Hacker News new | ask | show | jobs
by brohee 3821 days ago
It's not clear if the JRE6 and the JRE7 are impacted (does the JSSE shipped with them support TLS1.2)? If so, pretty worrying as not supported anymore yet widely deployed.
2 comments
pjriot 3821 days ago
I keep seeing this in a lot of places, but Oracle are still releasing JDK6 and JDK7 updates every quarter. AFAIK TLSv1.2 is not supported on 6.

Edit: ah, but only to customers paying for support.

link
newman314 3821 days ago
Java7u79 is supposed to be the last public release. From the SLOTH page, it looks like there might be another release to address this.
link
antod 3820 days ago
OpenJDK7 (not sure about 6) is still getting updates. I think Redhat is sponsoring that.
link