From owner-freebsd-stable@FreeBSD.ORG Tue May 31 19:33:28 2005 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4F68916A41C for ; Tue, 31 May 2005 19:33:28 +0000 (GMT) (envelope-from scottro@nyc.rr.com) Received: from mail.starlofashions.com (mail.starlofashions.com [12.44.50.125]) by mx1.FreeBSD.org (Postfix) with ESMTP id D8B7443D1D for ; Tue, 31 May 2005 19:33:27 +0000 (GMT) (envelope-from scottro@nyc.rr.com) Received: from uws1.starlofashions.com ([192.168.8.230]) by mail.starlofashions.com (8.9.3/8.9.3) with SMTP id PAA15109 for ; Tue, 31 May 2005 15:33:26 -0400 Received: by uws1.starlofashions.com (sSMTP sendmail emulation); Tue, 31 May 2005 15:33:26 -0400 Date: Tue, 31 May 2005 15:33:26 -0400 From: Scott Robbins To: freebsd-stable@freebsd.org Message-ID: <20050531193326.GC80045@uws1.starlofashions.com> Mail-Followup-To: freebsd-stable@freebsd.org References: <20050531120300.ED2DD16A41C@hub.freebsd.org> <1117567320.3912.5.camel@jayton.plus.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii; x-action=pgp-signed Content-Disposition: inline In-Reply-To: <1117567320.3912.5.camel@jayton.plus.com> User-Agent: Mutt/1.5.9i Subject: Re: jdk security vuln? X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 May 2005 19:33:28 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tue, May 31, 2005 at 08:22:00PM +0100, Jayton Garnett wrote: > Hello, > > I have recently installed freebsd 5.4 and tried many times to install > the native freebsd jdk (1.4 & 1.5) and wont install as there is a > security vulnerability in the linux jdk's and other jdk's. > > How do I go about compiling these now? I only need it for openoffice and > unfortunately there are no packages for openoffice and dont want to > install it without java as i am not sure what the out come will be :-s You should be able to install openoffice with make -DWITHOUT_JAVA install clean (However, I think openoffice has its own vulnerabilities, but that might only be the devel version.) To override the vulnerability (hopefully, you have examined what it is and decided you can live with it) do make -DDISABLE_VULNERABILITIES install clean However, if you install native java-1.4, note that you will have to install linux-sun-jdk14 first. That one has a pkg-message that you should read before starting the whole thing. I have a page that briefly covers it at http://home.nyc.rr.com/computertaijutsu/FreeBSD5x.html It doesn't go into all the details of installing java, but gives a few of the problems, letting you know what to expect. (Though I don't cover the vulnerability issue, that happened later) :) - -- Scott GPG KeyID EB3467D6 ( 1B848 077D 66F6 9DB0 FDC2 A409 FA54 D575 EB34 67D6) gpg --keyserver pgp.mit.edu --recv-keys EB3467D6 Willow: I knew it! I knew it! Well, not in the sense of having the slightest idea, but I knew there was something I didn't know. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (FreeBSD) iD8DBQFCnLwG+lTVdes0Z9YRAjEGAKCytBloOqp9FIRqdYb2VBdC+WJObwCgpJsq iWPFH3M0tLQ51poVgiEZCyQ= =Uk5x -----END PGP SIGNATURE-----