Re: icedtea-1, icedtea-2 security updates

[Ricardo Wurmus]

Leo Famulari <address@hidden> writes:

> There are security updates for icedtea-1 [0] and icedtea-2 [1]. The
> updated versions are 1.3.10 and 2.6.4, respectively.
>
> I spent some time trying to build these new versions but I am having
> trouble.

Thanks for trying!  I won’t be able to attend to this before Tuesday, so
it’s nice that somebody else is taking care of this.

> The upstream tarballs contain their own patches on the bundled OpenJDK
> source code. For both icedtea-1 and icedtea-2, some of these patches
> fail to apply.

Not only icedtea (i.e. the patches to the OpenJDK sources to make it
buildable with free software) has to be updated, but also the “drops”.
Drops are upstream OpenJDK source tarballs.

So for icedtea-6 this means the "openjdk6-src" input must be changed to

    https://java.net/downloads/openjdk6/openjdk-6-src-b38-20_jan_2016.tar.gz;
    
for icedtea-7 all of the added native-inputs must be changed, i.e:
"openjdk-src", "corba-drop", "jaxp-drop", "jaxws-drop", "jdk-drop",
"langtools-drop", "hotspot-drop".

The icedtea-7 package has a function to build origins from names and
hashes, so you will just need to update the version and the individual
drop hashes.  You can get all the icedtea-7 drops here:

    http://icedtea.wildebeest.org/download/drops/icedtea7/2.6.4/

Hope this helps!

~~ Ricardo