7u Source Bundle

[Andrew Hughes]

----- Original Message -----
> On May 8, 2013, at 7:07 AM, Andrew Hughes <gnu.andrew at redhat.com> wrote:
> > ----- Original Message -----
> >> On 4/30/13 6:50 PM, Kurt Miller wrote:
> >>> The 7u source bundle [1] is quite outdated now (7u6 Aug 2012). Would it
> >>> be
> >>> possible to get it updated to 7u21? This bundle is helpful to bsd-port
> >>> where we download the 7u source bundle and then apply our changes from
> >>> bsd-port to this.
> >> 
> >> I'd expect that an updated bundle would be published for 7u40. I think
> >> that
> >> would be a better starting point, if we started doing that, then starting
> >> with 7u6 now and cumulatively applying past patches.
> 
> I'm confused. I figured it would just take pulling jdk7u or jdk7u-dev by a
> tag and creating a tarball of the result and updating the source bundle
> page. Am I missing something?
> 

That's my understanding too, FWIW.

> >> Whether and how to start doing that is another question, though.
> >> 
> > 
> > The main issue with that is that it means the latest 7u source bundle will
> > be insecure for over a year.  The 7u6 source bundle does not include the
> > security fixes in u7, u9, u11, u15, u17 or u21.
> 
> Ack.
> 
> > If it helps, the BSD project can download the latest IcedTea 2.x release:
> > 
> > http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/
> > 
> > and run:
> > 
> > $ ./configure ; make download-openjdk
> > 
> > This will provide tarballs of each of the repositories with all security
> > fixes without
> > the need for Mercurial.
> 
> Thanks. I'll look into it.
> 
> > 
> > It would actually be nice to have IcedTea support *BSD, but I've never had
> > chance to look at it.
> 
> I like the idea of *BSD support in IcedTea. Now that Mac OS X support is in
> jdk7u, the number of pure BSD patches is more manageable. If bsd-port were
> merged into jdk7u or 8 first, I think basing our packages off IcedTea would
> be a fine idea. Keeping *BSD support out of the main line is not
> sustainable, in my opinion.

Let me know if there's anything I can do to help get them in.  I'm a reviewer
on both 7u and 8.

> 
> Kind Regards,
> -Kurt

-- 
Andrew :)

Free Java Software Engineer
Red Hat, Inc. (http://www.redhat.com)

PGP Key: 248BDC07 (https://keys.indymedia.org/)
Fingerprint = EC5A 1F5E C0AD 1D15 8F1F  8F91 3B96 A578 248B DC07