[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: openjdk-7 CVEs

On 21.10.2016 15:07, Guido Günther wrote:
> On Fri, Oct 21, 2016 at 03:02:26PM +0200, Markus Koschany wrote:
>> On 21.10.2016 14:54, Guido Günther wrote:
>>> Hi,
>>> openjdk-7 is unclaimed in dla-needed.txt but I wonder if you guys have
>>> already a plans for fixing these. Cherry-picking patches or waiting for
>>> a new Iced Tea release? Since Wheezy and Jessie currently ship the same
>>> version I could prepare the update.
>>> Cheers,
>>>  -- Guido
>> We usually backport the OpenJDK releases which are prepared in experimental.
> Feel free to claim it then - I'll grab another one.
> Cheers,
>  -- Guido

Please don't get me wrong. I just wanted to point out that we
don't/can't backport patches because Oracle is rather secretive in this
regard. Normally the OpenJDK maintainer uploads a new release to
experimental and we backport and test it then on Wheezy. So please go
ahead with the update.

PS.: I'm subscribed to debian-lts.



Attachment: signature.asc
Description: OpenPGP digital signature

Reply to: