On Tue, Apr 26, 2016 at 2:06 PM, Oved Ourfali <oourfali@redhat.com> wrote:

So what do you suggest to do?


Promptly file a bug on OpenJDK.
 

Just wait for a release fixing it by the openjdk guys?


Contact the OpenJDK maintainer @ RH.
 

I guess it depends on when can we expect such a release to take place.


Who knows. Generally, Oracle releases a monthly security patchset, but who knows if it'll be fixed in the next issue? There are regressions in every patchset they release (which is why so many just bundle a JRE with their app...). We must report it.
Y.
 

On Apr 25, 2016 21:57, "Yaniv Kaul" <ykaul@redhat.com> wrote:
>
> Since this Java update solves several CVEs, I don't see how we can roll back.
> Y.
>
> On Mon, Apr 25, 2016 at 9:43 PM, Piotr Kliczewski <pkliczew@redhat.com> wrote:
>>
>> I pushed [1] patch to keep specific version of java but I see jenkins complaining about it:
>>
>> Package matching 1:java-1.8.0-openjdk-devel-1.8.0.60-14.b27.fc23.x86_64 already installed. Checking for update.
>>
>> and later:
>>
>> 18:39:15 error: Failed build dependencies:
>> 18:39:15 java-1.8.0-openjdk-devel = 1:1.8.0.60 is needed by vdsm-jsonrpc-java-1.2.2-master.fc23.noarch
>>
>>
>>
>> [1] https://gerrit.ovirt.org/#/c/56583
>>
>> On Mon, Apr 25, 2016 at 8:15 PM, Piotr Kliczewski <pkliczew@redhat.com> wrote:
>>>
>>> I downgraded to java-1.8.0-openjdk-1.8.0.60-14.b27 and it works again.
>>>
>>> We need to make sure that we update you spec files.
>>>
>>> On Mon, Apr 25, 2016 at 7:46 PM, Piotr Kliczewski <pkliczew@redhat.com> wrote:
>>>>
>>>> I looks like it was already reported [1].
>>>>
>>>>
>>>> [1] https://bugzilla.redhat.com/1329342
>>>>
>>>> On Mon, Apr 25, 2016 at 7:42 PM, Piotr Kliczewski <pkliczew@redhat.com> wrote:
>>>>>
>>>>> It is interesting to see that ssl communication stopped working on CI only for f23.
>>>>>
>>>>> I have tested it for some time and was not able to reproduce the issue.
>>>>>
>>>>> After a while I noticed that there are some updates including java.
>>>>>
>>>>> In between my tests I updated my system (f23) and first attempt reproduced the issue.
>>>>>
>>>>> One of the packages being updated:
>>>>>
>>>>> java-1.8.0-openjdk.x86_64 1:1.8.0.91-1.b14.fc23
>>>>>
>>>>> Investigating what changes were introduced in this version.
>>>>>
>>>>> As workaround we can downgrade java before I will find a fix.
>>>>>
>>>>> Thanks,
>>>>> Piotr
>>>>>
>>>>> On Mon, Apr 25, 2016 at 3:03 PM, Nadav Goldin <ngoldin@redhat.com> wrote:
>>>>>>
>>>>>> Hey Piotr and Oved,
>>>>>> Can you have a look at:
>>>>>> http://jenkins.ovirt.org/job/vdsm-jsonrpc-java_master_build-artifacts-fc23-x86_64/3/console
>>>>>> http://jenkins.ovirt.org/job/vdsm-jsonrpc-java_3.6_build-artifacts-fc23-x86_64/1/console
>>>>>>
>>>>>>> >> 07:02:35 Tests run: 3, Failures: 0, Errors: 3, Skipped: 0, Time elapsed: 560.634 sec <<< FAILURE! - in org.ovirt.vdsm.jsonrpc.client.reactors.stomp.SSLStompClientTestCase
>>>>>>> >> 07:02:35 testLongMessage(org.ovirt.vdsm.jsonrpc.client.reactors.stomp.SSLStompClientTestCase)  Time elapsed: 180.56 sec  <<< ERROR!
>>>>>>> >> 07:02:35 org.ovirt.vdsm.jsonrpc.client.ClientConnectionException: Connection timeout
>>>>>>
>>>>>>
>>>>>> to ensure this isn't related to the Jenkins migration I re-triggered it on the old instance with the same results(http://jenkins-old.ovirt.org/job/vdsm-jsonrpc-java_master_build-artifacts-fc23-x86_64/14/)
>>>>>>
>>>>>> Thanks,
>>>>>>
>>>>>> Nadav.
>>>>>>
>>>>>
>>>>
>>>
>>
>