How to push security fixes for non-Oracle platforms after CPU fixes?
Alejandro E Murillo
alejandro.murillo at oracle.com
Fri Jan 23 08:38:09 UTC 2015
On 1/22/2015 12:27 PM, Alejandro E Murillo wrote:
> On 1/22/2015 11:17 AM, Seán Coffey wrote:
>> Given that 8u40 is now in the RDP2 state, we're following the phase 2
>> integration process :
>> Only maintainers/gatekeepers should integrate to the stabilization
>> For now, I suggest you proceed to get this fixed in 8u60
>> (http://hg.openjdk.java.net/jdk8u/hs-dev/) via the standard hotspot
>> integration process. Alejandro (cc'ed) can then help to get this
>> requested for inclusion into 8u40 once it's in 8u60 and has had
>> nightly testing run etc. 8050807 is now also in JDK 9 forest so you
>> can work on both in tandem I guess.
> Volker, I plan to take a snapshot of jdk8u/hs-dev tomorrow (Friday)
> please try to get that reviewed and pushed to it by then if possible,
> so it goes through PIT this weekend.
> As Sean indicated we can then try to get it to 8u40, but note
> that is kind of late in the release cycle, so the release team is
> only accepting show stoppers at this point; you will need to
> provide a major justification for this being added this late.
it was brought to my attention that since this is only affecting AIX,
so we might be able to justify this with the release team, however,
since that's a security issue, we might need special considerations
as it's not coming through the regular channels for that type of changes.
I'm checking with the release team to see how proceed, so hold on
until I hear from them
>> On 21/01/2015 10:47, Volker Simonis wrote:
>>> today, after the release of 8u31 you've pushed the corresponding
>>> security fixes to jdk8u40 (see
>>> We have a change which fixes "8050807: Better performing performance
>>> data handling" on AIX. We had already send this fix to Oracle trough
>>> our licensee channel, however if was too late to get it into the 8u31.
>>> Therefore it's now missing from 8u40.
>>> What's the best way of getting this as fast as possible into 8u40 and
>>> the other 8u repos (8udev, 8u60). As far as I know, changes usually
>>> flow from jdk9/dev -> jdk8u/dev -> jdk8u/jdk8u40. But in this case
>>> it's different, because 8050807 hasn't yet been pushed to jdk9.
>>> Can I just send a RFR to the jdk8u-dev list and push it right to 8u40
>>> myself once I get the approval? It's a hotspot change, but it's
>>> already reviewed, I'm a jdk8u committer and the change only touches
>>> aix-specific files?
>>> Thank you and best regards,
More information about the jdk8u-dev