Electronics & Programming

develissimo

Open Source electronics development and programming

  • You are not logged in.
  • Root
  • » Java
  • » OpenJDK / default JDK for squeeze / issues on mips / open security issues for lenny [RSS Feed]

#1 July 29, 2010 01:03:12

Matthias K.
Registered: 2009-11-02
Reputation: +  0  -
Profile   Send e-mail  

OpenJDK / default JDK for squeeze / issues on mips / open security issues for lenny


OpenJDK was just uploaded to unstable, based on the IcedTea6-1.8.1 release .This version addresses some security issues, and this version should be shippedwith squeeze. The package should build on all architectures except on mips.openjdk-6 on mips doesn't seem to be good enough to build itself, and apparentlygcj isn't able to build openjdk-6 on mips anymore. Having spent some time tobuild it on gabrielli.d.o I don't see any obvious issues with the build and Idon't intend to spend more time to fix the mips issues in the time frame forsqueeze. Unless a mips porter wants to address these build issues, I suggestthat the default-{jre,jdk} packages for mips point to gcj, although it's not themost viable choice. An option would be the backport of the mips hotspot build toopenjdk-6 .openjdk-6 in stable didn't see any security updates for more than a year. Idon't plan to provide updates myself. Is the security team interested in fixingthese, or anybody else? Or does everybody see openjdk as an alibi for Debian tobuild things and then use the sun-java packages from non-free? I see that thereare a few bug reports open requesting adding CVE numbers to the debian changelog, , . If this prevents the security team on fixing outstanding realissues, I'd be happy to apply a patch for the changelog, just send it. The mainproblem seems to be that the CVE numbers are not known before preparing anupdate and nobody is willing to track these.For those who are interested in an openjdk-6 update for stable, I did prepare anupdate for some architectures atdebhttp://people.debian.org/~doko/archivestable/I don't plan any updates for unstable/testing beyond 6b18. 6b20 is available inexperimental, but disables the ARM assembler interpreter (which is 3-5x timesfaster than the plain zero build), and 6b20 doesn't build anymore on sparc.Matthias

http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2010-July/009814.htmlhttp://lists.debian.org/debian-mips/2010/04/msg00003.htmlhttp://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560908http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566769http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566770--
To UNSUBSCRIBE, email to debian-java-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive:http://lists.debian.org/4c50c0f9.5000...@ubuntu.com

Offline

#2 Aug. 6, 2010 03:16:30

Tom M.
Registered: 2009-11-02
Reputation: +  0  -
Profile   Send e-mail  

OpenJDK / default JDK for squeeze / issues on mips / open security issues for lenny


On 07/28/2010 06:44 PM, Matthias Klose wrote:
> OpenJDK was just uploaded to unstable, based on the IcedTea6-1.8.1
> release . This version addresses some security issues,
> and this version should be shipped with squeeze
A group of Debian Java developers met tonight and agreed that
we would not advocate OpenJDK changes for squeeze.

> openjdk-6 in stable didn't see any security updates for more than a
> year. I don't plan to provide updates myself. Is the security team
> interested in fixing these, or anybody else?
And we agreed that openjdk-6 is what we want to use as default-jre
on all platforms post squeeze. For the reasons you mention
this will be a fairly substantial undertaking (does not
build on mips sparc sparc64 hppa).

We understand that maintaining openjdk-6 is more than packaging,
it involves bug triage and security fixes as well.
We welcome your critical feedback as we continue work on OpenJDK.

Danke!

--Tom


--
To UNSUBSCRIBE, email to debian-java-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive:http://lists.debian.org/4c5b7060.2070...@info9.net

Offline

#3 Aug. 8, 2010 16:40:35

Florian W.
Registered: 2009-11-02
Reputation: +  0  -
Profile   Send e-mail  

OpenJDK / default JDK for squeeze / issues on mips / open security issues for lenny


* Matthias Klose:

> Or does everybody see openjdk as an alibi for Debian to build things
> and then use the sun-java packages from non-free?

I know folks who use it in production, admittedly with compiler
excludes to work around some C2 bugs.

> For those who are interested in an openjdk-6 update for stable, I did
> prepare an update for some architectures at
>
> debhttp://people.debian.org/~doko/archivestable/

Cool, it's based on OpenJDK 6b18. However, we can't upload it as-is
because the version number is greater than the one in testing.

What can we do about the lack of mips support?

> I don't plan any updates for unstable/testing beyond 6b18. 6b20 is
> available in experimental, but disables the ARM assembler interpreter
> (which is 3-5x times faster than the plain zero build), and 6b20
> doesn't build anymore on sparc.

If upstream has ceased support for those architectures, should we
really release squeeze with them? I'm pretty sure we we'll have to
upgrade to later versions at one point.


--
To UNSUBSCRIBE, email to debian-java-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive:http://lists.debian.org/87eie9w2o6....@mid.deneb.enyo.de

Offline

#4 Aug. 10, 2010 09:04:59

Philipp K.
Registered: 2009-11-02
Reputation: +  0  -
Profile   Send e-mail  

OpenJDK / default JDK for squeeze / issues on mips / open security issues for lenny


Florian,

On 08/08/2010 11:21 AM, Florian Weimer wrote:Cool, it's based on OpenJDK 6b18. However, we can't upload it as-is
because the version number is greater than the one in testing.apart from the fact that this could of course be solved by an upload tot-p-u in the worst case, it's the case that packages fromproposed-updates that are newer than testing at point release time arethen copied into testing.Kind regards,
Philipp Kern


--
To UNSUBSCRIBE, email to debian-java-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive:http://lists.debian.org/4c5fcdb5.30...@debian.org

Offline

#5 Aug. 15, 2010 08:58:16

Florian W.
Registered: 2009-11-02
Reputation: +  0  -
Profile   Send e-mail  

OpenJDK / default JDK for squeeze / issues on mips / open security issues for lenny


* Philipp Kern:

> Florian,
>
> On 08/08/2010 11:21 AM, Florian Weimer wrote:
>> Cool, it's based on OpenJDK 6b18. However, we can't upload it as-is
>> because the version number is greater than the one in testing.
>>
>
> apart from the fact that this could of course be solved by an upload
> to t-p-u in the worst case, it's the case that packages from
> proposed-updates that are newer than testing at point release time are
> then copied into testing.

In this case, we don't want this behavior because the version
currently in testing offers more features than the version which is
about to be uploaded.


--
To UNSUBSCRIBE, email to debian-java-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive:http://lists.debian.org/87zkwos3y6....@mid.deneb.enyo.de

Offline

#6 Aug. 15, 2010 10:34:31

Torsten W.
Registered: 2009-11-02
Reputation: +  0  -
Profile   Send e-mail  

OpenJDK / default JDK for squeeze / issues on mips / open security issues for lenny


Hi,

On Sun, Aug 15, 2010 at 9:57 AM, Florian Weimer <f***@*eneb.enyo.de> wrote:
> * Philipp Kern:
>> On 08/08/2010 11:21 AM, Florian Weimer wrote:
>>> Cool, it's based on OpenJDK 6b18.  However, we can't upload it as-is
>>> because the version number is greater than the one in testing.
>>>
>>
>> apart from the fact that this could of course be solved by an upload
>> to t-p-u in the worst case, it's the case that packages from
>> proposed-updates that are newer than testing at point release time are
>> then copied into testing.
>
> In this case, we don't want this behavior because the version
> currently in testing offers more features than the version which is
> about to be uploaded.

the transition of the unstable package to testing should happen soon.
I've filed #591998 and RM requests for all reverse (Build-)Depends.

Cheers,
Torsten


--
To UNSUBSCRIBE, email to debian-java-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive:http://lists.debian.org/aanlktin-gcq4mtamyitbyda4-lx+qbgsjx43gd28y...@mail.gmail.com

Offline

#7 Dec. 13, 2010 23:19:41

Adam D.
Registered: 2009-11-02
Reputation: +  0  -
Profile   Send e-mail  

OpenJDK / default JDK for squeeze / issues on mips / open security issues for lenny


On Sun, 2010-08-08 at 17:21 +0200, Florian Weimer wrote:
> * Matthias Klose:
> > For those who are interested in an openjdk-6 update for stable, I did
> > prepare an update for some architectures at
> >
> > debhttp://people.debian.org/~doko/archivestable/
>
> Cool, it's based on OpenJDK 6b18. However, we can't upload it as-is
> because the version number is greater than the one in testing.

That's no longer the case, fwiw; testing has 6b18-1.8.2-4.

Regards,

Adam


--
To UNSUBSCRIBE, email to debian-java-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive:http://lists.debian.org/1292282347.30247.998.ca...@hathi.jungle.funky-badger.org

Offline

#8 Dec. 13, 2010 23:42:12

Matthias K.
Registered: 2009-11-02
Reputation: +  0  -
Profile   Send e-mail  

OpenJDK / default JDK for squeeze / issues on mips / open security issues for lenny


On 14.12.2010 00:19, Adam D. Barratt wrote:On Sun, 2010-08-08 at 17:21 +0200, Florian Weimer wrote:* Matthias Klose:For those who are interested in an openjdk-6 update for stable, I did
prepare an update for some architectures at

debhttp://people.debian.org/~doko/archivestable/Cool, it's based on OpenJDK 6b18. However, we can't upload it as-is
because the version number is greater than the one in testing.That's no longer the case, fwiw; testing has 6b18-1.8.2-4.so please use the one from unstable, re-generate the control file on a stablesystem, and re-upload.Matthias


--
To UNSUBSCRIBE, email to debian-java-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive:http://lists.debian.org/4d06aac1.1000...@ubuntu.com

Offline

#9 Dec. 17, 2010 14:23:57

tony m.
Registered: 2009-11-02
Reputation: +  0  -
Profile   Send e-mail  

OpenJDK / default JDK for squeeze / issues on mips / open security issues for lenny


On 12/13/2010 03:22 PM, Matthias Klose wrote:
> On 14.12.2010 00:19, Adam D. Barratt wrote:
>> On Sun, 2010-08-08 at 17:21 +0200, Florian Weimer wrote:
>>> * Matthias Klose:
>>>> For those who are interested in an openjdk-6 update for stable, I did
>>>> prepare an update for some architectures at
>>>>
>>>> debhttp://people.debian.org/~doko/archivestable/
>>>
>>> Cool, it's based on OpenJDK 6b18. However, we can't upload it as-is
>>> because the version number is greater than the one in testing.
>>
>> That's no longer the case, fwiw; testing has 6b18-1.8.2-4.
>
> so please use the one from unstable, re-generate the control file on a
> stable system, and re-upload.
>
> Matthias

Hello Matthias -

I'm able to build the version from unstable fine (it took 530 minutes...
:) I want to make sure I understand what you mean by "re-generate the
control file on a stable system" - this simply means building the
current source package in a clean squeeze chroot, right?

Thank you for your guidance.
tonysignature.ascDescription:OpenPGP digital signature

Attachments:
attachment signature.asc (262 bytes)

Offline

#10 Dec. 17, 2010 14:42:09

Matthias K.
Registered: 2009-11-02
Reputation: +  0  -
Profile   Send e-mail  

OpenJDK / default JDK for squeeze / issues on mips / open security issues for lenny


On 17.12.2010 15:16, tony mancill wrote:On 12/13/2010 03:22 PM, Matthias Klose wrote:On 14.12.2010 00:19, Adam D. Barratt wrote:On Sun, 2010-08-08 at 17:21 +0200, Florian Weimer wrote:* Matthias Klose:For those who are interested in an openjdk-6 update for stable, I did
prepare an update for some architectures at

debhttp://people.debian.org/~doko/archivestable/Cool, it's based on OpenJDK 6b18. However, we can't upload it as-is
because the version number is greater than the one in testing.That's no longer the case, fwiw; testing has 6b18-1.8.2-4.so please use the one from unstable, re-generate the control file on a
stable system, and re-upload.

MatthiasHello Matthias -

I'm able to build the version from unstable fine (it took 530 minutes...
:) I want to make sure I understand what you mean by "re-generate the
control file on a stable system" - this simply means building the
current source package in a clean squeeze chroot, right?before doing this: touch debian/rules && debian/rules debian/control.

Matthias


--
To UNSUBSCRIBE, email to debian-java-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive:http://lists.debian.org/4d0b7291.5010...@ubuntu.com

Offline

  • Root
  • » Java
  • » OpenJDK / default JDK for squeeze / issues on mips / open security issues for lenny [RSS Feed]

Board footer

Moderator control

Enjoy the 20th of October
PoweredBy

The Forums are managed by develissimo stuff members, if you find any issues or misplaced content please help us to fix it. Thank you! Tell us via Contact Options
Leave a Message
Welcome to Develissimo Live Support