Version 2.6.4 of IcedTea was released last week. The IcedTea “build harness” for OpenJDK will compile OpenJDK 7 “Update 95 Build 00“. In Slackware terminology: here is the package openjdk-7u95_b00. The release synchronizes with Oracle’s January 2016 updates to OpenJDK. Read more about the release on the blog of release maintainer Andrew Hughes.
This is the list of security fixes and CVE‘s which have been addressed and fixed in this release.
- S8059054, CVE-2016-0402: Better URL processing
- S8130710, CVE-2016-0448: Better attributes processing
- S8132210: Reinforce JMX collector internals
- S8132988: Better printing dialogues
- S8133962, CVE-2016-0466: More general limits
- S8137060: JMX memory management improvements
- S8139012: Better font substitutions
- S8139017, CVE-2016-0483: More stable image decoding
- S8140543, CVE-2016-0494: Arrange font actions
- S8143185: Cleanup for handling proxies
- S8143941, CVE-2015-8126, CVE-2015-8472: Update splashscreen displays
- S8144773, CVE-2015-7575: Further reduce use of MD5 (SLOTH)
Note about usage:
Remember that I release packages for the JRE (runtime environment) and the JDK (development kit) simultaneously, but you only need to install one of the two. The JRE is sufficient if you only want to run Java programs (including Java web plugins). Only in case where you’d want to develop Java programs and need a Java compiler, you are in need of the JDK package.
The Java package (openjre as well as openjdk) has one dependency: rhino provides JavaScript support for OpenJDK.
Optionally: If you want to use Java in a web browser then you’ll have to install my icedtea-web package too. While Oracle’s JDK contains a browser plugin, that one is closed-source and therefore Icedtea offers an open source variant which does a decent job. Note that icedtea-web is a NPAPI plugin – this prevents use of Java in Chrome & Chromium because those browsers only support PPAPI plugins, but you’ll be OK with all Mozilla [-compatible] browsers of course.
Download locations:
- http://www.slackware.com/~alien/slackbuilds/openjdk/
- http://taper.alienbase.nl/mirrors/people/alien/slackbuilds/openjdk/ (rsync URI: rsync://taper.alienbase.nl/mirrors/people/alien/slackbuilds/openjdk/)
- … and more mirrors.
Have fun! Eric
Awesome, thanks! Weren’t they switching to Java 8 soonish?
If it takes too long for the icedtea guys to come up with a stable build harness for OpenJDK8 I might be forced to build it directly. Other distros have been doing just that for a while now.
I do not know what impact that would have to the feature set.
Let alone the support for icedtea-web, the browser plugin which as far as I understand needs an OpenJDK which was built using icedtea.
Oof. It’s like the house that Jack built. Dating myself, but I remember when compiling software was relatively straightforward…
According to this site JDK 8 is only “Plan B”: http://openjdk.java.net/projects/jdk8/
So maybe, they had never plans for OpenJDK to provide a free JDK 8, and were always focused on version 9? But I may mis-interpret the statement completely, of course.
I am currently trying to get LightZone working in Slackware64-14.2-beta2. However, it crashes at launch with a java.lang.NoClassDefFoundError: javax/help/HelpSetException.
Does this mean that OpenJDK doesn’t include the Java help package?
But if so: Wouldn’t other programs complain about that, too?
Thanks!
Alex, javahelp is not part of the JDK, you can find it at https://javahelp.java.net/
I am not aware of a Slackware package for this.
Just tried the same with Oracle’s proprietary JDK — same error. So just ignore my above post, as the issue is obviously not related to OpenJDK.
Thanks, Eric, I’ll try that JAR file.
Just for completeness: LightZone works now, and I like it more every minute. Thanks for pointing me to the solution, Eric!
Hi Eric, I have been meaning to write this for a long time. The JAVA_HOME set by openjre is incorrect (openjdk is fine). It should be /usr/lib/java/jre.
Currently apps that use JAVA_HOME will say something like:
Error: JAVA_HOME is not defined correctly.
We cannot execute /usr/lib/java/bin/java
diff -u openjre.sh.orig openjre.sh
— openjre.sh.orig 2016-03-09 09:51:53.363580011 +0000
+++ openjre.sh 2016-03-09 09:52:09.255575978 +0000
@@ -1,4 +1,4 @@
#!/bin/sh
-export JAVA_HOME=/usr/lib/java
-export MANPATH=”${MANPATH}:${JAVA_HOME}/jre/man”
-export PATH=”${PATH}:${JAVA_HOME}/jre/bin”
+export JAVA_HOME=/usr/lib/java/jre
+export MANPATH=”${MANPATH}:${JAVA_HOME}/man”
+export PATH=”${PATH}:${JAVA_HOME}/bin”
Thanks for your openjdk/openjre packages!
timmi , I will apply that fix to the SlackBuild and next time I need to build the openjdk/jre packages that will be applied. Thanks!
IcedTea 3.0.0 for OpenJDK 8 has now been released, at long last: http://bitly.com/it30000 The delay was mainly due to basically having to start from scratch due to the new build system, and then, after the first 8 release, only being able to progress every 2 in 3 months. If you can’t package it immediately, you may want to wait for the first security update, 3.0.1, which will be out with 2.6.6 and 1.13.11 shortly after April 19th.
Hi Andrew
I have already built and tested openjdk 8u77_b03 using your icedtea-3.3.0 😉
It just took a bit of time to update the build script so that it created a functional and working package that passes all my checks.
I have to compile packages for two architectures on a couple of stable Slackware releases, so it will take another hour and then they go public.
Thanks for the heads-up! I will also use your icedtea-2.6.6 later on, to provide an upgrade for Java 7 (which I keep in my repositories as I am not sure that everybody is ready for Java 8).
Oh wow, that was quick! Great news 🙂
There should be 7 updates for quite a while yet. It’s currently still being supported on every active version of RHEL (5,6 and 7).