From owner-cvs-all Fri Jun 1 6:20:51 2001 Delivered-To: cvs-all@freebsd.org Received: from ms12.hinet.net (ms12.hinet.net [168.95.4.12]) by hub.freebsd.org (Postfix) with ESMTP id 70DEF37B424; Fri, 1 Jun 2001 06:20:42 -0700 (PDT) (envelope-from kevlo@FreeBSD.org) Received: from FreeBSD.org (esnsi.com [210.241.235.250] (may be forged)) by ms12.hinet.net (8.8.8/8.8.8) with ESMTP id VAA27012; Fri, 1 Jun 2001 21:20:39 +0800 (CST) Message-ID: <3B1807DA.9A5553F1@FreeBSD.org> Date: Fri, 01 Jun 2001 21:23:39 +0000 From: Kevin Lo X-Mailer: Mozilla 4.76C-CCK-MCD tw [zh_TW] (X11; U; FreeBSD 4.2-20010108-STABLE i386) X-Accept-Language: zh-TW MIME-Version: 1.0 To: Maxim Sobolev Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: ports/java/linux-jdk13 Makefile distinfo pkg-plistports/java/linux-jdk13/files patch-aa patch-ab patch-ac References: Content-Type: text/plain; charset=big5 Content-Transfer-Encoding: 7bit Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Maxim Sobolev wrote: > Kevin Lo wrote: > > > Maxim Sobolev wrote: > > > > > sobomax 2001/06/01 01:18:53 PDT > > > > > > Modified files: > > > java/linux-jdk13 Makefile distinfo pkg-plist > > > java/linux-jdk13/files patch-aa patch-ab patch-ac > > > Log: > > > Undo upgrade to 1.3.1. Unfortunately committer who committed change did not > > > notice PR submitter's follow-up in which he asked not to do upgrade due to > > > the bug discovered in this particular version of JDK. > > > > *sigh* Where the bugs are ? Are you the maintainer ? > > I only did what original author of the PR asked for. If the submitter is wrong, should I be wrong, too? If the submitter said that the foo port has bugs, you can fix them even though you're not the maintainer? Ok, let me ask you a simple question: HOW DO YOU KNOW THAT THE SUBMITTER IS RIGHT IN THIS CASE??? Did you find any bug? Did you test it? Obviously, you didn't. As you said, you only did what original author of the PR asked for. Very good reason, isn't it? > > As I told you via private email, please back it out and add the MESSAGE: > > > > This binary linux release of the Sun JDK may be > > subject to serveral security vulnerabilities that we cannot > > correct. More information on those as well as other known > > Java vulnerabilities can be found at: > > http://java.sun.com/sfaq/chronology.html > > I'm still not convinced that it is the Right Way [tm] to go. What makes this > upgrade so important that we need to tolerate known securities flaws in it? Did you go to that url and see what bugs for 1.3.1??? AGAIN, you didn't!! Please back it out!!!!! Should I tell you one more time?? > -Maxim - Kevin To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message