Delivering packages every day = good. Only stop at the the places you need to.
Delivering letters and junk mail to every single mailbox on Saturday = bad. No extra revenue, and those letters can wait until Monday.
It is required for legal notices and the court system. Unless you are suggesting a national email system...
So I found out from our enterprise group that JRE 6u31 will get pushed out to all the workstations later in April. I guess we either aren't that alarmed by our exposure to this vector or we just found out about how dangerous it is and this is the soonest week available that doesn't have other M$, Adobe or Symantec junk pushing.
Either way I think Mozilla jumped the gun a little bit, this update must have just come out.
Try late February.
And it's impossible to find any dates on the Java websites or release notes in my 10 minutes of looking. Then it was lunch time.
I didn't see that SE 6 and SE 5 patches had been released as well, and mistook the wording of TFA to imply that one HAD to update all previous versions of Java to 7u3. That just wouldn't fly in an Enterprise without testing.
I'd like to correct myself, 6u31 has been made available - it just isn't updating automatically yet. We might be testing it internally before beginning the workstation push. Either way I think Mozilla jumped the gun a little bit, this update must have just come out.
So there is EXACTLY ONE version of Java that is usable: 7u3. There is NO PATCHED version of jre6 or jdk6 that is available for our 80,000+ workstations managed by Tivoli that have jre6 installed. Upgrading to 7 requires going through Field Certification of months of application compatibility checking.
Not to mention the servers that have jdk6 installed to a specific path, jdk7 would go in a different path and require changes to configuration files and regression testing. This is a 2-3 month process usually rolled into other development processes and doesn't just drop on the datacenter in one day. I think at least five departments would be involved in getting this change implemented.
No, Mozilla should be forcing this on Oracle to release a patched and updated 6u31 that can be automatically pushed to all machines, then wait two weeks and drop the hammer on anyone left behind.