7u Source Bundle

Kurt Miller kurt at intricatesoftware.com
Wed May 8 21:14:01 PDT 2013

On May 8, 2013, at 7:07 AM, Andrew Hughes <gnu.andrew at redhat.com> wrote:
> ----- Original Message -----
>> On 4/30/13 6:50 PM, Kurt Miller wrote:
>>> The 7u source bundle [1] is quite outdated now (7u6 Aug 2012). Would it be
>>> possible to get it updated to 7u21? This bundle is helpful to bsd-port
>>> where we download the 7u source bundle and then apply our changes from
>>> bsd-port to this.
>> I'd expect that an updated bundle would be published for 7u40. I think that
>> would be a better starting point, if we started doing that, then starting
>> with 7u6 now and cumulatively applying past patches.

I'm confused. I figured it would just take pulling jdk7u or jdk7u-dev by a tag and creating a tarball of the result and updating the source bundle page. Am I missing something?

>> Whether and how to start doing that is another question, though.
> The main issue with that is that it means the latest 7u source bundle will
> be insecure for over a year.  The 7u6 source bundle does not include the
> security fixes in u7, u9, u11, u15, u17 or u21.


> If it helps, the BSD project can download the latest IcedTea 2.x release:
> http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/
> and run:
> $ ./configure ; make download-openjdk
> This will provide tarballs of each of the repositories with all security fixes without
> the need for Mercurial.

Thanks. I'll look into it.

> It would actually be nice to have IcedTea support *BSD, but I've never had chance to look at it.

I like the idea of *BSD support in IcedTea. Now that Mac OS X support is in jdk7u, the number of pure BSD patches is more manageable. If bsd-port were merged into jdk7u or 8 first, I think basing our packages off IcedTea would be a fine idea. Keeping *BSD support out of the main line is not sustainable, in my opinion.

Kind Regards,

More information about the jdk7u-dev mailing list