Path: csiph.com!fu-berlin.de!bofh.it!news.nic.it!robomod From: James Kennard Newsgroups: linux.debian.maint.java Subject: Re: Java 8 security patching Date: Fri, 10 Feb 2023 10:00:01 +0100 Message-ID: References: X-Original-To: Thorsten Glaser X-Mailbox-Line: From debian-java-request@lists.debian.org Fri Feb 10 08:55:53 2023 Old-Return-Path: X-Amavis-Spam-Status: No, score=-4.88 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FOURLA=0.1, HTML_MESSAGE=2, LDO_WHITELIST=-5, MURPHY_DRUGS_REL8=0.02, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=no autolearn_force=no X-Policyd-Weight: NOT_IN_SBL_XBL_SPAMHAUS=-1.5 CL_IP_EQ_HELO_IP=-2 (check from: .livingwith.health. - helo: .mail-lj1-x22a.google. - helo-domain: .google.) FROM/MX_MATCHES_HELO(DOMAIN)=-2; rate: -5.5 X-Gm-Message-State: AO0yUKWTDg7GWQ3fNKOb61EdKUCrelcgBIwrnlcF32L1PoSz2doJ12X1 ZFXF6IDFxT8g1+VsIVSc6+pYcMUYTK5zR2sBTDlYtA== X-Google-SMTP-Source: AK7set/N2c10T8yI+AUM+lRRxTaIoRUP8KsSQa4J+VXqJZx4Rv7Jkq3GUdABVef5YelQBEXJVj4goXbU8uG/OR84jz0= X-Received: by 2002:a2e:84d5:0:b0:28e:7593:1237 with SMTP id q21-20020a2e84d5000000b0028e75931237mr1971703ljh.95.1676019330324; Fri, 10 Feb 2023 00:55:30 -0800 (PST) MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="000000000000d22c2e05f454a851" X-Mailing-List: archive/latest/23198 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/CAMUpZk0ari1rh5dGEarB5OCeMGfhm_YDv5Q_=CrHxGZAEhbpwg@mail.gmail.com Approved: robomod@news.nic.it Lines: 149 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Cc: debian-java@lists.debian.org X-Original-Date: Fri, 10 Feb 2023 08:55:19 +0000 X-Original-Message-ID: X-Original-References: <8aa9f71d-806-ab4a-4ed7-2b745749aa7c@tarent.de> Xref: csiph.com linux.debian.maint.java:12547 --000000000000d22c2e05f454a851 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Thorsten, Thank you for your continued effort in keeping java 8 up-to-date for the Debian and Ubuntu communities. Is there a particular reason why you are continuing to update it as opposed to recommending people switch to an alternative distribution such as Temurin? All the best, James On Wed, 8 Feb 2023 at 20:29, Thorsten Glaser wrote: > On Wed, 8 Feb 2023, James Kennard wrote: > > >How long will Debian continue to provide a build of openjdk-8? And how > long > >will Debian continue to apply security patches to openjdk-8? > > The ELTS team is going to support openjdk-8 in jessie and stretch > for as long as they get paid for (see the ELTS project=E2=80=99s pages fo= r > more information). > > Currently, they=E2=80=99re coordinating with me, I=E2=80=99m uploading ne= w releases > to unstable to take as base for the backported builds as time permits > and sponsored by my employer (see below); however, openjdk-8 in sid > is not officially supported in Debian and has not since 2019-07-06 if > not earlier. For a given release, only default-jdk is supported; that > is 11 for buster and bullseye, and 17 for bookworm; any other JDK that > mey be available is either legacy compat or technology preview and > completely unsupported (modulo individual volunteer effort as usual). > > If you need some level of support for openjdk-8, I suggest to contact > Freexian (the ELTS coordinator). For uploads to unstable to continue, > you might want to contract my employer so I can continue to do this, > as it takes a couple of person-hours each quarter plus extra love for > e.g. getting the tests to pass better. I also have an APT repository > in which I publish builds of openjdk-8 for wheezy (EOL though), buster, > bullseye and even bookworm (those not covered by ELTS), and a PPA at > Launchpad in which I do the same for *buntu LTS releases; if you have > interest in these I might also be made available via my employer. (The > repositories are currently available to the public but unsupported. I > also can only build for x86 at the moment.) > > bye, > //mirabilos > -- > Infrastrukturexperte =E2=80=A2 tarent solutions GmbH > Am Dickobskreuz 10, D-53121 Bonn =E2=80=A2 http://www.tarent.de/ > Telephon +49 228 54881-393 =E2=80=A2 Fax: +49 228 54881-235 > HRB AG Bonn 5168 =E2=80=A2 USt-ID (VAT): DE122264941 > Gesch=C3=A4ftsf=C3=BChrer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, A= lexander > Steeg > > > **************************************************** > /=E2=81=80\ The UTF-8 Ribbon > =E2=95=B2 =E2=95=B1 Campaign against Mit dem tarent-Newsletter nicht= s mehr verpassen: > =E2=95=B3 HTML eMail! Also, https://www.tarent.de/newsletter > =E2=95=B1 =E2=95=B2 header encryption! > > **************************************************** > --000000000000d22c2e05f454a851 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Thorsten,

Thank you for your continu= ed=C2=A0effort in=C2=A0keeping=C2=A0java 8 up-to-date for the Debian and Ub= untu communities.

Is there a particular reason why= you are continuing to update it as opposed to recommending=C2=A0people swi= tch to an alternative distribution=C2=A0such as Temurin?
<= div>

All the best,

Jam= es


On Wed, 8 Feb 2023 at 20:29, Thorsten G= laser <t.glaser@tarent.de> = wrote:
On Wed, 8= Feb 2023, James Kennard wrote:

>How long will Debian continue to provide a build of openjdk-8? And how = long
>will Debian continue to apply security patches to openjdk-8?

The ELTS team is going to support openjdk-8 in jessie and stretch
for as long as they get paid for (see the ELTS project=E2=80=99s pages for<= br> more information).

Currently, they=E2=80=99re coordinating with me, I=E2=80=99m uploading new = releases
to unstable to take as base for the backported builds as time permits
and sponsored by my employer (see below); however, openjdk-8 in sid
is not officially supported in Debian and has not since 2019-07-06 if
not earlier. For a given release, only default-jdk is supported; that
is 11 for buster and bullseye, and 17 for bookworm; any other JDK that
mey be available is either legacy compat or technology preview and
completely unsupported (modulo individual volunteer effort as usual).

If you need some level of support for openjdk-8, I suggest to contact
Freexian (the ELTS coordinator). For uploads to unstable to continue,
you might want to contract my employer so I can continue to do this,
as it takes a couple of person-hours each quarter plus extra love for
e.g. getting the tests to pass better. I also have an APT repository
in which I publish builds of openjdk-8 for wheezy (EOL though), buster,
bullseye and even bookworm (those not covered by ELTS), and a PPA at
Launchpad in which I do the same for *buntu LTS releases; if you have
interest in these I might also be made available via my employer. (The
repositories are currently available to the public but unsupported. I
also can only build for x86 at the moment.)

bye,
//mirabilos
--
Infrastrukturexperte =E2=80=A2 tarent solutions GmbH
Am Dickobskreuz 10, D-53121 Bonn =E2=80=A2 http://www.tarent.de/
Telephon +49 228 54881-393 =E2=80=A2 Fax: +49 228 54881-235
HRB AG Bonn 5168 =E2=80=A2 USt-ID (VAT): DE122264941
Gesch=C3=A4ftsf=C3=BChrer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Ale= xander Steeg

=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 ****************************************************
/=E2=81=80\ The UTF-8 Ribbon
=E2=95=B2=C2=A0=E2=95=B1 Campaign against=C2=A0 =C2=A0 =C2=A0 Mit dem taren= t-Newsletter nichts mehr verpassen:
=C2=A0=E2=95=B3=C2=A0 HTML eMail! Also,=C2=A0 =C2=A0 =C2=A0https://w= ww.tarent.de/newsletter
=E2=95=B1=C2=A0=E2=95=B2 header encryption!
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 ****************************************************
--000000000000d22c2e05f454a851--