7u Source Bundle

[Kurt Miller]

On May 8, 2013, at 7:07 AM, Andrew Hughes <gnu.andrew at redhat.com> wrote:
> ----- Original Message -----
>> On 4/30/13 6:50 PM, Kurt Miller wrote:
>>> The 7u source bundle [1] is quite outdated now (7u6 Aug 2012). Would it be
>>> possible to get it updated to 7u21? This bundle is helpful to bsd-port
>>> where we download the 7u source bundle and then apply our changes from
>>> bsd-port to this.
>> 
>> I'd expect that an updated bundle would be published for 7u40. I think that
>> would be a better starting point, if we started doing that, then starting
>> with 7u6 now and cumulatively applying past patches.

I'm confused. I figured it would just take pulling jdk7u or jdk7u-dev by a tag and creating a tarball of the result and updating the source bundle page. Am I missing something?

>> Whether and how to start doing that is another question, though.
>> 
> 
> The main issue with that is that it means the latest 7u source bundle will
> be insecure for over a year.  The 7u6 source bundle does not include the
> security fixes in u7, u9, u11, u15, u17 or u21.

Ack.

> If it helps, the BSD project can download the latest IcedTea 2.x release:
> 
> http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/
> 
> and run:
> 
> $ ./configure ; make download-openjdk
> 
> This will provide tarballs of each of the repositories with all security fixes without
> the need for Mercurial.

Thanks. I'll look into it.

> 
> It would actually be nice to have IcedTea support *BSD, but I've never had chance to look at it.

I like the idea of *BSD support in IcedTea. Now that Mac OS X support is in jdk7u, the number of pure BSD patches is more manageable. If bsd-port were merged into jdk7u or 8 first, I think basing our packages off IcedTea would be a fine idea. Keeping *BSD support out of the main line is not sustainable, in my opinion.

Kind Regards,
-Kurt