Johnny Hughes wrote: > On 03/05/2013 12:49 PM, m.roth at 5-cent.us wrote: >> Johnny Hughes wrote: >>> On 03/05/2013 11:51 AM, m.roth at 5-cent.us wrote: >>>> I see there's a release today or so from Oracle of a new zero-day >>>> vulnerability. Any idea how soon we'll have an update? >>>> >>>> <https://threatpost.com/en_us/blogs/oracle-rushes-emergency-java-update-patch-mcrat-vulnerabilities-030413> >>>> >>> As soon as redhat releases one? >> Figured that - just wondered if y'all had heard anything. >> >> For that matter, I tried following the CSV, and can't find more info on >> the NIST site - trying to figure out if it *only* affects Oracle's java, >> or openjdk also. >> > > It impacts both: > > https://bugzilla.redhat.com/show_bug.cgi?id=917553 I'd found that in googling, but it only mentioned Oracle. Thanks, Johnny, now I can report that to my manager. mark