[Bug 2096928] New: maven pulls in jdk and jdk-devel even though can work with just java-headless
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2096928
Bug ID: 2096928
Summary: maven pulls in jdk and jdk-devel even though can work
with just java-headless
Product: Fedora
Version: 36
Status: NEW
Component: maven
Severity: medium
Assignee: mizdebsk(a)redhat.com
Reporter: rvkagan(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msrb(a)redhat.com
Target Milestone: ---
Classification: Fedora
Description of problem:
maven package depends (via respective maven-openjdkXX subpackages) on
java-XX-openjdk-devel and subsequently on java-XX-openjdk packages, which in
turn pull in various GUI-related stuff.
OTOH java-XX-openjdk-headless appears to be sufficient for a useful maven
setup.
Version-Release number of selected component (if applicable):
maven-3.8.4-3.fc36
How reproducible:
always
Steps to Reproduce:
1. dnf install maven
Actual results:
maven installation pulls in a lot of GUI-related stuff by dependencies
Expected results:
maven installs and runs with a headless java setup
Additional info:
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2096928
11 months, 1 week
[Bug 1988896] New: weird build error with xmvn-mojo:4.0.0:javadoc (default-cli) @ log4j
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1988896
Bug ID: 1988896
Summary: weird build error with xmvn-mojo:4.0.0:javadoc
(default-cli) @ log4j
Product: Fedora
Version: rawhide
Status: NEW
Component: xmvn
Assignee: mizdebsk(a)redhat.com
Reporter: sergio(a)serjux.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-maint-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
mat.booth(a)gmail.com, mizdebsk(a)redhat.com,
msrb(a)redhat.com
Target Milestone: ---
Classification: Fedora
Created attachment 1809992
--> https://bugzilla.redhat.com/attachment.cgi?id=1809992&action=edit
https://kojipkgs.fedoraproject.org//work/tasks/9723/73109723/build.log
Description of problem:
I can build log4j on F34 but not on Rawhide
xmvn-mojo:3.1.0:javadoc (default-cli) @ log4j --- in build.log
and
xmvn-mojo:4.0.0:javadoc (default-cli) @ log4j ---
/builddir/build/BUILD/apache-log4j-2.14.1-src/log4j-slf4j-impl/src/main/java/org/apache/logging/slf4j/package-info.java:22:
warning: a package-info.java file has already been seen for package
org.apache.logging.slf4j
package org.apache.logging.slf4j;
^
/builddir/build/BUILD/apache-log4j-2.14.1-src/log4j-to-slf4j/src/main/java/org/apache/logging/slf4j/SLF4JLogger.java:25:
error: cannot find symbol
import org.slf4j.MarkerFactory;
take a look in the build.log
--
You are receiving this mail because:
You are on the CC list for the bug.
11 months, 1 week
[Bug 2051223] New: xmpcore fails to build with java-17-openjdk
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2051223
Bug ID: 2051223
Summary: xmpcore fails to build with java-17-openjdk
Product: Fedora
Version: rawhide
Status: NEW
Component: xmpcore
Severity: high
Assignee: jjelen(a)redhat.com
Reporter: jvanek(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: cedric.olivier(a)free.fr, didiksupriadi41(a)gmail.com,
java-maint-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jhuttana(a)redhat.com, jjelen(a)redhat.com,
jvanek(a)redhat.com, pmikova(a)redhat.com,
puntogil(a)libero.it, sgehwolf(a)redhat.com
Blocks: 2024265
Target Milestone: ---
Classification: Fedora
xmpcore fails to build with java-17-openjdk as sytem JDK. See
https://fedoraproject.org/wiki/Changes/Java17 .
See especially part about known failures:
https://fedoraproject.org/wiki/Changes/Java17#common_issues_packagers_can...
For the build logs, see:
https://koji.fedoraproject.org/koji/taskinfo?taskID=82435800
https://kojipkgs.fedoraproject.org/work/tasks/5866/82435866/mock_output.log
https://kojipkgs.fedoraproject.org/work/tasks/5866/82435866/hw_info.log
https://kojipkgs.fedoraproject.org/work/tasks/5866/82435866/state.log
https://kojipkgs.fedoraproject.org/work/tasks/5866/82435866/build.log
https://kojipkgs.fedoraproject.org/work/tasks/5866/82435866/root.log
We run the rebuild in side tag f36-java17, but as fail ratio was small, we
expect this side tag to be merged into rawhide 7 or 8 of February 2022.
To reproduce before this date simply: fedpkg clone xmpcore; cd xmpcore; fedpkg
build --target f36-java17; #The target is crucial.
After this date the usual fedpkg build in f36 and up should do.
We run two reruns your package failed both.
We had also run the mass rebuilds in copr since November. We keep all
encountered failures. See them here:
https://copr.fedorainfracloud.org/coprs/jvanek/java17//package/xmpcore
You may find interesting additional informations here. Also we were spamming
maintainers regualrly, check you spam folder.
We had tried aprox 500 packages, and aprox 65 had failed, so the
java-17-openjdk will be system JDK in f36, and you should fix your package if
you want to keep it alive. Usually the fix is simple, and best is to update the
package to latest upstream version.
There will be usual mass rebuild once f36 branches. You may got another FTBFS
bug.
Let us know here if you have any questions, here in bug, or at
java-devel(a)lists.fedoraproject.org .
We'd appreciate help from the people who know this package best, but if you
don't want to work on this now, let us know so we can try to work around it on
our side if needed.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2024265
[Bug 2024265] java-17-openjdk as system JDK in F36
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2051223
11 months, 1 week
[Bug 2051213] New: serp fails to build with java-17-openjdk
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2051213
Bug ID: 2051213
Summary: serp fails to build with java-17-openjdk
Product: Fedora
Version: rawhide
Status: NEW
Component: serp
Severity: high
Assignee: jjelen(a)redhat.com
Reporter: jvanek(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: didiksupriadi41(a)gmail.com,
java-maint-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jhuttana(a)redhat.com, jjelen(a)redhat.com,
jvanek(a)redhat.com, pmikova(a)redhat.com,
puntogil(a)libero.it, sgehwolf(a)redhat.com
Blocks: 2024265
Target Milestone: ---
Classification: Fedora
serp fails to build with java-17-openjdk as sytem JDK. See
https://fedoraproject.org/wiki/Changes/Java17 .
See especially part about known failures:
https://fedoraproject.org/wiki/Changes/Java17#common_issues_packagers_can...
For the build logs, see:
https://koji.fedoraproject.org/koji/taskinfo?taskID=82434688
https://kojipkgs.fedoraproject.org/work/tasks/4772/82434772/mock_output.log
https://kojipkgs.fedoraproject.org/work/tasks/4772/82434772/hw_info.log
https://kojipkgs.fedoraproject.org/work/tasks/4772/82434772/state.log
https://kojipkgs.fedoraproject.org/work/tasks/4772/82434772/build.log
https://kojipkgs.fedoraproject.org/work/tasks/4772/82434772/root.log
We run the rebuild in side tag f36-java17, but as fail ratio was small, we
expect this side tag to be merged into rawhide 7 or 8 of February 2022.
To reproduce before this date simply: fedpkg clone serp; cd serp; fedpkg build
--target f36-java17; #The target is crucial.
After this date the usual fedpkg build in f36 and up should do.
We run two reruns your package failed both.
We had also run the mass rebuilds in copr since November. We keep all
encountered failures. See them here:
https://copr.fedorainfracloud.org/coprs/jvanek/java17//package/serp
You may find interesting additional informations here. Also we were spamming
maintainers regualrly, check you spam folder.
We had tried aprox 500 packages, and aprox 65 had failed, so the
java-17-openjdk will be system JDK in f36, and you should fix your package if
you want to keep it alive. Usually the fix is simple, and best is to update the
package to latest upstream version.
There will be usual mass rebuild once f36 branches. You may got another FTBFS
bug.
Let us know here if you have any questions, here in bug, or at
java-devel(a)lists.fedoraproject.org .
We'd appreciate help from the people who know this package best, but if you
don't want to work on this now, let us know so we can try to work around it on
our side if needed.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2024265
[Bug 2024265] java-17-openjdk as system JDK in F36
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2051213
11 months, 1 week
[Bug 2051153] New: hibernate-jpa-2.1-api fails to build with java-17-openjdk
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2051153
Bug ID: 2051153
Summary: hibernate-jpa-2.1-api fails to build with
java-17-openjdk
Product: Fedora
Version: rawhide
Status: NEW
Component: hibernate-jpa-2.1-api
Severity: high
Assignee: jjelen(a)redhat.com
Reporter: jvanek(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: didiksupriadi41(a)gmail.com,
java-maint-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jhuttana(a)redhat.com, jjelen(a)redhat.com,
jvanek(a)redhat.com, lef(a)fedoraproject.org,
pmikova(a)redhat.com, puntogil(a)libero.it,
sgehwolf(a)redhat.com
Blocks: 2024265
Target Milestone: ---
Classification: Fedora
hibernate-jpa-2.1-api fails to build with java-17-openjdk as sytem JDK. See
https://fedoraproject.org/wiki/Changes/Java17 .
See especially part about known failures:
https://fedoraproject.org/wiki/Changes/Java17#common_issues_packagers_can...
For the build logs, see:
https://koji.fedoraproject.org/koji/taskinfo?taskID=82426726
https://kojipkgs.fedoraproject.org/work/tasks/6838/82426838/mock_output.log
https://kojipkgs.fedoraproject.org/work/tasks/6838/82426838/hw_info.log
https://kojipkgs.fedoraproject.org/work/tasks/6838/82426838/state.log
https://kojipkgs.fedoraproject.org/work/tasks/6838/82426838/build.log
https://kojipkgs.fedoraproject.org/work/tasks/6838/82426838/root.log
We run the rebuild in side tag f36-java17, but as fail ratio was small, we
expect this side tag to be merged into rawhide 7 or 8 of February 2022.
To reproduce before this date simply: fedpkg clone hibernate-jpa-2.1-api; cd
hibernate-jpa-2.1-api; fedpkg build --target f36-java17; #The target is
crucial.
After this date the usual fedpkg build in f36 and up should do.
We run two reruns your package failed both.
We had also run the mass rebuilds in copr since November. We keep all
encountered failures. See them here:
https://copr.fedorainfracloud.org/coprs/jvanek/java17//package/hibernate-...
You may find interesting additional informations here. Also we were spamming
maintainers regualrly, check you spam folder.
We had tried aprox 500 packages, and aprox 65 had failed, so the
java-17-openjdk will be system JDK in f36, and you should fix your package if
you want to keep it alive. Usually the fix is simple, and best is to update the
package to latest upstream version.
There will be usual mass rebuild once f36 branches. You may got another FTBFS
bug.
Let us know here if you have any questions, here in bug, or at
java-devel(a)lists.fedoraproject.org .
We'd appreciate help from the people who know this package best, but if you
don't want to work on this now, let us know so we can try to work around it on
our side if needed.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2024265
[Bug 2024265] java-17-openjdk as system JDK in F36
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2051153
11 months, 1 week
[Bug 2051133] New: apache-commons-fileupload fails to build with java-17-openjdk
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2051133
Bug ID: 2051133
Summary: apache-commons-fileupload fails to build with
java-17-openjdk
Product: Fedora
Version: rawhide
Status: NEW
Component: apache-commons-fileupload
Severity: high
Assignee: jjelen(a)redhat.com
Reporter: jvanek(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: didiksupriadi41(a)gmail.com,
java-maint-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jerboaa(a)gmail.com, jhuttana(a)redhat.com,
jjelen(a)redhat.com, jvanek(a)redhat.com,
mizdebsk(a)redhat.com, pmikova(a)redhat.com,
sgehwolf(a)redhat.com, SpikeFedora(a)gmail.com
Blocks: 2024265
Target Milestone: ---
Classification: Fedora
apache-commons-fileupload fails to build with java-17-openjdk as sytem JDK. See
https://fedoraproject.org/wiki/Changes/Java17 .
See especially part about known failures:
https://fedoraproject.org/wiki/Changes/Java17#common_issues_packagers_can...
For the build logs, see:
https://koji.fedoraproject.org/koji/taskinfo?taskID=82423307
https://kojipkgs.fedoraproject.org/work/tasks/3359/82423359/mock_output.log
https://kojipkgs.fedoraproject.org/work/tasks/3359/82423359/hw_info.log
https://kojipkgs.fedoraproject.org/work/tasks/3359/82423359/state.log
https://kojipkgs.fedoraproject.org/work/tasks/3359/82423359/build.log
https://kojipkgs.fedoraproject.org/work/tasks/3359/82423359/root.log
We run the rebuild in side tag f36-java17, but as fail ratio was small, we
expect this side tag to be merged into rawhide 7 or 8 of February 2022.
To reproduce before this date simply: fedpkg clone apache-commons-fileupload;
cd apache-commons-fileupload; fedpkg build --target f36-java17; #The target is
crucial.
After this date the usual fedpkg build in f36 and up should do.
We run two reruns your package failed both.
We had also run the mass rebuilds in copr since November. We keep all
encountered failures. See them here:
https://copr.fedorainfracloud.org/coprs/jvanek/java17//package/apache-com...
You may find interesting additional informations here. Also we were spamming
maintainers regualrly, check you spam folder.
We had tried aprox 500 packages, and aprox 65 had failed, so the
java-17-openjdk will be system JDK in f36, and you should fix your package if
you want to keep it alive. Usually the fix is simple, and best is to update the
package to latest upstream version.
There will be usual mass rebuild once f36 branches. You may got another FTBFS
bug.
Let us know here if you have any questions, here in bug, or at
java-devel(a)lists.fedoraproject.org .
We'd appreciate help from the people who know this package best, but if you
don't want to work on this now, let us know so we can try to work around it on
our side if needed.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2024265
[Bug 2024265] java-17-openjdk as system JDK in F36
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2051133
11 months, 1 week
[Bug 2141334] New: CVE-2022-42252 tomcat: request smuggling [fedora-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2141334
Bug ID: 2141334
Summary: CVE-2022-42252 tomcat: request smuggling [fedora-all]
Product: Fedora
Version: 36
Status: NEW
Component: tomcat
Keywords: Security, SecurityTracking
Severity: low
Priority: low
Assignee: csutherl(a)redhat.com
Reporter: pdelbell(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: alee(a)redhat.com, coolsvap(a)gmail.com,
csutherl(a)redhat.com, gzaronikas(a)gmail.com,
huwang(a)redhat.com, ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
krzysztof.daniel(a)gmail.com
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2141329
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2141334
11 months, 1 week
[Bug 2133650] New: CVE-2021-43980 tomcat: : Apache Tomcat: Information disclosure [fedora-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2133650
Bug ID: 2133650
Summary: CVE-2021-43980 tomcat: : Apache Tomcat: Information
disclosure [fedora-all]
Product: Fedora
Version: 36
Status: NEW
Component: tomcat
Keywords: Security, SecurityTracking
Severity: low
Priority: low
Assignee: csutherl(a)redhat.com
Reporter: trathi(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: alee(a)redhat.com, coolsvap(a)gmail.com,
csutherl(a)redhat.com, gzaronikas(a)gmail.com,
huwang(a)redhat.com, ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
krzysztof.daniel(a)gmail.com
Target Milestone: ---
Classification: Fedora
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2133650
11 months, 1 week