From nobody Sat Oct 24 15:33:11 2026 X-Original-To: freebsd-java@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4jBkSN6ySqz6wnTT for ; Sat, 24 Oct 2026 15:33:40 +0000 (UTC) (envelope-from haraldei@anduin.net) Received: from mail.anduin.net (mail.anduin.net [185.42.170.45]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 4jBkSM6YPFz4r2w for ; Sat, 24 Oct 2026 15:33:39 +0000 (UTC) (envelope-from haraldei@anduin.net) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=anduin.net header.s=dkim2021 header.b=HzfquI+e; spf=pass (mx1.freebsd.org: domain of haraldei@anduin.net designates 185.42.170.45 as permitted sender) smtp.mailfrom=haraldei@anduin.net; dmarc=pass (policy=reject) header.from=anduin.net DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=anduin.net; s=dkim2021; h=Content-Type:MIME-Version:Message-ID:Subject:To:From:Date: Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Unsubscribe-Post:List-Subscribe:List-Post:List-Owner:List-Archive; bh=G9Uhntl61gdCFggRR5yV0fOvFdni7G2Pr7+8y4z0oUY=; t=1792856019; x=1793720019; b=HzfquI+eLZKFvTqqz50KreuP0Utw4S2osJtmGOeVjr+96U8tiDSNAgJSc+JNn8/v3/sQKkyZ9JJ xPTcREwqJ1pDq9y/LRThBylTLbzvGLNMKo4mjZu7rCjkqq0OLA4Z/2csVnFAClTUYRLEy4ez5FQLq uKAXOHLu927MzxLJFbMT8kMsLBeKBX2L/4ME/aauSa6RoCzhQz6R/M8FFfZ6XGKg7n3tsgiNPn9Ed 2uuP0vx8dXI5hkTqnbgryX+cVxWkL+Tf1U0AULkovzbz9+5+RBVineu9+7MD0Xy/KByT3YHl3XuTa lcMiHcOL3chKHwc53wd8r5Gqb1dvTzUoxG2w==; Received: by mail.anduin.net with esmtpsa (TLS1.3:TLS_AES_256_GCM_SHA384:256:x25519) (Exim 4.100.1 (FreeBSD)) (envelope-from ) id 1xKdkP-00000000JEc-2zE0 for freebsd-java@freebsd.org; Sat, 24 Oct 2026 15:33:31 +0000 Date: Sat, 24 Oct 2026 17:33:11 +0200 From: Harald Eilertsen To: FreeBSD Java mailing list Subject: Updated OpenJDK ports Message-ID: Mail-Followup-To: FreeBSD Java mailing list List-Archive: https://lists.freebsd.org/archives/freebsd-java Sender: owner-freebsd-java@FreeBSD.org List-Id: Porting Java to FreeBSD List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-SA-Authenticated: Yes X-Spam-Score: -1.9 X-Spam-Level: - X-Spam-Report: host: mail.modirum.com | contact: hostmaster@modirum.com | scores: BAYES_00=-1.9,NO_RELAYS=-0.001 | autolearn=no autolearn_force=no, score=0 X-Spamd-Bar: - X-Spamd-Result: default: False [-1.00 / 15.00]; DMARC_POLICY_ALLOW(-0.50)[anduin.net,reject]; R_SPF_ALLOW(-0.20)[+ip4:185.42.170.45/32]; R_DKIM_ALLOW(-0.20)[anduin.net:s=dkim2021]; MIME_GOOD(-0.10)[text/plain]; ASN(0.00)[asn:62248, ipnet:185.42.170.0/24, country:EE]; RCPT_COUNT_ONE(0.00)[1]; FREEFALL_USER(0.00)[haraldei]; MISSING_XM_UA(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_COUNT_ONE(0.00)[1]; RCVD_VIA_SMTP_AUTH(0.00)[]; RCVD_TLS_ALL(0.00)[]; MLMMJ_DEST(0.00)[freebsd-java@freebsd.org]; FROM_HAS_DN(0.00)[]; ARC_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; TO_DN_ALL(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; DKIM_TRACE(0.00)[anduin.net:+] X-Rspamd-Queue-Id: 4jBkSM6YPFz4r2w Hi, I've updated most of the OpenJDK ports for FreeBSD to the latest upstream version, which also includes the fixes for the vulnerable eMudhra CA certificates. The following versions are available in ports, both in latest and the last quarterly branch: - java/openjdk27 has been updated to version 27.0.1.0.2. - java/openjdk25 has been updated to version 25.0.5.0.2. - java/openjdk21 has been updated to version 21.0.13.0.2. - java/openjdk17 has been updated to version 17.0.21.0.2. OpenJDK 8 and 11 are still to be done. I would encourage anyone running services on OpenJDK on FreeBSD to upgrade after testing the new versions. Though I don't expect any issues, I have not had as much time to test these versions as much as I normally do. Please note that java/openjdk26 has _not_ been updated, but rather deprecated as it is no longer maintained by the OpenJDK project. Since it's missing the CA certificate fixes, it will expire already on 2026-12-01. Anyone still on OpenJDK 26 is encouraged to upgrade to OpenJDK 27, or if possible OpenJDK 25 which is the latest LTS version. Please file any issues you have with the updated ports in the FreeBSD bug tracker: https://bugs.freebsd.org Thanks to The FreeBSD Foundation for supporting my work on OpenJDK for FreeBSD, and to Greg Lewis and Kurt Miller for helping with this release. Take care! Harald