Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
dev-java/sun-jdk-1.6.0.45 masked, where do I go?
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Portage & Programming
View previous topic :: View next topic  
Author Message
deniss
n00b
n00b


Joined: 06 Jan 2004
Posts: 17

PostPosted: Tue Jul 02, 2013 10:09 pm    Post subject: dev-java/sun-jdk-1.6.0.45 masked, where do I go? Reply with quote

As of July 1, 2013, dev-java/sun-jdk-1.6.0.45 is now masked.

The following message from emerge explains why:

Code:
# Tom Wijsman <TomWij@gentoo.org> (30 Jun 2013)
# Sun JDK and JRE contain critical vulnerabilities and receive no further
# updates; masking to make users aware of this, users that still need this
# package and have no alternative can unmask at their own risk. See bug #473830.


This got me questioning where to go for better java and whether I even need Java installed on my machine in the first place. I don't do any java programming or developing, so I'm wondering what this package even does for me.

I ran

Code:
# qdepends dev-java/sun-jdk


and got

Code:
dev-java/sun-jdk-1.6.0.45: =dev-java/java-config-2* app-admin/eselect-java <dev-java/java-config-2.2


I have java and javascript USE flags set in /etc/make.conf, and I think I did that to make sure my web browser is fully functional. But I guess I never read Gentoo Java Guide until now, and it says that in order to have a java plugin for my browser, I would need to build JDK/JRE with the USE flag nsplugin, and I never had that USE flag set.

So, when I run

Code:
# eselect java-nsplugin list


there are no browser plugins listed to choose from.

If I were to REMOVE java and javascript USE flags from /etc/make.conf, these are the packages that would need to be rebuilt:

Code:

[ebuild   R    ] media-libs/libjpeg-turbo-1.2.1
[ebuild   R    ] sys-libs/db-4.8.30:4.8
[ebuild   R    ] sys-devel/gettext-0.18.2
[ebuild   R    ] media-gfx/graphviz-2.26.3-r4
[ebuild   R    ] dev-libs/cyrus-sasl-2.1.25-r4
[ebuild   R    ] net-dns/libidn-1.26
[ebuild   R    ] net-print/cups-1.6.2-r5


So, for a non-developer, is there any reason for me to keep JDK/JRE on my machine? Does net-print/cups rely on java for its web interface for configuration? If so, I like that feature. And that's basically it?
Back to top
View user's profile Send private message
abclements
n00b
n00b


Joined: 31 Mar 2003
Posts: 16
Location: Saskatoon, Saskatchewan, Canada

PostPosted: Tue Jul 02, 2013 10:32 pm    Post subject: Java isn't all that important Reply with quote

I can think of a few use cases for having Java on your system.
    - Developing for Android you would need the JDK
    - Using a text editor like JEdit
    - Playing games on PoGo


In most instances you don't need the Java plugin installed where most of the danger is. Unless you really need it for some special application, I would uninstall it. And if you need it for something, don't install the plugin unless you really know you need it. And in that case I would be extra cautious on what web sites you allow to run java. I would recommend using a browser plugin like noscript to control where it is allowed to run.
_________________
“Those who grasp at perceptions and views
go about butting their heads in the world.”
~The Buddha
Back to top
View user's profile Send private message
deniss
n00b
n00b


Joined: 06 Jan 2004
Posts: 17

PostPosted: Wed Jul 03, 2013 3:25 am    Post subject: Re: Java isn't all that important Reply with quote

abclements wrote:
I can think of a few use cases for having Java on your system.
    - Developing for Android you would need the JDK
    - Using a text editor like JEdit
    - Playing games on PoGo


In most instances you don't need the Java plugin installed where most of the danger is. Unless you really need it for some special application, I would uninstall it. And if you need it for something, don't install the plugin unless you really know you need it. And in that case I would be extra cautious on what web sites you allow to run java. I would recommend using a browser plugin like noscript to control where it is allowed to run.


I think for my sake, there's not much use for Java that I have personally. I don't play any computer games, I don't do java development, and it seems like only a couple packages like net-print/cups actually use java. Maybe I won't miss it.

In any case, which JDK/JRE is the more secure one out of the ones available on gentoo?
Back to top
View user's profile Send private message
The Doctor
Moderator
Moderator


Joined: 27 Jul 2010
Posts: 2678

PostPosted: Wed Jul 03, 2013 3:32 am    Post subject: Reply with quote

If you do miss it, try icedtea.
_________________
First things first, but not necessarily in that order.

Apologies if I take a while to respond. I'm currently working on the dematerialization circuit for my blue box.
Back to top
View user's profile Send private message
toralf
Developer
Developer


Joined: 01 Feb 2004
Posts: 3922
Location: Hamburg

PostPosted: Wed Jul 03, 2013 7:59 am    Post subject: Re: dev-java/sun-jdk-1.6.0.45 masked, where do I go? Reply with quote

deniss wrote:
I don't do any java programming or developing, so I'm wondering what this package even does for me.
icedea-bin might be fully sufficient for you
Back to top
View user's profile Send private message
deniss
n00b
n00b


Joined: 06 Jan 2004
Posts: 17

PostPosted: Wed Jul 03, 2013 4:27 pm    Post subject: Reply with quote

The Doctor wrote:
If you do miss it, try icedtea.

toralf wrote:
icedea-bin might be fully sufficient for you


The weird thing is, it turns out I already have icedtea-bin on my system:

Code:

# emerge -p icedtea-bin

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild   R    ] dev-java/icedtea-bin-6.1.12.5


And I don't have any nsplugin installed at this point anyway, so switching over to icedtea was as simple as:

Code:

# java-config --list-available-vms
# java-config --set-system-vm icedtea-bin-6
# emerge -C sun-jdk


To check sanity of the new java setup, I ran

Code:

# java-check-environment

 * === Java Environment Checker ===
 * The purpose of this script is to check the sanity of your Java Environment.
 * We have significantly changed and improved the way Java is handled in many
 * respects.
 * Please refer to our upgrade guide for details:
 * http://www.gentoo.org/proj/en/java/java-upgrade.xml

 * Checking fastjar ...                                                   [ ok ]

 * Checking vm_environment_files ...                                      [ ok ]

 * Checking user_settings ...
 * Running as root. Don't need to check user settings.                    [ ok ]

 * Checking generation_1_system_vm ...                                    [ ok ]

 * Checking java_config_1 ...                                             [ ok ]

 * Checking global_classpath ...
grep: /etc/env.d/binutils: Is a directory
grep: /etc/env.d/cblas: Is a directory
grep: /etc/env.d/gcc: Is a directory
grep: /etc/env.d/python: Is a directory                                   [ ok ]

 * Checking virtual_provides ...                                          [ ok ]

 * Checking overlays_eclasses ...                                         [ ok ]

 * Checking package_env ...                                               [ ok ]

 * Checking proc_mounted ...                                              [ ok ]

 * Java environment is sane. Congratulations!


So I'm good to go, it seems.

Do I generally NOT want nsplugin for firefox anyway due to vulnerabilities?
Back to top
View user's profile Send private message
dmpogo
Advocate
Advocate


Joined: 02 Sep 2004
Posts: 3267
Location: Canada

PostPosted: Wed Jul 03, 2013 8:13 pm    Post subject: Reply with quote

You should check that you do not need java for any third party software that you may have installed outside of portage, although many may come with their own jre copy
Back to top
View user's profile Send private message
Kalin
Tux's lil' helper
Tux's lil' helper


Joined: 22 Dec 2002
Posts: 130
Location: Germany

PostPosted: Thu Jul 04, 2013 5:35 pm    Post subject: Reply with quote

You should try
Code:
equery d virtual/jdk
instead, to see all java dependencies (as opposed to sun-jdk dependencies)

I have quite a few, but I deal with Android and GIS. Also net-libs/opal seems to need it (VoIP).
Back to top
View user's profile Send private message
cwc
Veteran
Veteran


Joined: 20 Mar 2006
Posts: 1281
Location: Tri-Cities, WA USA

PostPosted: Sun Jul 07, 2013 6:56 pm    Post subject: I'm using oracle jdk and jre Reply with quote

I'm using oracle jdk and jre along with chromium and firefox.
I do use the nsplugin though


I set this in package.use
dev-java/oracle-jre-bin nsplugin


Code:

azzerare ~ # emerge --search jdk
Searching...   
[ Results for search key : jdk ]
[ Applications found : 13 ]

*  dev-java/apple-jdk-bin [ Masked ]
      Latest version available: 1.6.0
      Latest version installed: [ Not Installed ]
      Size of files: 0 kB
      Homepage:      http://java.sun.com/j2se/1.6.0/
      Description:   Links to Apple's version of Sun's J2SE Development Kit
      License:       public-domain

*  dev-java/db4o-jdk11
      Latest version available: 7.4
      Latest version installed: [ Not Installed ]
      Size of files: 312 kB
      Homepage:      http://www.db4o.com
      Description:   Core files for the object database for java
      License:       GPL-2

*  dev-java/db4o-jdk12
      Latest version available: 7.4
      Latest version installed: [ Not Installed ]
      Size of files: 89 kB
      Homepage:      http://www.db4o.com
      Description:   Core files for the object database for java
      License:       GPL-2

*  dev-java/db4o-jdk5
      Latest version available: 7.4
      Latest version installed: [ Not Installed ]
      Size of files: 63 kB
      Homepage:      http://www.db4o.com
      Description:   Core files for the object database for java
      License:       GPL-2

*  dev-java/diablo-jdk [ Masked ]
      Latest version available: 1.6.0.07.02
      Latest version installed: [ Not Installed ]
      Size of files: 0 kB
      Homepage:      http://www.FreeBSDFoundation.org/downloads/java.shtml
      Description:   Java Development Kit
      License:       sun-bcla-java-vm

*  dev-java/gcj-jdk [ Masked ]
      Latest version available: 4.7.3
      Latest version installed: [ Not Installed ]
      Size of files: 0 kB
      Homepage:      http://www.gentoo.org/
      Description:   Java wrappers around GCJ
      License:       GPL-2

*  dev-java/hp-jdk-bin [ Masked ]
      Latest version available: 1.6.0.05
      Latest version installed: [ Not Installed ]
      Size of files: 0 kB
      Homepage:      http://www.hp.com/go/java
      Description:   HP JDK/JRE and Plug-In
      License:       HP-JDKJRE6

*  dev-java/ibm-jdk-bin
      Latest version available: 1.6.0.9_p2
      Latest version installed: [ Not Installed ]
      Size of files: 93,588 kB
      Homepage:      http://www.ibm.com/developerworks/java/jdk/
      Description:   IBM Java SE Development Kit
      License:       IBM-J1.6

*  dev-java/oracle-jdk-bin
      Latest version available: 1.7.0.25
      Latest version installed: 1.7.0.25
      Size of files: 94,059 kB
      Homepage:      http://www.oracle.com/technetwork/java/javase/
      Description:   Oracle's Java SE Development Kit
      License:       Oracle-BCLA-JavaSE examples? ( BSD )

*  dev-java/soylatte-jdk-bin [ Masked ]
      Latest version available: 7
      Latest version installed: [ Not Installed ]
      Size of files: 51,587 kB
      Homepage:      http://landonf.bikemonkey.org/static/soylatte/
      Description:   Landon Fuller's OpenJDK 7 for Mac OS X 10.5/PPC
      License:       GPL-2-with-exceptions

*  dev-java/sun-jdk [ Masked ]
      Latest version available: 1.6.0.45
      Latest version installed: [ Not Installed ]
      Size of files: 70,398 kB
      Homepage:      http://www.oracle.com/technetwork/java/javase/
      Description:   Oracle's Java SE Development Kit
      License:       Oracle-BCLA-JavaSE examples? ( BSD )

*  java-virtuals/jdk-with-com-sun
      Latest version available: 20111111-r1
      Latest version installed: 20111111
      Size of files: 0 kB
      Homepage:      http://www.gentoo.org
      Description:   Virtual ebuilds that require internal com.sun classes from a JDK
      License:       public-domain

*  virtual/jdk
      Latest version available: 1.6.0-r2
      Latest version installed: 1.6.0-r2
      Size of files: 0 kB
      Homepage:     
      Description:   Virtual for Java Development Kit (JDK)
      License:       





[code]
azzerare ~ # emerge --search jre
Searching...
[ Results for search key : jre ]
[ Applications found : 8 ]

* dev-java/diablo-jre-bin [ Masked ]
Latest version available: 1.6.0.07.02
Latest version installed: [ Not Installed ]
Size of files: 28,045 kB
Homepage: http://www.FreeBSDFoundation.org/downloads/java.shtml
Description: Java Runtime Environment
License: sun-bcla-java-vm

* dev-java/ibm-jre-bin
Latest version available: 1.6.0.9_p2
Latest version installed: [ Not Installed ]
Size of files: 69,181 kB
Homepage: http://www.ibm.com/developerworks/java/jdk/
Description: IBM Java SE Runtime Environment
License: IBM-J1.6

* dev-java/jreleaseinfo [ Masked ]
Latest version available: 1.3.0-r1
Latest version installed: [ Not Installed ]
Size of files: 37 kB
Homepage: http://jreleaseinfo.sourceforge.net/
Description: Ant Task for build-time creation of Java source file with program version, build number or any other info
License: Apache-2.0

* dev-java/jrexx
Latest version available: 1.1.1-r1
Latest version installed: 1.1.1-r1
Size of files: 61 kB
Homepage: http://www.karneim.com/jrexx/
Description: Regular expression API for textual pattern matching based on the finite state automaton theory.
License: LGPL-2.1

* dev-java/oracle-jre-bin
Latest version available: 1.7.0.25
Latest version installed: 1.7.0.25
Size of files: 45,861 kB
Homepage: http://www.oracle.com/technetwork/java/javase/
Description: Oracle's Java SE Runtime Environment
License: Oracle-BCLA-JavaSE

* dev-java/sun-jre-bin [ Masked ]
Latest version available: 1.6.0.45
Latest version installed: [ Not Installed ]
Size of files: 20,880 kB
Homepage: http://www.oracle.com/technetwork/java/javase/
Description: Oracle's Java SE Runtime Environment
License: Oracle-BCLA-JavaSE

* net-libs/jreen
Latest version available: 1.1.1
Latest version installed: [ Not Installed ]
Size of files: 285 kB
Homepage: https://github.com/euroelessar/jreen
Description: Qt XMPP library
License: GPL-2

* virtual/jre
Latest version available: 1.6.0-r1
Latest version installed: 1.6.0-r1
Size of files: 0 kB
Homepage:
Description: Virtual for Java Runtime Environment (JRE)
License:
[code]
_________________
Without diversity there can be no evolution:)
Back to top
View user's profile Send private message
jonfr
Veteran
Veteran


Joined: 20 Jul 2003
Posts: 1008
Location: Denmark

PostPosted: Sat Jul 13, 2013 11:15 pm    Post subject: Reply with quote

Vuze does not work with oracle-java, at least not version 4.8.1 that is in portage at the moment. Its compile just fails with java 1.7.
Back to top
View user's profile Send private message
cwc
Veteran
Veteran


Joined: 20 Mar 2006
Posts: 1281
Location: Tri-Cities, WA USA

PostPosted: Mon Jul 15, 2013 1:32 pm    Post subject: Reply with quote

jonfr wrote:
Vuze does not work with oracle-java, at least not version 4.8.1 that is in portage at the moment. Its compile just fails with java 1.7.


vuze works on my system
azzerare ~ # uname -a
Linux azzerare 3.8.13-gentoo #1 SMP Fri May 17 23:32:01 PDT 2013 x86_64 AMD Athlon(tm) 64 Processor 3400+ AuthenticAMD GNU/Linux
azzerare ~ # java -version
java version "1.7.0_25"
Java(TM) SE Runtime Environment (build 1.7.0_25-b15)
Java HotSpot(TM) 64-Bit Server VM (build 23.25-b01, mixed mode)

[url]
http://96.41.211.168/images/vuze.png
[/url]
_________________
Without diversity there can be no evolution:)
Back to top
View user's profile Send private message
jonfr
Veteran
Veteran


Joined: 20 Jul 2003
Posts: 1008
Location: Denmark

PostPosted: Mon Jul 15, 2013 2:35 pm    Post subject: Reply with quote

You seems to be running newer version the I am using.
Back to top
View user's profile Send private message
wimvandorst
n00b
n00b


Joined: 31 Dec 2003
Posts: 17
Location: the Netherlands

PostPosted: Sat Aug 31, 2013 3:39 pm    Post subject: Reply with quote

deniss wrote:
And I don't have any nsplugin installed at this point anyway, so switching over to icedtea was as simple as:
Code:
# java-config --list-available-vms
# java-config --set-system-vm icedtea-bin-6
# emerge -C sun-jdk

Excellent. This was absolutely helpful, as I was in the same situation, AND this totally solved my need for Java (to create Garmin maps with mkgmap from OSM). Thanks a million.
_________________
--------------------------------------------------------
This sentence have three erors.
Back to top
View user's profile Send private message
jonfr
Veteran
Veteran


Joined: 20 Jul 2003
Posts: 1008
Location: Denmark

PostPosted: Sat Aug 31, 2013 4:27 pm    Post subject: Reply with quote

cwc wrote:
jonfr wrote:
Vuze does not work with oracle-java, at least not version 4.8.1 that is in portage at the moment. Its compile just fails with java 1.7.


vuze works on my system
azzerare ~ # uname -a
Linux azzerare 3.8.13-gentoo #1 SMP Fri May 17 23:32:01 PDT 2013 x86_64 AMD Athlon(tm) 64 Processor 3400+ AuthenticAMD GNU/Linux
azzerare ~ # java -version
java version "1.7.0_25"
Java(TM) SE Runtime Environment (build 1.7.0_25-b15)
Java HotSpot(TM) 64-Bit Server VM (build 23.25-b01, mixed mode)

[url]
http://96.41.211.168/images/vuze.png
[/url]


I found my issue. There was a dead symlink in the system (home folder). Once I removed it everything worked properly.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Portage & Programming All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum