[IdPv3] Targeting Java 7

[Etienne Dysli]

On 25/10/11 23:03, Brent Putman wrote:
> They also seem to have actually bumped the version of the subversion
> package from 1.4.* to 1.6.*, which I was a little surprised to see so
> late in the release cycle.

I confirm the Subversion change. I installed our group's svn server
manually with 1.6 because I didn't want 1.4 and was also surprised to
find version 1.6 later in the distribution.

I've only used Sun's JVM for running the IdP and never tried OpenJDK
(despite it being the default on my workstation). From my point of view
(Ubuntu 10.04), I get security updates for Oracle JDK 6 from Canonical
but not so much for OpenJDK. Since these two are essentially the same
code base, I'd guess they have the same vulnerabilities... but it looks
like either OpenJDK is not patched or Canonical's support is lacking.

Regards,
  Etienne

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 554 bytes
Desc: OpenPGP digital signature
Url : http://shibboleth.net/pipermail/dev/attachments/20111027/c1e41958/attachment.bin