Java fixes to be aware of

[Cantor, Scott]

A couple of bugs fixed in the last round of Java updates was noted on the Xerces list:

https://bugzilla.redhat.com/show_bug.cgi?id=1273638
https://bugzilla.redhat.com/show_bug.cgi?id=1273637


DOS attacks are pretty much unstoppable at this point, but I figured it was worth noting. These fixes aren't available in Oracle's Java 7 without paying, so that's probably an argument for using OpenJDK if you must keep using Java 7 at this point, my opinions about it notwithstanding.


We already treat Xerces as an insecure option with V2 (and don't talk about it for V3), but if you were still using that with V2, it's likely vulnerable to the same issues.

-- Scott