New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
oraclejdk8: 8u261 -> 8u271 #109055
oraclejdk8: 8u261 -> 8u271 #109055
Conversation
ping #108810 (running tests rn, will undraft after) |
Is there a reason like security patches why we should port this to stable? |
on aarch64 (in both cases I had to manually download 3 unfree packages btw)
Also on aarch64
|
not afaict. However, outdated version cannot be found on the internet, so it's basically unusable if you haven't installed it already. There's also precedent for backporting at 9659dbd. |
on i686:
|
Old versions are actually still available at https://www.oracle.com/java/technologies/javase/javase8u211-later-archive-downloads.html but their use is highly discouraged by upstream, because "u" version bumps typically include security patches. For example, 8u261 is affected by most of the CVEs in this table: https://www.oracle.com/security-alerts/cpuoct2020.html#AppendixJAVA |
Ported to stable as 0fc1862. |
This pull request has been mentioned on NixOS Discourse. There might be relevant details there: https://discourse.nixos.org/t/java-webstart-nixos-18-09/1136/11 |
Motivation for this change
Old package cannot be built anymore.
Things done
Bump version, fix hashes. Address a concern about the aarch64 source having changed name.
sandbox
innix.conf
on non-NixOS linux)nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
./result/bin/
)nix path-info -S
before and after)