Tag: openjdk (Page 6 of 9)

Last time I updated my OpenJDK packages there was a ton of critical bugfixes which had been applied by the IcedTea community – fixes which Oracle had not yet added to its own version of Java. That version of OpenJDK called itself “Java7 Update 40 Build 31” aka openjdk-7u40_b31.

It took a while for Oracle to release its own 7u40 release – as you know Oracle uses OpenJDK as the base upon which it builds its binary releases of Java SE, but the company sometimes does not respond to critical holes as fast as the IcedTea developers do.

Last friday, the IcedTea team released version 2.4.2 of their “build harness”. This new icedtea release updates its OpenJDK support with a number of (non-critical) bug fixes. It also synchronizes the OpenJDK code with the upstream “Update 40 Build 60” tag. Hence, the new OpenJDK packages which I present to you today are versioned “7u40_b60”

You can check out the mailing list announcement for the new release, since there is not yet a blog post on Andrew Hughes‘ site. It will be there shortly, for sure. I will merely list the bugfixes here:

- RH661505: JPEGs with sRGB IEC61966-2.1 color profiles have wrong colors
- RH995488: Java thinks that the default timezone is Busingen instead of Zurich
- Cleanup file resources properly in TimeZone_md.
- PR1410: Icedtea 2.3.9 fails to build using icedtea 1.12.4
- G477456: emerge fails on pax system: java attempts RWX map, paxctl -m missing
- G478484: patches/boot/ecj-diamond.patch FAILED
- Fix Zero following changes to entry_frame_call_wrapper in 8016131
- RH1008988: Set ZERO_BUILD in flags.make so it is set on rebuilds
- Cast should use same type as GCDrainStackTargetSize (uintx).
- Add casts to fix build on S390

OpenJDK 7u40_b60 for Slackware:

My packages for OpenJDK have been compiled on Slackware 13.37 and are useable on 13.37 as well as 14.0 and -current! (as the screenshot shows). Get them preferably from a mirror site (faster downloads):

• http://slackware.com/~alien/slackbuilds/openjdk/ , the primary location
• http://alien.slackbook.org/slackbuilds/openjdk/ , the community mirror (bandwidth-capped)
• http://taper.alienbase.nl/mirrors/people/alien/slackbuilds/openjdk/ , my own fast US mirror
• http://slackware.org.uk/people/alien/slackbuilds/openjdk/ , fast UK mirror, needs a day to get in sync

Further packages that are recommended/required:

• Optional: If you want a Java browser-plugin you must install icedtea-web which I also updated a couple of days ago (OpenJDK itself does not contain such a plugin).
• Required: The rhino package is a dependency of the openjdk/openjre package. It contains the JavaScript engine for OpenJDK.

Note that you should only install one of the two packages, either openjdk or openjre, do not install both at the same time or things will break! The openjdk package contains the jre (java runtime) as well as the java development kit.

Eric

After so many “critical bugfix releases” that have plagued Java during the past year, it is nice to see some real hard work being made available to the public. The IcedTea developers have been preparing their first major release since 2.3.0 of August last year. Today, icedtea-2.4.0 was announced on the mailing list and on the blog of release manager Andrew John Hughes . The list of enhancements and new features is way too long to copy here, it’s best to go check out that blog post. There are a lot of bug fixes as expected, but there were no vulnerabilities that needed patching this time. A lot of effort has gone into the CACAO and JamVM alternative virtual machines for Java.

You will probably be surprised to see the jump in the update number for the OpenJDK package which is built using the new IcedTea. A finalized Update 40 of OpenJDK7 is scheduled for Augist this year, and some of the new features still have to be added to the source tree. But the IcedTea developers decided that making a new major release of their software available a few months earlier was for the better, considering the huge number of improvements and fixes that will result in a solid Java 7u40 release already.

On to the packages (and thanks Andrew for showing your appreciation for Slackware)!

My packages for OpenJDK have been compiled on Slackware 13.37 (and are useable on 13.37 as well as 14.0 and -current!). Get them preferably from a mirror site (faster downloads):

• http://alien.slackbook.org/slackbuilds/openjdk/ , the primary location (bandwidth-capped)
• http://taper.alienbase.nl/mirrors/people/alien/slackbuilds/openjdk/ , my own fast US mirror
• http://slackware.org.uk/people/alien/slackbuilds/openjdk/ , fast UK mirror, needs a day to get in sync

Further packages that are recommended/required:

• Optional: If you want a Java browser-plugin you must install icedtea-web (OpenJDK itself does not contain such a plugin).
• Required: The rhino package is a dependency of the openjdk/openjre package. It contains the JavaScript engine for OpenJDK.

Note that you should only install one of the two packages, either openjdk or openjre, do not install both at the same time or things will break! The openjdk package contains the jre (java runtime) as well as the java development kit.

Eric

Hot on the heels of the Oracle release of its Java SE 7 Update 21, there is a new icedtea version which brings the free and open source version of Java – OpenJDK – to version 7 Update 21 as well. The OpenJDK 7u21 release addresses several vulnerabilities.

The announcement was made on the mailing list first, but Andrew John Hughes wrote a more official blurb on his blog.

Here is the list (taken from Andrew’s post) of the vulnerabilities which have been plugged and their CVE numbers:

• S6657673, CVE-2013-1518: Issues with JAXP
• S8000724, CVE-2013-2417: Improve networking serialization
• S8001031, CVE-2013-2419: Better font processing
• S8001040, CVE-2013-1537: Rework RMI model
• S8001329, CVE-2013-1557: Augment RMI logging
• S8003543, CVE-2013-2415: Improve processing of MTOM attachments
• S8004336, CVE-2013-2431: Better handling of method handle intrinsic frames
• S8004986, CVE-2013-2383: Better handling of glyph table
• S8004987, CVE-2013-2384: Improve font layout
• S8004994, CVE-2013-1569: Improve checking of glyph table
• S8006435, CVE-2013-2424: Improvements in JMX
• S8007617, CVE-2013-2420: Better validation of images
• S8007667, CVE-2013-2430: Better image reading
• S8007918, CVE-2013-2429: Better image writing
• S8009049, CVE-2013-2436: Better method handle binding
• S8009063, CVE-2013-2426: Improve reliability of ConcurrentHashMap
• S8009305, CVE-2013-0401: Improve AWT data transfer
• S8009677, CVE-2013-2423: Better setting of setters
• S8009699, CVE-2013-2421: Methodhandle lookup
• S8009814, CVE-2013-1488: Better driver management
• S8009857, CVE-2013-2422: Problem with plugin

My packages for OpenJDK have been compiled on Slackware 13.37 (and are useable on 13.37 as well as 14.0 and -current!). Get them preferably from a mirror site:

• http://alien.slackbook.org/slackbuilds/openjdk/ , the primary location (bandwidth-capped)
• http://taper.alienbase.nl/mirrors/people/alien/slackbuilds/openjdk/ , my own fast mirror

I am happy to announce that I was able to build an ARM version of the OpenJDK again. The build with the “cacao” VM was failing for several months now, and I switched to the “jamvm” which is a small (but fully compliant), efficient Java virtual Machine with JIT compiler.. Sources and packages to be found at http://taper.alienbase.nl/mirrors/alienarm/

Further packages that are recommended/required:

• Optional: If you want a Java browser-plugin you must install icedtea-web (OpenJDK itself does not contain such a plugin). Note that I updated my icedtea-web package less than a week ago, which pugs a few vulnerabilities (CVE-2013-1927 and CVE-2013-1926 to be precise).
• Required: The rhino package is a dependency of the openjdk/openjre package. It contains the JavaScript engine for OpenJDK.

Eric