On May 8, 2013, at 7:07 AM, Andrew Hughes <gnu.and...@redhat.com> wrote: > ----- Original Message ----- >> On 4/30/13 6:50 PM, Kurt Miller wrote: >>> The 7u source bundle [1] is quite outdated now (7u6 Aug 2012). Would it be >>> possible to get it updated to 7u21? This bundle is helpful to bsd-port >>> where we download the 7u source bundle and then apply our changes from >>> bsd-port to this. >> >> I'd expect that an updated bundle would be published for 7u40. I think that >> would be a better starting point, if we started doing that, then starting >> with 7u6 now and cumulatively applying past patches.
I'm confused. I figured it would just take pulling jdk7u or jdk7u-dev by a tag and creating a tarball of the result and updating the source bundle page. Am I missing something? >> Whether and how to start doing that is another question, though. >> > > The main issue with that is that it means the latest 7u source bundle will > be insecure for over a year. The 7u6 source bundle does not include the > security fixes in u7, u9, u11, u15, u17 or u21. Ack. > If it helps, the BSD project can download the latest IcedTea 2.x release: > > http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/ > > and run: > > $ ./configure ; make download-openjdk > > This will provide tarballs of each of the repositories with all security > fixes without > the need for Mercurial. Thanks. I'll look into it. > > It would actually be nice to have IcedTea support *BSD, but I've never had > chance to look at it. I like the idea of *BSD support in IcedTea. Now that Mac OS X support is in jdk7u, the number of pure BSD patches is more manageable. If bsd-port were merged into jdk7u or 8 first, I think basing our packages off IcedTea would be a fine idea. Keeping *BSD support out of the main line is not sustainable, in my opinion. Kind Regards, -Kurt
