From owner-freebsd-security@freebsd.org Sat Dec 12 19:33:21 2015 Return-Path: Delivered-To: freebsd-security@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BEBCAA142EA; Sat, 12 Dec 2015 19:33:21 +0000 (UTC) (envelope-from rsimmons0@gmail.com) Received: from mail-qg0-x22c.google.com (mail-qg0-x22c.google.com [IPv6:2607:f8b0:400d:c04::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 7A16E11A1; Sat, 12 Dec 2015 19:33:21 +0000 (UTC) (envelope-from rsimmons0@gmail.com) Received: by qgev16 with SMTP id v16so282883qge.0; Sat, 12 Dec 2015 11:33:20 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=fGWVjYyu3HEWshXoSSZ49OnGbsgzQihVDWmMkvjA0CE=; b=MZtUZh6j0BjOUPixai7IFM6IBxB86U0N+IlZIVlS3xQugw/DGg4d44vDU2gksdVyOe AwAoHrzKLY9AvGsgrssdGs5B/Gq28aErRNQN0jO8U8NdYkO9Ed8p+0zND2c6Vc1q0zq1 QDCtxcGfwHPXH/FkleMUAJ5TY+QZPuHCeuJaB0xqbG7pDh+5GNWHSNHP4TjPeqRlkPYu QxsdGcE26VNbnKDfg7vJrOYDrwlRfIM6balI0uX4CIeCL7VL8zX3C+L6If6cqAksOvtj qBIfsRsOSWD8iA5vSOpqE8BqZ2ZZOEQQNIKFoW+IZZTHOneSTtkwZM36hwcL2Bf9V6CI o45w== MIME-Version: 1.0 X-Received: by 10.140.94.201 with SMTP id g67mr32200302qge.43.1449948800587; Sat, 12 Dec 2015 11:33:20 -0800 (PST) Received: by 10.140.32.101 with HTTP; Sat, 12 Dec 2015 11:33:20 -0800 (PST) In-Reply-To: <20151117133552.GA37538@misty.eyesbeyond.com> References: <1447601433.2163074.440262121.5DEBCEDD@webmail.messagingengine.com> <1447682799.243430.441054785.7914EFBA@webmail.messagingengine.com> <1447685844.882362.441101225.09D0492D@webmail.messagingengine.com> <564A33F0.9010902@FreeBSD.org> <564A353B.3040102@FreeBSD.org> <20151117133552.GA37538@misty.eyesbeyond.com> Date: Sat, 12 Dec 2015 14:33:20 -0500 Message-ID: Subject: Re: java/openjdk8 and jre From: Robert Simmons To: Greg Lewis Cc: Jung-uk Kim , Mark Felder , freebsd-security@freebsd.org, "ports-secteam@freebsd.org" , java@freebsd.org, Greg Lewis Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Dec 2015 19:33:21 -0000 Hi, It looks like there is a holdup to pushing out u66. In the mean time, can someone mark u60 vulnerable, please? On Tue, Nov 17, 2015 at 8:35 AM, Greg Lewis wrote: > On Mon, Nov 16, 2015 at 02:57:47PM -0500, Jung-uk Kim wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA256 > > > > On 11/16/15 02:52 PM, Jung-uk Kim wrote: > > > Patches for FreeBSD ports tree are maintained by glewis and it is > > > directly generated from public Mercurial, AFAIK. > > > > > > http://hg.openjdk.java.net/jdk8u/jdk8u > > > > and its modules: > > > > http://hg.openjdk.java.net/jdk8u/jdk8u/corba > > http://hg.openjdk.java.net/jdk8u/jdk8u/hotspot > > http://hg.openjdk.java.net/jdk8u/jdk8u/jaxp > > http://hg.openjdk.java.net/jdk8u/jdk8u/jaxws > > http://hg.openjdk.java.net/jdk8u/jdk8u/jdk > > http://hg.openjdk.java.net/jdk8u/jdk8u/langtools > > http://hg.openjdk.java.net/jdk8u/jdk8u/nashorn > > That is correct. I'm a little behind since my diff generating script > didn't cope with 8u66 terribly well. I'll see if I can generate a > good diff for it today. > > -- > Greg Lewis Email : glewis@eyesbeyond.com > Eyes Beyond Web : http://www.eyesbeyond.com > Information Technology FreeBSD : glewis@FreeBSD.org >