On 28/06/2022 15:29, Zbigniew Jędrzejewski-Szmek wrote:
We can treat this as an experiment. The hope is that Java upstream
is
big enough to be able to release updates for any CVEs in a timely manner,
and that the RHEL/Fedora maintainers are able to provide updates in a timely
manner. If it turns out this is not the case, we can unbundle again.
Upstream doesn't care because their tests fails on modern libraries
versions.
Also, this only the first part of their proposal. The other part is to
let them build the OpenJDK once and then ship prebuilt binaries to all
supported Fedora releases.
--
Sincerely,
Vitaly Zaitsev (vitaly(a)easycoding.org)