How to push security fixes for non-Oracle platforms after CPU fixes?

[Alejandro E Murillo]

On 1/23/2015 1:38 AM, Alejandro E Murillo wrote:
>
> On 1/22/2015 12:27 PM, Alejandro E Murillo wrote:
>>
>> On 1/22/2015 11:17 AM, Seán Coffey wrote:
>>> Volker,
>>>
>>> Given that 8u40 is now in the RDP2 state, we're following the phase 
>>> 2 integration process :
>>> http://openjdk.java.net/projects/jdk8u/phase2/phase2-process.html
>>>
>>> Only maintainers/gatekeepers should integrate to the stabilization 
>>> forests.
>>>
>>> For now, I suggest you proceed to get this fixed in 8u60 
>>> (http://hg.openjdk.java.net/jdk8u/hs-dev/) via the standard hotspot 
>>> integration process. Alejandro (cc'ed) can then help to get this 
>>> requested for inclusion into 8u40 once it's in 8u60 and has had 
>>> nightly testing run etc. 8050807 is now also in JDK 9 forest so you 
>>> can work on both in tandem I guess.
>> Volker, I plan to take a snapshot of jdk8u/hs-dev tomorrow (Friday)
>> please try to get that reviewed and pushed to it by then if possible,
>> so it goes through PIT this weekend.
>>  As Sean indicated we can then try to get it to 8u40, but note
>> that  is kind of late in the release cycle, so the release team is
>> only accepting show stoppers at this point; you will need to
>> provide a major justification for this being added this late.
>>
> it was brought to my attention that since  this is only affecting AIX,
> so we might be able to justify this with the release team, however,
> since that's a security issue,   we might need  special considerations
> as it's not coming through the regular channels  for that  type of 
> changes.
> I'm checking with the release team to see how proceed, so hold on
> until I hear from them
Hi Volker,
We have the OK  to go ahead and get this patch into 8u60
will  get it into 8u40 soon after
thanks
Alejandro
>
> Thanks
> Alejandro
>
>> cheers
>> Alejandro
>>
>>>
>>> regards,
>>> Sean.
>>>
>>> On 21/01/2015 10:47, Volker Simonis wrote:
>>>> Hi,
>>>>
>>>> today, after the release of 8u31 you've pushed the corresponding
>>>> security fixes to jdk8u40 (see
>>>> http://mail.openjdk.java.net/pipermail/jdk8u-dev/2015-January/002910.html). 
>>>>
>>>>
>>>> We have a change which fixes "8050807: Better performing performance
>>>> data handling" on AIX. We had already send this fix to Oracle trough
>>>> our licensee channel, however if was too late to get it into the 8u31.
>>>> Therefore it's now missing from 8u40.
>>>>
>>>> What's the best way of getting this as fast as possible into 8u40 and
>>>> the other 8u repos (8udev, 8u60). As far as I know, changes usually
>>>> flow from jdk9/dev -> jdk8u/dev -> jdk8u/jdk8u40. But in this case
>>>> it's different, because 8050807 hasn't yet been pushed to jdk9.
>>>>
>>>> Can I just send a RFR to the jdk8u-dev list and push it right to 8u40
>>>> myself once I get the approval? It's a hotspot change, but it's
>>>> already reviewed, I'm a jdk8u committer and the change only touches
>>>> aix-specific files?
>>>>
>>>> Thank you and best regards,
>>>> Volker
>>>
>>
>

-- 
Alejandro