From owner-cvs-all  Fri Jun  1  5:24: 3 2001
Delivered-To: cvs-all@freebsd.org
Received: from kalaid.f2f.com.ua (kalaid.f2f.com.ua [62.149.0.33])
	by hub.freebsd.org (Postfix) with ESMTP
	id 5967B37B423; Fri,  1 Jun 2001 05:23:50 -0700 (PDT)
	(envelope-from sobomax@mail-in.net)
Received: from mail.uic-in.net (root@[212.35.189.4])
	by kalaid.f2f.com.ua (8.11.3/8.11.1) with ESMTP id f51CPBB56979;
	Fri, 1 Jun 2001 15:25:13 +0300 (EEST)
	(envelope-from sobomax@mail-in.net)
Received: from vega.vega.com (das0-l85.uic-in.net [212.35.189.212])
	by mail.uic-in.net (8.11.3/8.11.3) with ESMTP id f51CNgo43093;
	Fri, 1 Jun 2001 15:23:43 +0300 (EEST)
	(envelope-from sobomax@mail-in.net)
Received: from FreeBSD.org (big_brother.vega.com [192.168.1.1])
	by vega.vega.com (8.11.3/8.11.3) with ESMTP id f51CMvl12811;
	Fri, 1 Jun 2001 15:22:57 +0300 (EEST)
	(envelope-from sobomax@FreeBSD.org)
Message-ID: <3B178920.1219CAD4@FreeBSD.org>
Date: Fri, 01 Jun 2001 15:22:56 +0300
From: Maxim Sobolev <sobomax@FreeBSD.ORG>
Organization: Vega International Capital
X-Mailer: Mozilla 4.77 [en] (WinNT; U)
X-Accept-Language: uk,ru,en
MIME-Version: 1.0
To: Kevin Lo <kevlo@FreeBSD.ORG>
Cc: cvs-committers@FreeBSD.ORG, cvs-all@FreeBSD.ORG
Subject: Re: cvs commit: ports/java/linux-jdk13 Makefile distinfo 
 pkg-plist         ports/java/linux-jdk13/files patch-aa patch-ab 
 patch-ac
References: <200106010818.f518IrB90436@freefall.freebsd.org> <3B175E34.5060302@FreeBSD.org>
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 7bit
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

Kevin Lo wrote:

> Maxim Sobolev wrote:
>
> > sobomax     2001/06/01 01:18:53 PDT
> >
> >   Modified files:
> >     java/linux-jdk13     Makefile distinfo pkg-plist
> >     java/linux-jdk13/files patch-aa patch-ab patch-ac
> >   Log:
> >   Undo upgrade to 1.3.1. Unfortunately committer who committed change did not
> >   notice PR submitter's follow-up in which he asked not to do upgrade due to
> >   the bug discovered in this particular version of JDK.
>
> *sigh* Where the bugs are ? Are you the maintainer ?

I only did what original author of the PR asked for.

> As I told you via private email, please back it out and add the MESSAGE:
>
> This binary linux release of the Sun JDK may be
> subject to serveral security vulnerabilities that we cannot
> correct. More information on those as well as other known
> Java vulnerabilities can be found at:
> http://java.sun.com/sfaq/chronology.html

I'm still not convinced that it is the Right Way [tm] to go. What makes this
upgrade so important that we need to tolerate known securities flaws in it?

-Maxim

> Thanks!!
>
> >   Submitted by:       Ernst de Haan <ernst@jollem.com>
> >
> >   Revision  Changes     Path
> >   1.6       +9 -10      ports/java/linux-jdk13/Makefile
> >   1.4       +1 -1       ports/java/linux-jdk13/distinfo
> >   1.6       +1178 -959  ports/java/linux-jdk13/pkg-plist
> >   1.3       +7 -7       ports/java/linux-jdk13/files/patch-aa
> >   1.3       +7 -7       ports/java/linux-jdk13/files/patch-ab
> >   1.3       +115 -67    ports/java/linux-jdk13/files/patch-ac
> >





To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message