Re: Java 8 security patching

2023-02-13 Thread Thorsten Glaser
On Mon, 13 Feb 2023, James Kennard wrote: >Yes, it has been a long time now, but it's taken time for the alternatives >to gain traction. I was just trying to understand the current state of play >to help work out how and when to move away from openjdk-8. We’ve already moved, as a whole, to openjd

Re: Java 8 security patching

2023-02-13 Thread James Kennard
Yes, it has been a long time now, but it's taken time for the alternatives to gain traction. I was just trying to understand the current state of play to help work out how and when to move away from openjdk-8. Thanks again for all your help. On Mon, 13 Feb 2023 at 14:05, Thorsten Glaser wrote:

Re: Java 8 security patching

2023-02-13 Thread Thorsten Glaser
On Mon, 13 Feb 2023, James Kennard wrote: >With the changes to Java licensing What changes? It’s been GPLv2 + Classpath exception for *ages* now. >, alternative distributions of Java have >become increasingly popular. They all have their pros and cons, Perhaps, but we’re still talking about the

Re: Java 8 security patching

2023-02-13 Thread James Kennard
Hi Thorsten, Thanks again for the explanation. With the changes to Java licensing, alternative distributions of Java have become increasingly popular. They all have their pros and cons, https://whichjdk.com/. All the best, James On Fri, 10 Feb 2023 at 14:06, Thorsten Glaser wrote: > On Fri,

Re: Java 8 security patching

2023-02-10 Thread Thorsten Glaser
On Fri, 10 Feb 2023, James Kennard wrote: >Is there a particular reason why you are continuing to update it as opposed >to recommending people switch to an alternative distribution such as >Temurin? I don’t know what Temurin even is. While I do recommend that people switch to default-jdk, and in

Re: Java 8 security patching

2023-02-10 Thread James Kennard
Hi Thorsten, Thank you for your continued effort in keeping java 8 up-to-date for the Debian and Ubuntu communities. Is there a particular reason why you are continuing to update it as opposed to recommending people switch to an alternative distribution such as Temurin? All the best, James On

Re: Java 8 security patching

2023-02-08 Thread Thorsten Glaser
On Wed, 8 Feb 2023, James Kennard wrote: >How long will Debian continue to provide a build of openjdk-8? And how long >will Debian continue to apply security patches to openjdk-8? The ELTS team is going to support openjdk-8 in jessie and stretch for as long as they get paid for (see the ELTS proj

Java 8 security patching

2023-02-08 Thread James Kennard
Hi, I can't seem to find a definitive answer to this question. As I understand it, OpenJDK will continue to provide security patches for Java 8 until December 2030 (https://www.oracle.com/java/technologies/downloads/#java8). How long will Debian continue to provide a build of openjdk-8? And how l