Impact of java security problems on LO?

With all the news about Java’s security problems and the recommendation to remove it, I’m worried about the viability of LO. I believe that everything in LO will work without Java, except for Base. Can Base work without Java? Is there an alternative to Oracle’s Java that will work with LO?

I second this question - I’m still using Java 1.6.0 because of the way Java updates are handled by LO. It would be great if Base worked without it!

It’s also possible to just remove the browser plugin and keep Java itself. That does not affect LibreOffice and keeps people protected while browsing the web.

The main problem are Java bugs affected by using internet with browser. You can disable Java in your browser (I did it) and have no big security risk in LibreOffice. How to disable Java in browser: https://www.java.com/en/download/help/disable_browser.xml

Hi @klompen,

I believe that Base still requires java for a few things:

  • The embedded HSQLDB engine (and Base files with embedded databases)
  • Some Wizards
  • Some kind of form/report thing ? (vague memory of another, somewhat related, question)

We’re hoping to replace HSQLDB with something that doesn’t have a java dependency (like Firebird DB) and a dev or two have been systematically replacing java wizards with ones in python, so we’re working on this process.

In additiobn to what qubit said: meanwhile, development is ongoing on replacing HSQLDB with Firebird as part of a Google Summer of Code project.

You can enable experimental Base Firebird feature in LibreOffice 4.2 and you can disable after that Java (Firebird engine doesn’t need it) https://www.libreoffice.org/download/4-2-new-features-and-fixes/