svn commit: r424926 - in head/java/openjdk8: . files

[Kubilay Kocak]

On 30/10/2016 2:51 PM, Greg Lewis wrote:
> Author: glewis Date: Sun Oct 30 03:51:40 2016 New Revision: 424926 
> URL: https://svnweb.freebsd.org/changeset/ports/424926
> 
> Log: . Update to 8u112.
> 
> Deleted: 
> head/java/openjdk8/files/patch-hotspot_src_cpu_zero_vm_cppInterpreter__zero.cpp
>
> 
head/java/openjdk8/files/patch-hotspot_src_share_vm_interpreter_bytecodeInterpreter.cpp
> Modified: head/java/openjdk8/Makefile head/java/openjdk8/distinfo 
> head/java/openjdk8/files/patch-bsd 
> head/java/openjdk8/files/patch-bsd-test
> 
> Modified: head/java/openjdk8/Makefile 

Greg,

The release notes [1] for this version mention:

"This Critical Patch Update contains 7 new security fixes for Oracle
Java SE.  All of these vulnerabilities may be *remotely exploitable
without authentication*, i.e., may be exploited over a network without
requiring user credentials.  The English text form of this Risk Matrix
can be found here."

It appears these affect Java SE 6/7 (ports) as well as 8 .

If so, are there updates pending for the other openjdk ports and are
there VuXML entries and merges to quarterly planned?

I note previous version updates (commits) to these ports have not
mentioned security fixes, nor intent to MFH them either.

[1]
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html#AppendixJAVA

./koobs