Bug#912333: openjdk-8-jdk: breaks maven-surefire-plugin (security-caused regression)

2019-01-23 Thread Santiago Vila
reopen 912333 severity 912333 serious thanks On Tue, 6 Nov 2018, Santiago Vila wrote: > Today I tried to build "jruby" in stretch on a system having > stretch + security + stretch-proposed-updates in sources.list > and it failed with an error like this: > > [ERROR] Failed to execute goal >

Bug#912333: openjdk-8-jdk: breaks maven-surefire-plugin (security-caused regression)

2018-11-06 Thread Santiago Vila
Hi. Today I tried to build "jruby" in stretch on a system having stretch + security + stretch-proposed-updates in sources.list and it failed with an error like this: [ERROR] Failed to execute goal org.apache.maven.plugins:maven-surefire-plugin:2.17:test (default-test) on project jruby-core:

Bug#912333: openjdk-8-jdk: breaks maven-surefire-plugin (security-caused regression)

2018-11-02 Thread Thorsten Glaser
Dixi quod… > Note I haven’t finished building it yet so it’s untested. I’ve tested it now, on stretch. It works. > But I’d still love to see it uploaded to Debian proper. bye, //mirabilos -- tarent solutions GmbH Rochusstraße 2-4, D-53123 Bonn • http://www.tarent.de/ Tel: +49 228 54881-393 •

Bug#912333: openjdk-8-jdk: breaks maven-surefire-plugin (security-caused regression)

2018-11-02 Thread Thorsten Glaser
tags 912333 + patch thanks Dixi quod… > Thanks, that might prove useful if Surefire and OpenJDK > people can’t fight it out between themselves. There’s progress from the Surefire side: they will put out an alpha version (3.0.0-M1) in three days which contains a fix for this issue. On the other

Bug#912333: openjdk-8-jdk: breaks maven-surefire-plugin (security-caused regression)

2018-10-31 Thread Thorsten Glaser
On Tue, 30 Oct 2018, Mannix, Brendan wrote: > 2.22.1 > > false > Actually this has other implications. At least one person reported in https://stackoverflow.com/a/53083806/2171120 that it breaks other things, such as “class loading in some of my Spring Boot

Bug#912333: openjdk-8-jdk: breaks maven-surefire-plugin (security-caused regression)

2018-10-31 Thread Thorsten Glaser
On Tue, 30 Oct 2018, Moritz Muehlenhoff wrote: > This is an intentional upstream change Considering https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=911925#38 no, it isn’t, it’s supposed to default to disabled. bye, //mirabilos -- tarent solutions GmbH Rochusstraße 2-4, D-53123 Bonn •

Bug#912333: openjdk-8-jdk: breaks maven-surefire-plugin (security-caused regression)

2018-10-30 Thread Thorsten Glaser
On Tue, 30 Oct 2018, Mannix, Brendan wrote: > I worked around this issue for my team today by upgrading to surefire > 2.22.1 and adding the element below to the configuration: > > 2.22.1 > > false > Thanks, that might prove useful if Surefire and OpenJDK people

Bug#912333: openjdk-8-jdk: breaks maven-surefire-plugin (security-caused regression)

2018-10-30 Thread Thorsten Glaser
On Tue, 30 Oct 2018, Moritz Muehlenhoff wrote: > When/if this is reported/fix in src:surefire, we can release an update for it. No, you can’t, because this breaks the maven-surefire-plugin in Central, not libsurefire-java in Debian, which I don’t even have installed. A user (internet, not of

Bug#912333: openjdk-8-jdk: breaks maven-surefire-plugin (security-caused regression)

2018-10-30 Thread Moritz Muehlenhoff
On Tue, Oct 30, 2018 at 05:41:42PM +0100, Thorsten Glaser wrote: > Doko, we need a fix for this for openjdk-8 at least > (openjdk-10 users can just upgrade to 11 which doesn’t > exhibit those problems), kinda urgently. This is an intentional upstream change | Improved Validation of Class-Path

Bug#912333: openjdk-8-jdk: breaks maven-surefire-plugin (security-caused regression)

2018-10-30 Thread Thorsten Glaser
Hi Moritz, this should never have been backported. It FTBFS on release architectures anyway, and introduces these regressions. Doko, we need a fix for this for openjdk-8 at least (openjdk-10 users can just upgrade to 11 which doesn’t exhibit those problems), kinda urgently. I can no longer work

Bug#912333: openjdk-8-jdk: breaks maven-surefire-plugin (security-caused regression)

2018-10-30 Thread Thorsten Glaser
Hi Doko & Co., I’ve just upgraded *only* openjdk-8-{jdk,jre}{,-headless} on a previously fully dist-upgraded Debian sid/amd64 machine and ran a maven build both before and after (on some internal software) and found that the bug has been backported from OpenJDK 10 to 8 with the latest upload.