend · 04-20-2012, 04:24 AM

Vulnerable? - Yes, to the point that Firefox now checks the version and will disable Java.
Why? - Because Oracle now forbids redistribution by third parties.
Options - http://alien.slackbook.org/blog/open...ackware-13-37/

willysr · 04-20-2012, 05:09 AM

Or...... you can download the latest version of JRE/JDK and apply the same SlackBuild script found in Slackware-13.37 to build a tgz package

ruario · 04-20-2012, 05:24 AM

The change in licensing is probably what prevents the team from updating it. Basically they aren't allowed.

You have two options. Either use Alien Bob's OpenJDK/OpenJRE packages, or you can update the Oracle/Sun version yourself.

By coincidence I just did this on a machine a moment ago, so I'll make it really easy for you.

Grab PatV's jre SlackBuild and the latest Oracle/Sun binary (currently 11.6.0_31 as I write this post) for your architecture.

If Slackware, then:

Code:

$ wget -r -np -nH -Rbin --cut-dirs=5 ftp://ftp.osuosl.org/pub/slackware/slackware-13.37/source/l/jre/
$ cd jre/
$ wget 'http://javadl.sun.com/webapps/download/AutoDL?BundleId=59621' -O jre-6u31-linux-i586.bin

If Slackware64, then:

Code:

$ wget -r -np -nH -Rbin --cut-dirs=5 ftp://ftp.osuosl.org/pub/slackware/slackware64-13.37/source/l/jre/
$ cd jre/
$ wget 'http://javadl.sun.com/webapps/download/AutoDL?BundleId=59623' -O jre-6u31-linux-x64.bin

Now you can update the SlackBuild version information, make it executable, run and install it and finally add it to the slackpkg blacklist (so that it doesn't get downgraded):

Code:

$ sed -i 's/^\(VERSION=\).*/\16u31/;s/^\(DVER=\).*/\11.6.0_31/' jre.SlackBuild
$ chmod +x jre.SlackBuild
$ su
# ./jre.SlackBuild
# upgradepkg /tmp/jre-6u31-*-1.txz
# slackpkg blacklist jre

red_fire · 04-20-2012, 05:43 AM

Yes, to be specific jre is not allowed to be RE-distributed,,
but we, as end users, are allowed to download it directly from the website

allend · 04-20-2012, 05:44 AM

Apparently this is the Debian solution; supply a script that automatically downloads the binary, builds and installs a package.

ruario · 04-20-2012, 05:55 AM

Actually (whilst I haven't checked) I suspect it works the same way as with their Flash and MS Core Fonts packages. They have no real contents just meta data. Their pre-install scripts download the files extract them and put them in place. Their post-remove do the actual uninstall of the files. No building of packages. Building packages would be needed to do something similar on Slack due to the lack of uninstall scripts. Not that I think we need that.

I'm guessing that the next Slackware release will have openJDK/JRE based on AlienBOB's work and the Oracle/Sun stuff will be moved to extra as SlackBuild scripts only.

CTM · 04-20-2012, 05:43 PM

Quote:

Originally Posted by ruario

I'm guessing that the next Slackware release will have openJDK/JRE based on AlienBOB's work and the Oracle/Sun stuff will be moved to extra as SlackBuild scripts only.

For what it's worth, this is also the official advice being given to redistributors by Oracle. I think we'll see most distros doing this for future releases.