From owner-freebsd-java@freebsd.org Mon Jul 13 05:16:33 2015 Return-Path: Delivered-To: freebsd-java@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B444699B6E5 for ; Mon, 13 Jul 2015 05:16:33 +0000 (UTC) (envelope-from matthias@petermann-it.de) Received: from d2ux.org (static.140.151.9.5.clients.your-server.de [5.9.151.140]) by mx1.freebsd.org (Postfix) with ESMTP id 77A4C126B for ; Mon, 13 Jul 2015 05:16:32 +0000 (UTC) (envelope-from matthias@petermann-it.de) Received: from d2ux.org (unknown [10.0.0.4]) by d2ux.org (Postfix) with ESMTP id 4B4CB1FE448 for ; Mon, 13 Jul 2015 07:09:03 +0200 (CEST) Received: from d2ux.org ([10.0.0.4]) by d2ux.org (d2ux.org [10.0.0.4]) (amavisd-new, port 10024) with ESMTP id wBhd5N29TVtv for ; Mon, 13 Jul 2015 07:09:02 +0200 (CEST) Received: from nb1.local (p54B7E9FB.dip0.t-ipconnect.de [84.183.233.251]) by d2ux.org (Postfix) with ESMTPSA id B648F1FD73E for ; Mon, 13 Jul 2015 07:09:02 +0200 (CEST) Message-ID: <55A347C4.5060302@petermann-it.de> Date: Mon, 13 Jul 2015 07:08:20 +0200 From: Matthias Petermann User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.7.0 MIME-Version: 1.0 To: freebsd-java@freebsd.org Subject: Re: Eradication of old java References: <1436722739.2838428.321692425.3A1ABDF2@webmail.messagingengine.com> <55A2BB79.6030907@delphij.net> <1436729497.3932791.321743777.380D37FD@webmail.messagingengine.com> In-Reply-To: <1436729497.3932791.321743777.380D37FD@webmail.messagingengine.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-java@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Porting Java to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Jul 2015 05:16:33 -0000 Hello, On 12.07.2015 21:31, Mark Felder wrote: > > On Sun, Jul 12, 2015, at 14:09, Xin Li wrote: >> On 7/12/15 10:38, Mark Felder wrote: >>> How long before we start to eradicate old java from the ports tree? >>> I'm actually in the process of updating a couple ports of mine to >>> require Java 1.8 now that it is supported, vs 1.6 as users >>> currently are being required to use. >>> >>> Java 6 was EoL last year, Java 7 in April this year. >>> >>> I'm considering doing a search of the ports tree to gather some >>> info and see how many can just have the java requirement bumped. >> I think we should move this discussion to -java@ and/or maintainers -- >> there is no known security issues and it's better to give it more >> public exposure. >> >> My suggestion would be to deprecate both Java 6 and 7 now and remove >> them after a few (3?) months if there is nobody volunteering to >> maintain them. >> >> (IIRC Java 6 have some security settings that e.g. IPMI console >> applications require, but I doubt if FreeBSD users actually use these >> because such applications usually ships with some native binary blobs) >> > Is Java 6 and 7 still receiving updates through OpenJDK upstream? As far > as I'm aware they are not, so the next batch of CVEs that come out put > those users in a bad position. > > Can java@ team provide any details? It looks like RedHat had taken over stewardship for OpenJDK 6 [1]and OpenJDK 7 [2]. I did not find a road map there but it can be assumed that they support it until EOL of their enterprise Linux distributions RHEL 5 (OpenJDK is the default Java there) and RHEL 6. Would be interesting to find out where updated sources are available (and if they maintain the original sources or provide source code patches or binary patches only?). Best regards, Matthias [1] http://www.redhat.com/en/about/press-releases/red-hat-reinforces-java-commitment-and-assumes-leadership-openjdk-6-community [2] http://www.redhat.com/en/about/press-releases/stewardship-openjdk-7-project-shifts-red-hat