<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Apr 26, 2016 at 2:06 PM, Oved Ourfali <span dir="ltr"><<a href="mailto:oourfali@redhat.com" target="_blank">oourfali@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p dir="ltr">So what do you suggest to do? <br></p></blockquote><div><br></div><div>Promptly file a bug on OpenJDK.</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p dir="ltr">
Just wait for a release fixing it by the openjdk guys? <br></p></blockquote><div><br></div><div>Contact the OpenJDK maintainer @ RH.</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p dir="ltr">
I guess it depends on when can we expect such a release to take place.</p></blockquote><div><br></div><div>Who knows. Generally, Oracle releases a monthly security patchset, but who knows if it'll be fixed in the next issue? There are regressions in every patchset they release (which is why so many just bundle a JRE with their app...). We must report it.</div><div>Y.</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="HOEnZb"><div class="h5">
<p dir="ltr">On Apr 25, 2016 21:57, "Yaniv Kaul" <<a href="mailto:ykaul@redhat.com" target="_blank">ykaul@redhat.com</a>> wrote:<br>
><br>
> Since this Java update solves several CVEs, I don't see how we can roll back.<br>
> Y.<br>
><br>
> On Mon, Apr 25, 2016 at 9:43 PM, Piotr Kliczewski <<a href="mailto:pkliczew@redhat.com" target="_blank">pkliczew@redhat.com</a>> wrote:<br>
>><br>
>> I pushed [1] patch to keep specific version of java but I see jenkins complaining about it:<br>
>><br>
>> Package matching 1:java-1.8.0-openjdk-devel-1.8.0.60-14.b27.fc23.x86_64 already installed. Checking for update.<br>
>><br>
>> and later:<br>
>><br>
>> 18:39:15 error: Failed build dependencies:<br>
>> 18:39:15 java-1.8.0-openjdk-devel = 1:1.8.0.60 is needed by vdsm-jsonrpc-java-1.2.2-master.fc23.noarch<br>
>><br>
>><br>
>><br>
>> [1] <a href="https://gerrit.ovirt.org/#/c/56583" target="_blank">https://gerrit.ovirt.org/#/c/56583</a><br>
>><br>
>> On Mon, Apr 25, 2016 at 8:15 PM, Piotr Kliczewski <<a href="mailto:pkliczew@redhat.com" target="_blank">pkliczew@redhat.com</a>> wrote:<br>
>>><br>
>>> I downgraded to java-1.8.0-openjdk-1.8.0.60-14.b27 and it works again.<br>
>>><br>
>>> We need to make sure that we update you spec files.<br>
>>><br>
>>> On Mon, Apr 25, 2016 at 7:46 PM, Piotr Kliczewski <<a href="mailto:pkliczew@redhat.com" target="_blank">pkliczew@redhat.com</a>> wrote:<br>
>>>><br>
>>>> I looks like it was already reported [1].<br>
>>>><br>
>>>><br>
>>>> [1] <a href="https://bugzilla.redhat.com/1329342" target="_blank">https://bugzilla.redhat.com/1329342</a><br>
>>>><br>
>>>> On Mon, Apr 25, 2016 at 7:42 PM, Piotr Kliczewski <<a href="mailto:pkliczew@redhat.com" target="_blank">pkliczew@redhat.com</a>> wrote:<br>
>>>>><br>
>>>>> It is interesting to see that ssl communication stopped working on CI only for f23.<br>
>>>>><br>
>>>>> I have tested it for some time and was not able to reproduce the issue.<br>
>>>>><br>
>>>>> After a while I noticed that there are some updates including java.<br>
>>>>><br>
>>>>> In between my tests I updated my system (f23) and first attempt reproduced the issue.<br>
>>>>><br>
>>>>> One of the packages being updated:<br>
>>>>><br>
>>>>> java-1.8.0-openjdk.x86_64 1:1.8.0.91-1.b14.fc23<br>
>>>>><br>
>>>>> Investigating what changes were introduced in this version.<br>
>>>>><br>
>>>>> As workaround we can downgrade java before I will find a fix.<br>
>>>>><br>
>>>>> Thanks,<br>
>>>>> Piotr<br>
>>>>><br>
>>>>> On Mon, Apr 25, 2016 at 3:03 PM, Nadav Goldin <<a href="mailto:ngoldin@redhat.com" target="_blank">ngoldin@redhat.com</a>> wrote:<br>
>>>>>><br>
>>>>>> Hey Piotr and Oved,<br>
>>>>>> Can you have a look at:<br>
>>>>>> <a href="http://jenkins.ovirt.org/job/vdsm-jsonrpc-java_master_build-artifacts-fc23-x86_64/3/console" target="_blank">http://jenkins.ovirt.org/job/vdsm-jsonrpc-java_master_build-artifacts-fc23-x86_64/3/console</a><br>
>>>>>> <a href="http://jenkins.ovirt.org/job/vdsm-jsonrpc-java_3.6_build-artifacts-fc23-x86_64/1/console" target="_blank">http://jenkins.ovirt.org/job/vdsm-jsonrpc-java_3.6_build-artifacts-fc23-x86_64/1/console</a><br>
>>>>>><br>
>>>>>>> >> 07:02:35 Tests run: 3, Failures: 0, Errors: 3, Skipped: 0, Time elapsed: 560.634 sec <<< FAILURE! - in org.ovirt.vdsm.jsonrpc.client.reactors.stomp.SSLStompClientTestCase<br>
>>>>>>> >> 07:02:35 testLongMessage(org.ovirt.vdsm.jsonrpc.client.reactors.stomp.SSLStompClientTestCase) Time elapsed: 180.56 sec <<< ERROR!<br>
>>>>>>> >> 07:02:35 org.ovirt.vdsm.jsonrpc.client.ClientConnectionException: Connection timeout<br>
>>>>>><br>
>>>>>><br>
>>>>>> to ensure this isn't related to the Jenkins migration I re-triggered it on the old instance with the same results(<a href="http://jenkins-old.ovirt.org/job/vdsm-jsonrpc-java_master_build-artifacts-fc23-x86_64/14/" target="_blank">http://jenkins-old.ovirt.org/job/vdsm-jsonrpc-java_master_build-artifacts-fc23-x86_64/14/</a>)<br>
>>>>>><br>
>>>>>> Thanks,<br>
>>>>>><br>
>>>>>> Nadav.<br>
>>>>>><br>
>>>>><br>
>>>><br>
>>><br>
>><br>
><br>
</p>
</div></div></blockquote></div><br></div></div>