[Bug 1858020] New: junit fails to build with java-11-openjdk
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1858020
Bug ID: 1858020
Summary: junit fails to build with java-11-openjdk
Product: Fedora
Version: rawhide
Hardware: All
OS: All
Status: NEW
Component: junit
Severity: high
Assignee: stewardship-sig(a)lists.fedoraproject.org
Reporter: jvanek(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: dbhole(a)redhat.com, decathorpe(a)gmail.com,
java-maint-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jvanek(a)redhat.com, krzysztof.daniel(a)gmail.com,
mizdebsk(a)redhat.com, sgehwolf(a)redhat.com,
sochotni(a)redhat.com,
stewardship-sig(a)lists.fedoraproject.org
Blocks: 1825969 (Java11)
Target Milestone: ---
Classification: Fedora
junit fails to build with java-11-openjdk as sytem JDK. See
https://fedoraproject.org/wiki/Changes/Java11 .
See especially part about known failures:
https://fedoraproject.org/wiki/Changes/Java11#common_issues_packagers_can...
For the build logs, see:
https://koji.fedoraproject.org/koji/taskinfo?taskID=47156487
We run the rebuild longer then 10days ago. Log may be gone. Also your package
may be passing in regular rawhide.
To reproduce, simply: fedpkg clone junit; cd junit; fedpkg build --target
f33-java11; #The target is crucial.
We run two reruns your package failed both.
We had tried 650 packages, and 500 had passed, so the java-11-openjdk will be
system JDK in f33, and you should fix your package if you want to keep it
alive. Usually the fix is simple, and best is to update the package to latest
upstream version.
There will be usual mass rebuild once f33 branches. You may got another FTBFS
bug.
Let us know here if you have any questions, here in bug, or at
java-devel(a)lists.fedoraproject.org .
We'd appreciate help from the people who know this package best, but if you
don't want to work on this now, let us know so we can try to work around it on
our side if needed.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1825969
[Bug 1825969] java-11-openjdk as system JDK in F33
--
You are receiving this mail because:
You are on the CC list for the bug.
3 years, 8 months
[Bug 1866570] FreeIPA deployment fails in current Rawhide due to various issues with Java 11
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1866570
Adam Williamson <awilliam(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Summary|FreeIPA deployment fails in |FreeIPA deployment fails in
|current Rawhide (due to |current Rawhide due to
|tomcat incompatibility with |various issues with Java 11
|Java 11) |
--- Comment #7 from Adam Williamson <awilliam(a)redhat.com> ---
Alex: I think we may be reading "so we can assume it is going to be usable once
we fix all the dependencies and incompatibilities" differently. But the larger
point is that, ultimately, dogtag-in-FreeIPA-in-Fedora needs to work with Java
11 and that's what this bug is for, it wasn't intended to be for one specific
sub-component of that. If just fixing resteasy isn't going to make FreeIPA work
again, then this bug isn't fixed when resteasy is fixed...
--
You are receiving this mail because:
You are on the CC list for the bug.
3 years, 8 months
[Bug 1866570] FreeIPA deployment fails in current Rawhide (due to tomcat incompatibility with Java 11)
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1866570
Fabio Valentini <decathorpe(a)gmail.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |decathorpe(a)gmail.com
--- Comment #6 from Fabio Valentini <decathorpe(a)gmail.com> ---
So maybe comparing versions of dogtag-pki dependencies between what we have in
fedora (which is not working) and what is in debian (which is working) can be a
starting point? I can prioritize those packages (if they are mine or the
Stewardship/Java SIG's), to close the difference, which should help.
--
You are receiving this mail because:
You are on the CC list for the bug.
3 years, 8 months
[Bug 1866570] FreeIPA deployment fails in current Rawhide (due to tomcat incompatibility with Java 11)
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1866570
--- Comment #5 from Alex Scheel <ascheel(a)redhat.com> ---
Adam -- not sure I follow. My reading of what Alexander says (and our
experience with Debian) shows that the Dogtag proper doesn't have JDK 11
issues. Fedora's packaging of Dogtag's dependencies are what have Java 11
issues at the current moment. Most telling is that, while Debian also ships
Dogtag at a similar version, they don't have this particular issue, per
discussion with Timo on #freeipa. (He has one remaining Tomcat bug, but that
came up recently due to versions of bnd mismatched with what upstream Tomcat
was targeting).
If there are specific issues with Dogtag, these should be noted and resolved.
However, if the issues are in the dependencies, I think it is disingenuous to
call them Dogtag bugs, any more so than a bug in glibc shouldn't result in
several hundred bugs filed against every component that uses glibc.
Short of rewriting Dogtag to avoid one of our most heavily used libraries
(resteasy provides all our REST API infrastructure), there's no way to avoid
this on Dogtag's part. We should document the bug in the component the bug is
in, and provide a fix for that component. Even though Dogtag is the only
consumer of Resteasy in the published Fedora repositories.
If you -- or anyone else! -- would like to contribute to rewriting Dogtag to
avoid resteasy, consider this a warm invitation :-) I'll happily merge the code
upstream because it will save us many person-months of maintenance on a JBoss
package they don't support in Fedora and RHEL.
If you want to file a tracker bug blocking Fedora 33 because FreeIPA is broken,
shouldn't that tracker bug be filed against FreeIPA, as that is the
release-blocking component? Then we can file a separate bug against resteasy
and mark it blocking this bug, and so on, until all Dogtag dependencies are
fixed.
My 2c.
--
You are receiving this mail because:
You are on the CC list for the bug.
3 years, 8 months
[Bug 1848960] New: CVE-2020-14060 jackson-databind: serialization gadgets in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1848960
Bug ID: 1848960
Summary: CVE-2020-14060 jackson-databind: serialization gadgets
in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: darunesh(a)redhat.com
CC: aboyko(a)redhat.com, aileenc(a)redhat.com,
akoufoud(a)redhat.com, alazarot(a)redhat.com,
almorale(a)redhat.com, anstephe(a)redhat.com,
aos-bugs(a)redhat.com, asoldano(a)redhat.com,
atangrin(a)redhat.com, ataylor(a)redhat.com,
avibelli(a)redhat.com, bbaranow(a)redhat.com,
bbuckingham(a)redhat.com, bcourt(a)redhat.com,
bgeorges(a)redhat.com, bibryam(a)redhat.com,
bkearney(a)redhat.com, bmaxwell(a)redhat.com,
bmontgom(a)redhat.com, brian.stansberry(a)redhat.com,
btotty(a)redhat.com, cdewolf(a)redhat.com,
chazlett(a)redhat.com, clement.escoffier(a)redhat.com,
dandread(a)redhat.com, darran.lofthouse(a)redhat.com,
dbecker(a)redhat.com, decathorpe(a)gmail.com,
dkreling(a)redhat.com, dosoudil(a)redhat.com,
drieden(a)redhat.com, eparis(a)redhat.com,
etirelli(a)redhat.com, ganandan(a)redhat.com,
ggaughan(a)redhat.com, gmalinko(a)redhat.com,
gsmet(a)redhat.com, hhorak(a)redhat.com,
hhudgeon(a)redhat.com, ibek(a)redhat.com,
iweiss(a)redhat.com, janstey(a)redhat.com,
java-maint(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jawilson(a)redhat.com, jbalunas(a)redhat.com,
jburrell(a)redhat.com, jcantril(a)redhat.com,
jjoyce(a)redhat.com, jochrist(a)redhat.com,
jokerman(a)redhat.com, jorton(a)redhat.com,
jpallich(a)redhat.com, jperkins(a)redhat.com,
jross(a)redhat.com, jschluet(a)redhat.com,
jstastny(a)redhat.com, jwon(a)redhat.com,
kbasil(a)redhat.com, krathod(a)redhat.com,
kverlaen(a)redhat.com, kwills(a)redhat.com,
lef(a)fedoraproject.org, lgao(a)redhat.com,
lhh(a)redhat.com, lpeer(a)redhat.com, lthon(a)redhat.com,
lzap(a)redhat.com, mburns(a)redhat.com,
mkolesni(a)redhat.com, mmccune(a)redhat.com,
mnovotny(a)redhat.com, msochure(a)redhat.com,
msvehla(a)redhat.com, mszynkie(a)redhat.com,
nmoumoul(a)redhat.com, nstielau(a)redhat.com,
nwallace(a)redhat.com, pantinor(a)redhat.com,
paradhya(a)redhat.com, pgallagh(a)redhat.com,
pjindal(a)redhat.com, pmackay(a)redhat.com,
psotirop(a)redhat.com, puntogil(a)libero.it,
rchan(a)redhat.com, rguimara(a)redhat.com,
rjerrido(a)redhat.com, rrajasek(a)redhat.com,
rruss(a)redhat.com, rstancel(a)redhat.com,
rsvoboda(a)redhat.com, rsynek(a)redhat.com,
sbiarozk(a)redhat.com, sclewis(a)redhat.com,
scohen(a)redhat.com, sdaley(a)redhat.com,
sdouglas(a)redhat.com, slinaber(a)redhat.com,
smaestri(a)redhat.com, sokeeffe(a)redhat.com,
sponnaga(a)redhat.com,
stewardship-sig(a)lists.fedoraproject.org,
swoodman(a)redhat.com, tbrisker(a)redhat.com,
tom.jenkinson(a)redhat.com
Target Milestone: ---
Classification: Other
A Vulnerability was found in FasterXML jackson-databind 2.x before 2.9.10.5
mishandles the interaction between serialization gadgets and typing, related to
oadd.org.apache.xalan.lib.sql.JNDIConnectionPool
References:
https://github.com/FasterXML/jackson-databind/issues/2688
https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-...
--
You are receiving this mail because:
You are on the CC list for the bug.
3 years, 8 months