Security Patches

[Erik Trimble]

Deepak Mathews wrote:
> Hi Tim,
>
> I am new to this.
> Sorry for bothering you.
>
> Is there a support channel for OpenJDK?
>  If a fix is available for SunJDK, is it available for OpenJDK too?
>
> Sorry, I couldn't find any support channel on that page.
>
> Thanks.
> Deepak
>
>   
(note, I'm talking here about OpenJDK 7 and it's relative, SunJDK 7)


SunJDK is based on the code in the OpenJDK repositories. We add a few 
things that can't be made public.  In addition, there are some binary 
plugs which we can't make available as source code.

So, from your perspective, SunJDK is a SUPERSET of OpenJDK - it contains 
ALL the code in OpenJDK.
OpenJDK now constitutes about 95% of the codebase for SunJDK.   Fixes 
for common code go into the OpenJDK repositories, and are thus fixed at 
the same time. Only security issues which affect the  less than 5% of 
the closed code in SunJDK aren't immediately available for OpenJDK.

Strictly speaking, since OpenJDK 7/SunJDK 7 isn't a released product 
yet, there is no "official" support available.  This list consists of 
the best available information about OpenJDK development.

-- 
Erik Trimble
Java System Support
Mailstop:  usca22-123
Phone:  x17195
Santa Clara, CA
Timezone: US/Pacific (GMT-0800)