Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Remove openjdk 12, 13, 14, 15, 16 #170825

Closed
mweinelt opened this issue Apr 28, 2022 · 4 comments · Fixed by #331514
Closed

Remove openjdk 12, 13, 14, 15, 16 #170825

mweinelt opened this issue Apr 28, 2022 · 4 comments · Fixed by #331514
Labels
1.severity: security Issues which raise a security issue, or PRs that fix one 6.topic: java Including JDK, tooling, other languages, other VMs

Comments

@mweinelt
Copy link
Member

All of these are EOL and releases >=15 haven't received fixes for psychic signatures vulnerability.

https://endoflife.date/java

@edwtjo @asbachb
@mweinelt mweinelt added the 1.severity: security Issues which raise a security issue, or PRs that fix one label Apr 28, 2022
@mweinelt mweinelt mentioned this issue Apr 28, 2022
Closed
@mweinelt mweinelt mentioned this issue Apr 28, 2022
Merged
13 tasks
@vcunat vcunat added the 6.topic: java Including JDK, tooling, other languages, other VMs label Apr 29, 2022
mweinelt added a commit to mweinelt/nixpkgs that referenced this issue May 5, 2022
@mweinelt
openjdk: mark major version 12 through 16 as EOL
dacd54d 
https://endoflife.date/java
https://www.azul.com/products/azul-support-roadmap/

Related: NixOS#170825
@dasJ
Copy link
Member

dasJ commented May 23, 2022

Is this still a release blocker? The versions have already been marked as insecure

@mweinelt
Copy link
Member Author

Not a blocker anymore, but still should be removed.

@asbachb asbachb mentioned this issue Jun 10, 2022
Merged
13 tasks
@asbachb
Copy link
Contributor

asbachb commented Jun 11, 2022

I guess for now we cannot remove them easily as they're needed to build the next jdks.

e.g. for 17 you need 16 to compile. So 16 is the so called bootstrap jdk.

I had a look at the current implementation. Currently for non x86 jdk builds NixOS is using adoptopenjdk binary builds and for x86 NixOS is using previous nixos packaged variant.

Basically the problem is that nor OpenJDK nor Adoptium is currently providing x86 builds for linux which we could use as binary bootstrap jdk.

@mweinelt mweinelt mentioned this issue Dec 2, 2022
Merged
13 tasks
@jtojnar jtojnar moved this to In progress in Picking up garbage Jun 27, 2024
@emilazy emilazy mentioned this issue Aug 1, 2024
Merged
13 tasks
@emilazy
Copy link
Member

emilazy commented Aug 1, 2024

Fixed by #331514 (actually everything but 16 is totally gone already, but now 18, 19, and 20 are EOL as well).

@github-project-automation github-project-automation bot moved this from In progress to Done in Picking up garbage Aug 1, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
1.severity: security Issues which raise a security issue, or PRs that fix one 6.topic: java Including JDK, tooling, other languages, other VMs
Projects
Picking up garbage
Archived in project
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Drop end‐of‐life JDK and JavaFX versions 16 to 20 emilazy/nixpkgs
5 participants
@mweinelt @asbachb @vcunat @dasJ @emilazy