Bug#645881: critical update 29 available

2011-12-12 Thread Damien Raude-Morvan
Hi all, Le dimanche 11 décembre 2011 17:25:41, Holger Levsen a écrit : On Sonntag, 11. Dezember 2011, Matthias Klose wrote: the DLJ bundles were created because you are not allowed to re-distribute the jdk packages from oracle. Did that change recently? I believe inside an organisation I

Bug#645881: critical update 29 available

2011-12-12 Thread Holger Levsen
On Montag, 12. Dezember 2011, Damien Raude-Morvan wrote: You should have a look at old make-jpkg tool[..] No, thanks, I shall not. I already have a working solution. (but someone has to do the work to support newer JDK in this tool). -- To UNSUBSCRIBE, email to

Bug#645881: critical update 29 available

2011-12-11 Thread Philipp Kern
Hi Moritz, hi all, On Thu, Dec 08, 2011 at 08:43:06PM +0100, Moritz Mühlenhoff wrote: Since openjdk-6 is fixed now, now would be a good time to remove sun-java6 from stable in the next point update? sorry, but I'd rather like to have an announcement that it has a bug, describing its impact to

Bug#645881: critical update 29 available

2011-12-11 Thread Holger Levsen
Hi, On Sonntag, 11. Dezember 2011, Philipp Kern wrote: sorry, but I'd rather like to have an announcement that it has a bug, me too, for all the reasons Philipp noted. It's also trivial to download the fixed jdk from oracle and build a fixed package, so IMHO an announcement containing these

Bug#645881: critical update 29 available

2011-12-11 Thread Florian Weimer
* Philipp Kern: sun-java6 is sadly still a very high profile package. I won't go and break all those installations which force sun-java6 over openjdk-6 locally, either in unattended installations or through other means. It's really unfortunate that most of those installations seem to need

Bug#645881: critical update 29 available

2011-12-11 Thread Matthias Klose
On 12/11/2011 01:07 PM, Holger Levsen wrote: Hi, On Sonntag, 11. Dezember 2011, Philipp Kern wrote: sorry, but I'd rather like to have an announcement that it has a bug, me too, for all the reasons Philipp noted. It's also trivial to download the fixed jdk from oracle and build a fixed

Bug#645881: critical update 29 available

2011-12-11 Thread Holger Levsen
Hi, I forgot: On Sonntag, 11. Dezember 2011, Holger Levsen wrote: $ debdiff sun-java6_6.26-3.dsc sun-java6_6.29-1.dsc|diffstat debian/changelog |8 debian/rules |6 jdk-6u26-dlj-linux-amd64.bin |327520 --

Bug#645881: critical update 29 available

2011-12-11 Thread Holger Levsen
On Sonntag, 11. Dezember 2011, Matthias Klose wrote: the DLJ bundles were created because you are not allowed to re-distribute the jdk packages from oracle. Did that change recently? I believe inside an organisation I can rebundle their bundles to my prefered kind of bundle, that is, form of

Bug#645881: critical update 29 available

2011-12-11 Thread Russ Allbery
Florian Weimer f...@deneb.enyo.de writes: * Philipp Kern: sun-java6 is sadly still a very high profile package. I won't go and break all those installations which force sun-java6 over openjdk-6 locally, either in unattended installations or through other means. It's really unfortunate that

Bug#645881: critical update 29 available

2011-12-11 Thread Florian Weimer
* Matthias Klose: On 12/11/2011 01:07 PM, Holger Levsen wrote: Hi, On Sonntag, 11. Dezember 2011, Philipp Kern wrote: sorry, but I'd rather like to have an announcement that it has a bug, me too, for all the reasons Philipp noted. It's also trivial to download the fixed jdk from

Bug#645881: critical update 29 available

2011-12-08 Thread Moritz Mühlenhoff
On Thu, Dec 01, 2011 at 09:47:53PM +0100, Florian Weimer wrote: * Moritz Mühlenhoff: Florian, what's the status of openjdk6 for stable/oldstable? I've released the pending update for squeeze. lenny will eventually follow, and so will the pending updates for squeeze, but judging by my

Bug#645881: critical update 29 available

2011-12-01 Thread Florian Weimer
* Moritz Mühlenhoff: Florian, what's the status of openjdk6 for stable/oldstable? I've released the pending update for squeeze. lenny will eventually follow, and so will the pending updates for squeeze, but judging by my past performance, it will take a while. If someone else wants to work on

Bug#645881: critical update 29 available

2011-11-22 Thread Moritz Mühlenhoff
On Fri, Oct 21, 2011 at 11:07:30AM +0200, Florian Weimer wrote: * Moritz Muehlenhoff: As for stable/oldstable: I noticed that Red Hat provided packages for update 29 for RHEL 4 (RHEL 5 onwards use OpenJDK): http://lwn.net/Articles/463919/ If anyone remembers the rationale behind the

Bug#645881: AW: Bug#645881: critical update 29 available

2011-10-24 Thread Simon,Mathieu
Hi Von: Sylvestre Ledru [sylves...@debian.org] Gesendet: Freitag, 21. Oktober 2011 11:34 As for stable/oldstable: I noticed that Red Hat provided packages for update 29 for RHEL 4 (RHEL 5 onwards use OpenJDK): http://lwn.net/Articles/463919/ Well, I wonder how (if ?) they can do that... I'd

Bug#645881: critical update 29 available

2011-10-21 Thread Moritz Muehlenhoff
On Wed, Oct 19, 2011 at 06:20:12PM +0200, Torsten Werner wrote: Hi Philipp, Am 19.10.2011 16:33, schrieb Philipp Kern: Or it's the removal of the package. we should remove sun-java5 from oldstable, too, if we are going to remove sun-java6 from (old)stable. But I do not have a strong

Bug#645881: critical update 29 available

2011-10-21 Thread Florian Weimer
* Moritz Muehlenhoff: As for stable/oldstable: I noticed that Red Hat provided packages for update 29 for RHEL 4 (RHEL 5 onwards use OpenJDK): http://lwn.net/Articles/463919/ If anyone remembers the rationale behind the DLJ, perhaps they can check if the current BCL matches our needs, too?

Bug#645881: critical update 29 available

2011-10-19 Thread Thijs Kinkhorst
Package: sun-java6 Severity: grave Tags: security Hi, Upstream has released Java SE 6 update 29 yesterday: http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html with security fixes. Because some of the fixes, like for BEAST, are very high-profile, perhaps an update

Bug#645881: critical update 29 available

2011-10-19 Thread Sylvestre Ledru
CC debian release security Le mercredi 19 octobre 2011 à 12:21 +0200, Thijs Kinkhorst a écrit : Upstream has released Java SE 6 update 29 yesterday: http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html with security fixes. Well, that especially means that it is now

Bug#645881: critical update 29 available

2011-10-19 Thread Nico Kadel-Garcia
On Wed, Oct 19, 2011 at 6:50 AM, Sylvestre Ledru sylves...@debian.org wrote: CC debian release security Le mercredi 19 octobre 2011 à 12:21 +0200, Thijs Kinkhorst a écrit : Upstream has released Java SE 6 update 29 yesterday:

Bug#645881: critical update 29 available

2011-10-19 Thread Florian Weimer
* Thijs Kinkhorst: Upstream has released Java SE 6 update 29 yesterday: http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html with security fixes. Does the lack of a DLJ version affect us? The special distributor license is no longer available from Oracle: | As a

Bug#645881: critical update 29 available

2011-10-19 Thread Matthias Klose
On 10/19/2011 02:09 PM, Thijs Kinkhorst wrote: Have we been in contact with Oracle upstream and explained that we are eager to comply with their wish to move entirely to openjdk for our next release, but have the problem that we have a stable release out in the field that people rely on? Are

Bug#645881: critical update 29 available

2011-10-19 Thread Thijs Kinkhorst
On Wed, October 19, 2011 14:15, Matthias Klose wrote: On 10/19/2011 02:09 PM, Thijs Kinkhorst wrote: Have we been in contact with Oracle upstream and explained that we are eager to comply with their wish to move entirely to openjdk for our next release, but have the problem that we have a

Bug#645881: critical update 29 available

2011-10-19 Thread Thijs Kinkhorst
On Wed, October 19, 2011 12:50, Sylvestre Ledru wrote: CC debian release security Le mercredi 19 octobre 2011 à 12:21 +0200, Thijs Kinkhorst a écrit : Upstream has released Java SE 6 update 29 yesterday: http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html with

Bug#645881: critical update 29 available

2011-10-19 Thread Yves-Alexis Perez
On mer., 2011-10-19 at 15:28 +0200, Thijs Kinkhorst wrote: What I'm wondering is if we tried to ask upstream whether they would be willing to extend the DLJ offer so we can keep security fixes for the sun-java6 version in stable coming in for the lifetime of this release, notwithstanding the

Bug#645881: critical update 29 available

2011-10-19 Thread Philipp Kern
On Wed, Oct 19, 2011 at 03:28:02PM +0200, Thijs Kinkhorst wrote: What I'm wondering is if we tried to ask upstream whether they would be willing to extend the DLJ offer so we can keep security fixes for the sun-java6 version in stable coming in for the lifetime of this release, notwithstanding

Bug#645881: critical update 29 available

2011-10-19 Thread Torsten Werner
Hi Philipp, Am 19.10.2011 16:33, schrieb Philipp Kern: Or it's the removal of the package. we should remove sun-java5 from oldstable, too, if we are going to remove sun-java6 from (old)stable. But I do not have a strong opinion on that. Cheers, Torsten -- To UNSUBSCRIBE, email to