[gentoo-user] sun-jre-bin end-of-life - what now?

[gentoo-user] sun-jre-bin end-of-life - what now?

[Mark Knecht]

Hi,
   It seems that Gentoo-devs have decided that Sun Java is end-of-life
with security problems. I don't find any mention of this or what is
recommended on the Gentoo front page so I figured I'd ask what others
are doing for their machines.

Thanks,
Mark

[gentoo-user] Re: sun-jre-bin end-of-life - what now?

[Mark Knecht]

On Mon, Nov 9, 2009 at 6:13 PM, Mark Knecht <markknecht@gmail.com> wrote:
> Hi,
>   It seems that Gentoo-devs have decided that Sun Java is end-of-life
> with security problems. I don't find any mention of this or what is
> recommended on the Gentoo front page so I figured I'd ask what others
> are doing for their machines.
>
> Thanks,
> Mark
>

I found the other post about

ACCEPT_LICENSE="dlj-1.1"

and it works but if Sun Java is really EOL for Gentoo then it would be
nice to know what's the prime directive.

Thanks,
Mark

Re: [gentoo-user] sun-jre-bin end-of-life - what now?

[Dale]

Mark Knecht wrote:
> Hi,
>    It seems that Gentoo-devs have decided that Sun Java is end-of-life
> with security problems. I don't find any mention of this or what is
> recommended on the Gentoo front page so I figured I'd ask what others
> are doing for their machines.
>
> Thanks,
> Mark
>
>   

I checked the changelog and it appears to be stable as of a few days ago. 

# ChangeLog for dev-java/sun-jre-bin
# Copyright 1999-2009 Gentoo Foundation; Distributed under the GPL v2
# $Header: /var/cvsroot/gentoo-x86/dev-java/sun-jre-bin/ChangeLog,v
1.163 2009/11/05 21:28:43 maekke Exp $

  05 Nov 2009; Markus Meier <maekke@gentoo.org> sun-jre-bin-1.5.0.22.ebuild,
  sun-jre-bin-1.6.0.17.ebuild:
  amd64 stable, bug #291817

  05 Nov 2009; Markus Meier <maekke@gentoo.org> sun-jre-bin-1.6.0.17.ebuild:
  x86 stable, bug #291817

  05 Nov 2009; Markus Meier <maekke@gentoo.org> sun-jre-bin-1.5.0.22.ebuild:
  x86 stable, bug #291817


I synced my tree yesterday so unless it was done today it looks like it
is still there.  What kind of message are you getting?

Dale

:-)  :-) 

Re: [gentoo-user] sun-jre-bin end-of-life - what now?

[Mark Knecht]

On Mon, Nov 9, 2009 at 6:27 PM, Dale <rdalek1967@gmail.com> wrote:
> Mark Knecht wrote:
>> Hi,
>>    It seems that Gentoo-devs have decided that Sun Java is end-of-life
>> with security problems. I don't find any mention of this or what is
>> recommended on the Gentoo front page so I figured I'd ask what others
>> are doing for their machines.
>>
>> Thanks,
>> Mark
>>
>>
>
> I checked the changelog and it appears to be stable as of a few days ago.
>
> # ChangeLog for dev-java/sun-jre-bin
> # Copyright 1999-2009 Gentoo Foundation; Distributed under the GPL v2
> # $Header: /var/cvsroot/gentoo-x86/dev-java/sun-jre-bin/ChangeLog,v
> 1.163 2009/11/05 21:28:43 maekke Exp $
>
>  05 Nov 2009; Markus Meier <maekke@gentoo.org> sun-jre-bin-1.5.0.22.ebuild,
>  sun-jre-bin-1.6.0.17.ebuild:
>  amd64 stable, bug #291817
>
>  05 Nov 2009; Markus Meier <maekke@gentoo.org> sun-jre-bin-1.6.0.17.ebuild:
>  x86 stable, bug #291817
>
>  05 Nov 2009; Markus Meier <maekke@gentoo.org> sun-jre-bin-1.5.0.22.ebuild:
>  x86 stable, bug #291817
>
>
> I synced my tree yesterday so unless it was done today it looks like it
> is still there.  What kind of message are you getting?
>
> Dale
>
> :-)  :-)
>
>

Hi Dale,
   If I remove the new ACCEPT_LICENSE="dlj-1.1" I added to make.conf
then I see this:

DesertFlower ~ # emerge -pv sun-jre-bin

These are the packages that would be merged, in order:

Calculating dependencies... done!

!!! All ebuilds that could satisfy "dev-java/sun-jre-bin" have been masked.
!!! One of the following masked packages is required to complete your request:
- dev-java/sun-jre-bin-1.6.0.17 (masked by: dlj-1.1 license(s))
A copy of the 'dlj-1.1' license is located at '/usr/portage/licenses/dlj-1.1'.

- dev-java/sun-jre-bin-1.6.0.16 (masked by: dlj-1.1 license(s), ~x86 keyword)
- dev-java/sun-jre-bin-1.6.0.15 (masked by: dlj-1.1 license(s))
- dev-java/sun-jre-bin-1.5.0.22 (masked by: dlj-1.1 license(s))
- dev-java/sun-jre-bin-1.5.0.21 (masked by: dlj-1.1 license(s), ~x86 keyword)
- dev-java/sun-jre-bin-1.5.0.20 (masked by: dlj-1.1 license(s))
- dev-java/sun-jre-bin-1.4.2.19 (masked by: package.mask)
/usr/portage/profiles/package.mask:
# Vlastimil Babka <caster@gentoo.org> (06 Nov 2009)
# Removal for EOL and security, bug #287615


For more information, see the MASKED PACKAGES section in the emerge
man page or refer to the Gentoo Handbook.

DesertFlower ~ #

Thanks,
Mark

Re: [gentoo-user] sun-jre-bin end-of-life - what now?

[John H. Moe]

Mark Knecht wrote:
> On Mon, Nov 9, 2009 at 6:27 PM, Dale <rdalek1967@gmail.com> wrote:
>   
>> Mark Knecht wrote:
>>     
>>> Hi,
>>>    It seems that Gentoo-devs have decided that Sun Java is end-of-life
>>> with security problems. I don't find any mention of this or what is
>>> recommended on the Gentoo front page so I figured I'd ask what others
>>> are doing for their machines.
>>>
>>> Thanks,
>>> Mark
>>>
>>>
>>>       
>> I checked the changelog and it appears to be stable as of a few days ago.
>>
>> # ChangeLog for dev-java/sun-jre-bin
>> # Copyright 1999-2009 Gentoo Foundation; Distributed under the GPL v2
>> # $Header: /var/cvsroot/gentoo-x86/dev-java/sun-jre-bin/ChangeLog,v
>> 1.163 2009/11/05 21:28:43 maekke Exp $
>>
>>  05 Nov 2009; Markus Meier <maekke@gentoo.org> sun-jre-bin-1.5.0.22.ebuild,
>>  sun-jre-bin-1.6.0.17.ebuild:
>>  amd64 stable, bug #291817
>>
>>  05 Nov 2009; Markus Meier <maekke@gentoo.org> sun-jre-bin-1.6.0.17.ebuild:
>>  x86 stable, bug #291817
>>
>>  05 Nov 2009; Markus Meier <maekke@gentoo.org> sun-jre-bin-1.5.0.22.ebuild:
>>  x86 stable, bug #291817
>>
>>
>> I synced my tree yesterday so unless it was done today it looks like it
>> is still there.  What kind of message are you getting?
>>
>> Dale
>>
>> :-)  :-)
>>
>>
>>     
>
> Hi Dale,
>    If I remove the new ACCEPT_LICENSE="dlj-1.1" I added to make.conf
> then I see this:
>
> DesertFlower ~ # emerge -pv sun-jre-bin
>
> These are the packages that would be merged, in order:
>
> Calculating dependencies... done!
>
> !!! All ebuilds that could satisfy "dev-java/sun-jre-bin" have been masked.
> !!! One of the following masked packages is required to complete your request:
> - dev-java/sun-jre-bin-1.6.0.17 (masked by: dlj-1.1 license(s))
> A copy of the 'dlj-1.1' license is located at '/usr/portage/licenses/dlj-1.1'.
>
> - dev-java/sun-jre-bin-1.6.0.16 (masked by: dlj-1.1 license(s), ~x86 keyword)
> - dev-java/sun-jre-bin-1.6.0.15 (masked by: dlj-1.1 license(s))
> - dev-java/sun-jre-bin-1.5.0.22 (masked by: dlj-1.1 license(s))
> - dev-java/sun-jre-bin-1.5.0.21 (masked by: dlj-1.1 license(s), ~x86 keyword)
> - dev-java/sun-jre-bin-1.5.0.20 (masked by: dlj-1.1 license(s))
> - dev-java/sun-jre-bin-1.4.2.19 (masked by: package.mask)
> /usr/portage/profiles/package.mask:
> # Vlastimil Babka <caster@gentoo.org> (06 Nov 2009)
> # Removal for EOL and security, bug #287615
>
>
> For more information, see the MASKED PACKAGES section in the emerge
> man page or refer to the Gentoo Handbook.
>
> DesertFlower ~ #
>
> Thanks,
> Mark
>
>
>   
Did you read the bug it referenced?  It sounds like they're removing JRE
1.4 only, not all JRE.  Also, the message you pasted shows that only the
1.4.2.19 is masked by package.mask, which is where that message came
from.  The rest of the versions are masked by dlj-1.1 license (and a few
by ~x86 keyword as well), not by package.mask.

John H. Moe

Re: [gentoo-user] sun-jre-bin end-of-life - what now?

[Mike Edenfield]

On 11/9/2009 9:41 PM, Mark Knecht wrote:

>     If I remove the new ACCEPT_LICENSE="dlj-1.1" I added to make.conf

So don't do that?

> !!! All ebuilds that could satisfy "dev-java/sun-jre-bin" have been masked.
> !!! One of the following masked packages is required to complete your request:
> - dev-java/sun-jre-bin-1.6.0.17 (masked by: dlj-1.1 license(s))
> - dev-java/sun-jre-bin-1.6.0.16 (masked by: dlj-1.1 license(s), ~x86 keyword)
> - dev-java/sun-jre-bin-1.6.0.15 (masked by: dlj-1.1 license(s))
> - dev-java/sun-jre-bin-1.5.0.22 (masked by: dlj-1.1 license(s))
> - dev-java/sun-jre-bin-1.5.0.21 (masked by: dlj-1.1 license(s), ~x86 keyword)
> - dev-java/sun-jre-bin-1.5.0.20 (masked by: dlj-1.1 license(s))
> - dev-java/sun-jre-bin-1.4.2.19 (masked by: package.mask)
 

One very old version is masked off because of security 
problems.  Siz different subsequent versions are available 
as long as you accept the new license.

--Mike

Re: [gentoo-user] sun-jre-bin end-of-life - what now?

[covici]

Mike Edenfield <kutulu@kutulu.org> wrote:

> On 11/9/2009 9:41 PM, Mark Knecht wrote:
> 
> >     If I remove the new ACCEPT_LICENSE="dlj-1.1" I added to make.conf
> 
> So don't do that?
> 
> > !!! All ebuilds that could satisfy "dev-java/sun-jre-bin" have been masked.
> > !!! One of the following masked packages is required to complete your request:
> > - dev-java/sun-jre-bin-1.6.0.17 (masked by: dlj-1.1 license(s))
> > - dev-java/sun-jre-bin-1.6.0.16 (masked by: dlj-1.1 license(s), ~x86 keyword)
> > - dev-java/sun-jre-bin-1.6.0.15 (masked by: dlj-1.1 license(s))
> > - dev-java/sun-jre-bin-1.5.0.22 (masked by: dlj-1.1 license(s))
> > - dev-java/sun-jre-bin-1.5.0.21 (masked by: dlj-1.1 license(s), ~x86 keyword)
> > - dev-java/sun-jre-bin-1.5.0.20 (masked by: dlj-1.1 license(s))
> > - dev-java/sun-jre-bin-1.4.2.19 (masked by: package.mask)
> 
> 
> One very old version is masked off because of security problems.  Siz
> different subsequent versions are available as long as you accept the
> new license.

However, even though I accepted the license in make.conf it still wants
to install dev-java/icedtea6-bin-1.6.1 -- how do I fix this to get it to
continue with the sun product?

-- 
Your life is like a penny.  You're going to lose it.  The question is:
How do
you spend it?

         John Covici
         covici@ccs.covici.com

Re: [gentoo-user] sun-jre-bin end-of-life - what now?

[Mark Knecht]

On Mon, Nov 9, 2009 at 9:00 PM, Mike Edenfield <kutulu@kutulu.org> wrote:
> On 11/9/2009 9:41 PM, Mark Knecht wrote:
>
>>    If I remove the new ACCEPT_LICENSE="dlj-1.1" I added to make.conf
>
> So don't do that?

Right. I only removed it to show the message to Dale.

This was, however, my first time running into this new ACCEPT_LECENSE
thing. I'd not heard of it before and all my machines were failing to
update. The obsolete message, coupled with a bunch of lines talking
about licenses threw me for a loop.

>
>> !!! All ebuilds that could satisfy "dev-java/sun-jre-bin" have been
>> masked.
>> !!! One of the following masked packages is required to complete your
>> request:
>> - dev-java/sun-jre-bin-1.6.0.17 (masked by: dlj-1.1 license(s))
>> - dev-java/sun-jre-bin-1.6.0.16 (masked by: dlj-1.1 license(s), ~x86
>> keyword)
>> - dev-java/sun-jre-bin-1.6.0.15 (masked by: dlj-1.1 license(s))
>> - dev-java/sun-jre-bin-1.5.0.22 (masked by: dlj-1.1 license(s))
>> - dev-java/sun-jre-bin-1.5.0.21 (masked by: dlj-1.1 license(s), ~x86
>> keyword)
>> - dev-java/sun-jre-bin-1.5.0.20 (masked by: dlj-1.1 license(s))
>> - dev-java/sun-jre-bin-1.4.2.19 (masked by: package.mask)
>
>
> One very old version is masked off because of security problems.  Siz
> different subsequent versions are available as long as you accept the new
> license.
>
> --Mike
>
>

Re: [gentoo-user] sun-jre-bin end-of-life - what now?

[Dale]

Mark Knecht wrote:
> On Mon, Nov 9, 2009 at 9:00 PM, Mike Edenfield <kutulu@kutulu.org> wrote:
>   
>> On 11/9/2009 9:41 PM, Mark Knecht wrote:
>>
>>     
>>>    If I remove the new ACCEPT_LICENSE="dlj-1.1" I added to make.conf
>>>       
>> So don't do that?
>>     
>
> Right. I only removed it to show the message to Dale.
>
> This was, however, my first time running into this new ACCEPT_LECENSE
> thing. I'd not heard of it before and all my machines were failing to
> update. The obsolete message, coupled with a bunch of lines talking
> about licenses threw me for a loop.
>
>   

I most likely would have been hit by Mike Tyson too.  The only reason I
hadn't ran into that was that I added it a week or so ago when someone
else ran into this little problem.  That's one thing about subscribing
to this list and -dev, you sort of get a heads up on some things, not
everything but a good bit of them anyway.

Dale

:-)  :-)

Re: [gentoo-user] sun-jre-bin end-of-life - what now?

[Mark Knecht]

On Tue, Nov 10, 2009 at 5:57 AM, Dale <rdalek1967@gmail.com> wrote:
> Mark Knecht wrote:
>> On Mon, Nov 9, 2009 at 9:00 PM, Mike Edenfield <kutulu@kutulu.org> wrote:
>>
>>> On 11/9/2009 9:41 PM, Mark Knecht wrote:
>>>
>>>
>>>>    If I remove the new ACCEPT_LICENSE="dlj-1.1" I added to make.conf
>>>>
>>> So don't do that?
>>>
>>
>> Right. I only removed it to show the message to Dale.
>>
>> This was, however, my first time running into this new ACCEPT_LECENSE
>> thing. I'd not heard of it before and all my machines were failing to
>> update. The obsolete message, coupled with a bunch of lines talking
>> about licenses threw me for a loop.
>>
>>
>
> I most likely would have been hit by Mike Tyson too.  The only reason I
> hadn't ran into that was that I added it a week or so ago when someone
> else ran into this little problem.  That's one thing about subscribing
> to this list and -dev, you sort of get a heads up on some things, not
> everything but a good bit of them anyway.
>
> Dale
>
> :-)  :-)

Nahh....requires that you both subscribe AND read! ;-)

I fail totally on the second account lately.

- Mark