----- Original Message ----- > On May 8, 2013, at 7:07 AM, Andrew Hughes <gnu.and...@redhat.com> wrote: > > ----- Original Message ----- > >> On 4/30/13 6:50 PM, Kurt Miller wrote: > >>> The 7u source bundle [1] is quite outdated now (7u6 Aug 2012). Would it > >>> be > >>> possible to get it updated to 7u21? This bundle is helpful to bsd-port > >>> where we download the 7u source bundle and then apply our changes from > >>> bsd-port to this. > >> > >> I'd expect that an updated bundle would be published for 7u40. I think > >> that > >> would be a better starting point, if we started doing that, then starting > >> with 7u6 now and cumulatively applying past patches. > > I'm confused. I figured it would just take pulling jdk7u or jdk7u-dev by a > tag and creating a tarball of the result and updating the source bundle > page. Am I missing something? >
That's my understanding too, FWIW. > >> Whether and how to start doing that is another question, though. > >> > > > > The main issue with that is that it means the latest 7u source bundle will > > be insecure for over a year. The 7u6 source bundle does not include the > > security fixes in u7, u9, u11, u15, u17 or u21. > > Ack. > > > If it helps, the BSD project can download the latest IcedTea 2.x release: > > > > http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/ > > > > and run: > > > > $ ./configure ; make download-openjdk > > > > This will provide tarballs of each of the repositories with all security > > fixes without > > the need for Mercurial. > > Thanks. I'll look into it. > > > > > It would actually be nice to have IcedTea support *BSD, but I've never had > > chance to look at it. > > I like the idea of *BSD support in IcedTea. Now that Mac OS X support is in > jdk7u, the number of pure BSD patches is more manageable. If bsd-port were > merged into jdk7u or 8 first, I think basing our packages off IcedTea would > be a fine idea. Keeping *BSD support out of the main line is not > sustainable, in my opinion. Let me know if there's anything I can do to help get them in. I'm a reviewer on both 7u and 8. > > Kind Regards, > -Kurt -- Andrew :) Free Java Software Engineer Red Hat, Inc. (http://www.redhat.com) PGP Key: 248BDC07 (https://keys.indymedia.org/) Fingerprint = EC5A 1F5E C0AD 1D15 8F1F 8F91 3B96 A578 248B DC07
