Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove openjdk 12, 13, 14, 15, 16 #170825

Closed
mweinelt opened this issue Apr 28, 2022 · 4 comments · Fixed by #331514
Closed

Remove openjdk 12, 13, 14, 15, 16 #170825

mweinelt opened this issue Apr 28, 2022 · 4 comments · Fixed by #331514
Labels
1.severity: security 6.topic: java Including JDK, tooling, other languages, other VMs

Comments

@mweinelt
Copy link
Member

All of these are EOL and releases >=15 haven't received fixes for psychic signatures vulnerability.

https://endoflife.date/java

@edwtjo @asbachb

@dasJ
Copy link
Member

dasJ commented May 23, 2022

Is this still a release blocker? The versions have already been marked as insecure

@mweinelt
Copy link
Member Author

Not a blocker anymore, but still should be removed.

@asbachb
Copy link
Contributor

asbachb commented Jun 11, 2022

I guess for now we cannot remove them easily as they're needed to build the next jdks.

e.g. for 17 you need 16 to compile. So 16 is the so called bootstrap jdk.

I had a look at the current implementation. Currently for non x86 jdk builds NixOS is using adoptopenjdk binary builds and for x86 NixOS is using previous nixos packaged variant.

Basically the problem is that nor OpenJDK nor Adoptium is currently providing x86 builds for linux which we could use as binary bootstrap jdk.

@emilazy
Copy link
Member

emilazy commented Aug 1, 2024

Fixed by #331514 (actually everything but 16 is totally gone already, but now 18, 19, and 20 are EOL as well).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
1.severity: security 6.topic: java Including JDK, tooling, other languages, other VMs
Projects
Development

Successfully merging a pull request may close this issue.

5 participants