Reporting security flaws for OpenJDK 6

Oracle has announced that it no longer provides public updates to their proprietary Oracle Java SE 6, as of February 2013. These updates, which may include security patches, are now only available to users of Oracle Java SE 6 who have a commercial support agreement with Oracle. Users who have a need for support on Java SE 6 and are not willing to consider commercial support from Oracle have another choice.

Security flaws for OpenJDK 6

Red Hat recently assumed a leadership role for the OpenJDK 6 project. OpenJDK is an open source and community supported implementation of the Java SE specification. Red Hat maintains its role in setting the future direction for the OpenJDK project as an active board member, represented by Red Hat’s long-time Java technical lead, Andrew Haley. OpenJDK 6 will continue to receive security fixes with the help of Red Hat’s stewardship and collaboration with the larger OpenJDK community.

Security flaws for OpenJDK 6 | Security Blog