Where is the repository for jdk9 updates?
Volker Simonis
volker.simonis at gmail.com
Thu Oct 26 15:58:36 UTC 2017
On Wed, Oct 25, 2017 at 8:05 PM, Mario Torre
<neugens.limasoftware at gmail.com> wrote:
> 2017-10-25 19:27 GMT+02:00 dalibor topic <dalibor.topic at oracle.com>:
>> For better or worse, the Project infrastructure setup cycle isn't an atomic
>> operation. For example, while a repo is here, it can't be pushed to yet,
>> since the census hasn't been updated.
>>
>> I understand that everyone is eager to get started, so I hope that the
>> putting the final pieces of infrastructure in place won't take much longer
>> than necessary.
>
> It's not about being eager to start, downstream builds are diverging
> since we don't have a source code to base 9.0.1 builds on. Given that
> this code is security related, it means that many downstream
> distributions that didn't have access to the errata drop can't
> release, it's a serious issue[1].
>
> We should at least have an ad interim 9u to call home.
>
I totally agree and just hope that this doesn't get the default
behavior for the upcoming releases.
Regards,
Volker
> Cheers,
> Mario
>
> [1] To mitigate the security impact for downstream you could at least
> have a source drop that matches the binary release, I didn't see
> anything like that though.
>
> --
> pgp key: http://subkeys.pgp.net/ PGP Key ID: 80F240CF
> Fingerprint: BA39 9666 94EC 8B73 27FA FC7C 4086 63E3 80F2 40CF
>
> Java Champion - Blog: http://neugens.wordpress.com - Twitter: @neugens
> Proud GNU Classpath developer: http://www.classpath.org/
> OpenJDK: http://openjdk.java.net/projects/caciocavallo/
>
> Please, support open standards:
> http://endsoftpatents.org/
More information about the jdk9-dev
mailing list