endoflife-date / endoflife.date

Informative site with EoL dates of everything
https://endoflife.date
MIT License
2.52k stars 788 forks source link

GraalVM Community Edition Policy/EOL seem incorrect #5671

Open captn3m0 opened 3 months ago

captn3m0 commented 3 months ago

https://endoflife.date/graalvm tracks the Community Edition. Last release on Community Edition for v17 is 17.0.9, while Oracle GraalVM is at 17.0.12 now, with security fixes. I am wondering if this line:

But starting with JDK 20 in June 2023, GraalVM follows the JDK’s six-month release cadence and only supports the latest JDK version (just as Oracle OpenJDK releases do).

is applied more on the date (starting from June 2023), rather than on specific releases. So the policy changed for all releases (including past ones?) on June 2023.

Aside: We should also track the Commercial Edition, which seems to be fixing CVEs that the Community Edition is ignoring: https://www.oracle.com/security-alerts/cpujul2024.html#AppendixJAVA

marcwrobel commented 3 months ago

Relates to #5125