From owner-freebsd-java@FreeBSD.ORG Wed Mar 9 17:35:55 2011 Return-Path: Delivered-To: freebsd-java@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0B757106564A for ; Wed, 9 Mar 2011 17:35:55 +0000 (UTC) (envelope-from avg@freebsd.org) Received: from citadel.icyb.net.ua (citadel.icyb.net.ua [212.40.38.140]) by mx1.freebsd.org (Postfix) with ESMTP id 545748FC18 for ; Wed, 9 Mar 2011 17:35:53 +0000 (UTC) Received: from odyssey.starpoint.kiev.ua (alpha-e.starpoint.kiev.ua [212.40.38.101]) by citadel.icyb.net.ua (8.8.8p3/ICyb-2.3exp) with ESMTP id TAA08661; Wed, 09 Mar 2011 19:35:49 +0200 (EET) (envelope-from avg@freebsd.org) Message-ID: <4D77BA75.5030404@freebsd.org> Date: Wed, 09 Mar 2011 19:35:49 +0200 From: Andriy Gapon User-Agent: Mozilla/5.0 (X11; U; FreeBSD amd64; en-US; rv:1.9.2.15) Gecko/20110309 Lightning/1.0b2 Thunderbird/3.1.9 MIME-Version: 1.0 To: Roger Marquis References: <20110309120033.607A71065751@hub.freebsd.org> <20110309172456.BF72A106566B@hub.freebsd.org> In-Reply-To: <20110309172456.BF72A106566B@hub.freebsd.org> X-Enigmail-Version: 1.1.2 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Cc: freebsd-java@freebsd.org Subject: Re: AW: Question Update Java Security Updates X-BeenThere: freebsd-java@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting Java to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Mar 2011 17:35:55 -0000 on 09/03/2011 19:07 Roger Marquis said the following: > Greg Lewis wrote: >>> I'm not an expert in all the java ports, but if I compare the versions of >>> the different ports, then yes, openjdk is the most current java in ports. >> >> Agreed, we should probably switch the default JDK to openjdk6. > > Really, even considering the large number of security issues openjdk has > had and is expected to continue to having for the foreseeable future? > > Sounds like a recipe for pain among FreeBSD default JDK users or at least > those whose primary criteria for a JDK are compatibility and security. Is having very old "official" JDK any better? I don't think we get many (any?) security updates for them lately. -- Andriy Gapon