From owner-freebsd-java@freebsd.org Mon Jul 13 15:54:09 2015 Return-Path: Delivered-To: freebsd-java@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4DBFD99BE02 for ; Mon, 13 Jul 2015 15:54:09 +0000 (UTC) (envelope-from feld@feld.me) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id 2A60B1E69 for ; Mon, 13 Jul 2015 15:54:09 +0000 (UTC) (envelope-from feld@feld.me) Received: by mailman.ysv.freebsd.org (Postfix) id 293F999BE00; Mon, 13 Jul 2015 15:54:09 +0000 (UTC) Delivered-To: java@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 105A999BDFF for ; Mon, 13 Jul 2015 15:54:09 +0000 (UTC) (envelope-from feld@feld.me) Received: from out2-smtp.messagingengine.com (out2-smtp.messagingengine.com [66.111.4.26]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id D0C8C1E65 for ; Mon, 13 Jul 2015 15:54:08 +0000 (UTC) (envelope-from feld@feld.me) Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 0F43320B0E for ; Mon, 13 Jul 2015 11:54:06 -0400 (EDT) Received: from web3 ([10.202.2.213]) by compute4.internal (MEProxy); Mon, 13 Jul 2015 11:54:07 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=feld.me; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=frcMla6N+8ukEdUjsISaKP6dIlA=; b=Ech+l3 fYH3A0mGOtn4+XcA5Bg+gh+lKCHnPl72as5jJcRLan7Lv2cxu2VJc2odAp93Qw3+ 9RcekJVTuTLx5PzzEq06ICD/ZjCowASsG1RPTqy7SnRyq/Y1wxjIIrPpwna8aiss tSzqk8sApaXDvwCw4jlSCerxysjICj9SfmAJ0= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=frcMla6N+8ukEdU jsISaKP6dIlA=; b=Lju/MOlueqpdyGhqUZLQ+oa4Gy5ocJIQq8qTIa0xnHm38VS 4SghFcsIHk7Xli5N0GvVmQHbIQI2MEK+mEklD/7FrsETFNciaUPDjaM6+LIOKDEY IseoADirbJziaPV9Jtap91eRRO+b/CcldVN9GQ+ytEP+18llIFBohjA4DJVo= Received: by web3.nyi.internal (Postfix, from userid 99) id C6D4D101428; Mon, 13 Jul 2015 11:54:06 -0400 (EDT) Message-Id: <1436802846.1406670.322470913.69B2C944@webmail.messagingengine.com> X-Sasl-Enc: rDLteWhFPujms1JG46rtM6A9NeSv29fOeCz/39KeKhar 1436802846 From: Mark Felder To: "Jung-uk Kim" , Xin Li , ports-secteam@FreeBSD.org Cc: java@freebsd.org MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain X-Mailer: MessagingEngine.com Webmail Interface - ajax-bfc056ae Subject: Re: Eradication of old java Date: Mon, 13 Jul 2015 10:54:06 -0500 In-Reply-To: <55A3DEBF.1070302@FreeBSD.org> References: <1436722739.2838428.321692425.3A1ABDF2@webmail.messagingengine.com> <55A2BB79.6030907@delphij.net> <1436729497.3932791.321743777.380D37FD@webmail.messagingengine.com> <55A3DEBF.1070302@FreeBSD.org> X-BeenThere: freebsd-java@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Porting Java to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Jul 2015 15:54:09 -0000 On Mon, Jul 13, 2015, at 10:52, Jung-uk Kim wrote: > On 07/12/2015 15:31, Mark Felder wrote: > > > > > > On Sun, Jul 12, 2015, at 14:09, Xin Li wrote: > >> > >> On 7/12/15 10:38, Mark Felder wrote: > >>> How long before we start to eradicate old java from the ports > >>> tree? I'm actually in the process of updating a couple ports of > >>> mine to require Java 1.8 now that it is supported, vs 1.6 as > >>> users currently are being required to use. > >>> > >>> Java 6 was EoL last year, Java 7 in April this year. > >>> > >>> I'm considering doing a search of the ports tree to gather > >>> some info and see how many can just have the java requirement > >>> bumped. > >> > >> I think we should move this discussion to -java@ and/or > >> maintainers -- there is no known security issues and it's better > >> to give it more public exposure. > >> > >> My suggestion would be to deprecate both Java 6 and 7 now and > >> remove them after a few (3?) months if there is nobody > >> volunteering to maintain them. > >> > >> (IIRC Java 6 have some security settings that e.g. IPMI console > >> applications require, but I doubt if FreeBSD users actually use > >> these because such applications usually ships with some native > >> binary blobs) > >> > > > > Is Java 6 and 7 still receiving updates through OpenJDK upstream? > > As far as I'm aware they are not, so the next batch of CVEs that > > come out put those users in a bad position. > > > > Can java@ team provide any details? > > Both OpenJDK6 and OpenJDK7 are actively maintained. For example, > there will be OpenJDK6 b36 soon: > > https://java.net/jira/browse/OPENJDK6-60 > > Jung-uk Kim > So it is only Oracle's non-OpenJDK distribution of Java 6 and Java 7 that is ceasing public updates?