From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: icedtea-1, icedtea-2 security updates Date: Wed, 27 Jan 2016 23:25:29 -0500 Message-ID: <20160128042529.GA5869@jasmine> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:55091) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aOe9C-0003zH-08 for guix-devel@gnu.org; Wed, 27 Jan 2016 23:25:30 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aOe98-00064z-QL for guix-devel@gnu.org; Wed, 27 Jan 2016 23:25:29 -0500 Received: from out3-smtp.messagingengine.com ([66.111.4.27]:49783) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aOe98-00063I-Lv for guix-devel@gnu.org; Wed, 27 Jan 2016 23:25:26 -0500 Received: from localhost (c-69-249-5-231.hsd1.pa.comcast.net [69.249.5.231]) by mail.messagingengine.com (Postfix) with ESMTPA id 0E9416800FD for ; Wed, 27 Jan 2016 23:25:24 -0500 (EST) Content-Disposition: inline List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: guix-devel@gnu.org There are security updates for icedtea-1 [0] and icedtea-2 [1]. The updated versions are 1.3.10 and 2.6.4, respectively. I spent some time trying to build these new versions but I am having trouble. The upstream tarballs contain their own patches on the bundled OpenJDK source code. For both icedtea-1 and icedtea-2, some of these patches fail to apply. I looked into the failing patches to see if it could be fixed by adjusting, for example, the whitespace the parameters of `patch`, but the strings to be matched don't exist in the relevant files. I _think_ this is an upstream bug. However, the icedtea-* package definitions are complex and I'd like it if someone else could take a look at this issue before I file an upstream bug report. Some details follow about the problem in icedtea-2. The failing patch file is: icedtea-2.6.4/patches/boot/ecj-multicatch.patch ... and it fails while trying to patch: jdk/src/share/classes/sun/security/ssl/RSAClientKeyExchange.java ... on the first "diff" line of the patch: - } catch (InvalidAlgorithmParameterException | The string "InvalidAlgorithmParameterException" does not exist in that file. Thanks for your attention. [0] http://blog.fuseyism.com/index.php/2016/01/25/security-icedtea-1-13-10-for-openjdk-6-released/ [1] http://blog.fuseyism.com/index.php/2016/01/21/security-icedtea-2-6-4-for-openjdk-7-released/