Re: java/openjdk8 and jre

2015-12-15 Thread Mark Felder
On Sat, Dec 12, 2015, at 13:33, Robert Simmons wrote: > Hi, > > It looks like there is a holdup to pushing out u66. In the mean time, can > someone mark u60 vulnerable, please? > u66 is out, doesn't appear it was MFH to quarterly though? I have created a vuxml entry. Do the other openjdks nee

Re: java/openjdk8 and jre

2015-12-12 Thread Robert Simmons
Hi, It looks like there is a holdup to pushing out u66. In the mean time, can someone mark u60 vulnerable, please? On Tue, Nov 17, 2015 at 8:35 AM, Greg Lewis wrote: > On Mon, Nov 16, 2015 at 02:57:47PM -0500, Jung-uk Kim wrote: > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA256 > > > > On

Re: java/openjdk8 and jre

2015-11-17 Thread Greg Lewis
On Mon, Nov 16, 2015 at 02:57:47PM -0500, Jung-uk Kim wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > On 11/16/15 02:52 PM, Jung-uk Kim wrote: > > Patches for FreeBSD ports tree are maintained by glewis and it is > > directly generated from public Mercurial, AFAIK. > > > > http://

Re: java/openjdk8 and jre

2015-11-16 Thread Jung-uk Kim
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 11/16/15 02:52 PM, Jung-uk Kim wrote: > Patches for FreeBSD ports tree are maintained by glewis and it is > directly generated from public Mercurial, AFAIK. > > http://hg.openjdk.java.net/jdk8u/jdk8u and its modules: http://hg.openjdk.java.net

Re: java/openjdk8 and jre

2015-11-16 Thread Jung-uk Kim
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 11/16/15 09:57 AM, Mark Felder wrote: > > > On Mon, Nov 16, 2015, at 08:20, Robert Simmons wrote: >> http://openjdk.java.net/projects/jdk8u/ That page lists it as >> released. > > Ok, here's the actual Oracle release notes on it which is a far

Re: java/openjdk8 and jre

2015-11-16 Thread Mark Felder
On Sun, Nov 15, 2015, at 23:00, Robert Simmons wrote: > I don't see a problem with that. u65 is the security fix version and u66 > is > a bugfix that includes u65. The openjdk project appears to have skipped > straight to u66 since both were released simultaneously. > > From Oracle's website: "J

Re: java/openjdk8 and jre

2015-11-16 Thread Mark Felder
On Mon, Nov 16, 2015, at 08:20, Robert Simmons wrote: > http://openjdk.java.net/projects/jdk8u/ > That page lists it as released. Ok, here's the actual Oracle release notes on it which is a far more useful reference. http://www.oracle.com/technetwork/java/javase/8u66-relnotes-2692847.html The

Re: java/openjdk8 and jre

2015-11-16 Thread Robert Simmons
http://openjdk.java.net/projects/jdk8u/ That page lists it as released. On Nov 16, 2015 9:06 AM, "Mark Felder" wrote: > > > On Sun, Nov 15, 2015, at 23:00, Robert Simmons wrote: > > I don't see a problem with that. u65 is the security fix version and u66 > > is > > a bugfix that includes u65. The

Re: java/openjdk8 and jre

2015-11-15 Thread Robert Simmons
I don't see a problem with that. u65 is the security fix version and u66 is a bugfix that includes u65. The openjdk project appears to have skipped straight to u66 since both were released simultaneously. >From Oracle's website: "Java SE 8u65 includes important security fixes. Oracle strongly reco

Re: java/openjdk8 and jre

2015-11-15 Thread Mark Felder
On Fri, Nov 13, 2015, at 17:52, Robert Simmons wrote: > Greetings, > > The following security vulnerability bug was reported about a week ago. > Can > someone mark the ports as insecure, please? > > https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=204269 > This is really annoying. 8u72 won't

java/openjdk8 and jre

2015-11-13 Thread Robert Simmons
Greetings, The following security vulnerability bug was reported about a week ago. Can someone mark the ports as insecure, please? https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=204269 ___ freebsd-security@freebsd.org mailing list https://lists.freeb