Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.maint.java > #11243

Re: Mystery meat OpenJDK builds strike again

Path csiph.com!news.dns-netz.com!news.freedyn.net!aioe.org!bofh.it!news.nic.it!robomod
From Matthias Klose <doko@ubuntu.com>
Newsgroups linux.debian.maint.java
Subject Re: Mystery meat OpenJDK builds strike again
Date Mon, 27 May 2019 19:20:02 +0200
Message-ID <y2rrY-88e-7@gated-at.bofh.it> (permalink)
References <y2a7L-5If-5@gated-at.bofh.it> <y2a7L-5If-3@gated-at.bofh.it> <y2bnb-6E7-9@gated-at.bofh.it> <y2pzP-6XC-1@gated-at.bofh.it> <y2rrY-88e-9@gated-at.bofh.it>
X-Original-To Gil Tene <gil@azul.com>, Thomas Stüfe <thomas.stuefe@gmail.com>
X-Mailbox-Line From debian-java-request@lists.debian.org Mon May 27 17:12:09 2019
Old-Return-Path <doko@ubuntu.com>
X-Amavis-Spam-Status No, score=-2.7 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, RCVD_IN_DNSWL_LOW=-0.7] autolearn=no autolearn_force=no
X-Policyd-Weight using cached result; rate: -3.5
Old-X-Envelope-From doko@ubuntu.com
Openpgp preference=signencrypt
Autocrypt addr=doko@ubuntu.com; prefer-encrypt=mutual; keydata= xsFNBFSG0WgBEADcWrLbnzkO07eqpkPsp0fRr2Tuhp+MABPwSS0msANqPiy9eWYGIXf2zHam Z77aKC+dykpnHn5ibvgOa70P5PBT+Ydk5EzI6Y98FvPQkuPFxkE29NK3Gn3DPHuAyfVpE0FM lMr9e10K+ZhY++nG4ZzHQUkg52iwlZ5twjpF0nwbtfHUMAPStCGC+orXnqcdmUq96r94+lZ2 Dsb2S67TM2umnqkzuIHlbhBXtnFiDtql+wW/Axqa6hGAVqks6OTX5NxGr+FTQ0UuptxhADZ2 S4cpftUROB7DgpDl3lGicvuOwW/UWJZMp0MwKJqu56Ajgu3IQM2oTTNmDLRP243gR5PxC1Yw VXhCG+juCO4Y1ous5fwCthiOE/3vOtF+GHRDVgikNKjv5MnsqbMJytAMIZS2uN07SPZKC4vX Vcw6KCBOBQhlrLTeffmPpnQzSUFwPJAySFFWjjpGLngglGM75zRa59PkVkPkeXKqz0O33xXm q6v3YNJNQgNVLAfn6rWmAckUly9mXmjAEvonrkR5impsyUGYPFHxb8TDhsGB6t9MHtMhr4pt wBMXv8aIWHfQndRvigfJC/xy7Su7qEaChuCjHEVVTuEEsnkKXOm7++VJsXG3wJBvqENu/9Lp uktBijnojbYrb0z+qgKt6jhBjUEy/iyfgQb4hwRX4jZ1T891dwARAQABzSBNYXR0aGlhcyBL bG9zZSA8ZG9rb0BkZWJpYW4ub3JnPsLBdwQTAQgAIQIbAwIeAQIXgAUCVIbUigULCQgHAwUV CgkICwUWAgMBAAAKCRC9fqpgd4+m9Rb7EADSQHuJpyADEuZxqlPMhJ/5WHM84Z+k4EQvnaqp czkKmZvtjCDn/8mhIAJ+oZdZer5VITkkUz/bX0ASV+2IDP6wWnZN5DGB9Ta1qFKfXRrVQVC1 bxtw5Rc+l7/dn9Jcz2v6uIzXUaybxRdEvsPrWYEM3WtRiiftm3J2HE7RzC4RplsSIUwSiT26 w5YbQo9im9rABkKdKw2+Y34YZv2QwCDcNqDfWqJQOu7DeN5PZ23V1nPRTcP907Y7OMkqzWOl Jl1Sj2q5g5fXha8c6+KQb52Yiki+7U9Z7pHiFCBEHWoDNMyNl4kUZM2Z5rwyFGAndtp+uHhY W9YIvuLxzvZPSWyEQIkG/k64rjx84SaQ04RuBBj3U1A1zMO/G4tI2rJ/+/TvV4Oa9iG37amI 7navLAtrXKkI1GFuNc/OUX6pezw7jypV3LB+6Z61tkYuwcNcz7NGAmHVuzVH5DI2udc1UogH 0yUO307IyhrmY1vM7Fohcg2fkwYba6PrqsyYhBowFmEk4j9kMuVIJplsEvKx0bIZY4xYgWQg UE1fvl3Fh4zWKzbopV0hMpcWvO0jxR4TG8vJkyZSyZtrRQiyYlIddJkk8HjD9MFSgO/cMQW6 x31A6eaQAhgNVChfv8KN8AZDbVoWvMz4RRwkl9Up8tinNWt2argz540M6DGz4JRHSScL0c7B TQRUhtFoARAAxRsii1f5GJEGnj2KR2Ct1zpIJCXta18v9/NhuVuSBygPYR2XCmVZTd3YivJN dnV5EFr8eQu+hgUxsq2OWAVFJSVb+WtLub0t3APSwTwo5Y+cZvupEwy31Btr9yRZlDns7MTW At1PFoG8iPwQwK6jbnPM+bap0t4o+/nd/7TWGBPgJNPVMxPoA+xCdMnZoiwDDsYsy8Mf6dZC ZfyKqrnDL9pe2hGBIvcY9HmuNP4wsgtPj9vCb01RK2Qd+wRDeePZ/k9sLwbfmeO9Ts8oCBoV Kd948zrQeIWnd2jiFpiROyUd0FeuNwO5CbSmV8HjBCZy8KSnBl/ruNlTIxnwTfpROCkchq8x 1mPQ1k+l+V/dzIGROAcgpNRKoPsciu0nXROgfgl7Fe2UPL7IfZ97UyoJicXlrhYF9jAc2pEQ apdTun88wIGDeLKE/pVl2XNq+PdN4AgFXIGuJZiP2BQdQ2/UU4NERSPzaf6kaDn3D8Q7sLqs cMa8cI7kHLr+fop5VYgubEi/Fv0W7F7YoeEARUMqAt37MpkJW7Mun4JxC/Rjju7JBD6U94Vi +Xqst2uTEp2gPc077CRUkQ2sN0oLzc6AyYCaD3NTFC0CcQA4vj7cMH5v61scpHu4gAMkTmZ/ 1Ys9LNT6lK51A/wJga9MMN3Uw3J48Oi9zv6woU19vlp7Z0EAEQEAAcLBXwQYAQgACQUCVIbR aAIbDAAKCRC9fqpgd4+m9Sj9D/0XNPuzW4p3qPZwwlA834fmMGTHlyxvmz5yCccJl20OM4qO dRtfSUCUfqjeQjUXePDYDfZb+Tys2A1Y0/kN+Y7nkv56WI5Ou1zkXwth3xcRtMar8DIpyfIf CZKy21ybD+GvJZOpRR/n3Gy1f4bnveEZHuitPIm1QPHEjJqHsUjZWhHKqe4J7yA50KYH9hNU N7FP5eE4WczpGrBmfX32zZkf5y0J4vX2YHyMJS4kV2h0fYbP7B3A4D0g7tTdXmmqCi7mgyVC J1iab+XeJ27VeNIOjmKByWiQllcjganhedN5Sh9hFoinjgjcfSmGv1zzgPM8A3hn9vVsOs/8 +ptDR8v7Zk/xIj/sX1SULWHA1m4Z0KvfgPVzFa5vEIYcPLNyhowm63ajrwaR+j/xSWjnKmST nNtaJnxEfFxjEFF6dhZ7cNaIZ2tQCjqMElhSe7JjmVHIxfGKbHJ4tyV9G6wSk++igbWWZNG9 3kZ/4mWpAlAzdStGACmErgfm+zlK3UgKzGWHsiwNB+OFdxmZVXnwCLdRkbvd4vT0PzBrjFOk c55kiQ/DTONVrsniWlttHvaYrlai6IbsUd2krqQcGJJeI4cnHX4pTDcZ2VLowJpDsfV05BV7 WthbUjKgI55iI3ZE5WATelv8dWV8zdLVlWjvYraTxtpSwdkle4wQNntkOdYAsw==
User-Agent Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.6.1
MIME-Version 1.0
Content-Type text/plain; charset=utf-8
Content-Language en-US
Content-Transfer-Encoding 8bit
X-Mailing-List <debian-java@lists.debian.org> archive/latest/21771
List-ID <debian-java.lists.debian.org>
List-URL <https://lists.debian.org/debian-java/>
List-Archive https://lists.debian.org/msgid-search/b06aa095-0622-4178-d1b6-f9eeb8edb1eb@ubuntu.com
Approved robomod@news.nic.it
Lines 23
Organization linux.* mail to news gateway
Sender robomod@news.nic.it
X-Original-Cc Debian Java Liste <debian-java@lists.debian.org>, jdk8u-dev <jdk8u-dev@openjdk.java.net>, "jdk-updates-dev@openjdk.java.net" <jdk-updates-dev@openjdk.java.net>
X-Original-Date Mon, 27 May 2019 18:53:58 +0200
X-Original-Message-ID <b06aa095-0622-4178-d1b6-f9eeb8edb1eb@ubuntu.com>
X-Original-References <6B0652EE-3582-4659-9CF2-073180029793@azul.com> <b3aef5f1-66dc-a19e-1c77-0743a223f932@ubuntu.com> <8FB70808-E4E0-451C-AC86-C9EA1EA2FA30@azul.com> <CAA-vtUwJ+a6HOt=L6WYXwZ6KZMtmbLhaec2qbNyWofkHUfcrYg@mail.gmail.com> <9CD92EA4-EAAE-44ED-9901-C269628035C7@azul.com>
Xref csiph.com linux.debian.maint.java:11243

Show key headers only | View raw


On 27.05.19 18:23, Gil Tene wrote:
>> Did you try to contact Debian folks to give them opportunity to fix those security concerns before going public with them? Or did they not react in time?
> 
> Multiple times over ~4.5 years, and through multiple channels. The
> “we don’t care”, “go away, vendor”, and “java and openjdk do versioning
> wrong” reactions are the most common. Many were less polite than that.
> The defensive tone of the email you see on this thread is about average.
> The denial and deflection attempts you see there are also common.

I can't follow that.  There is not a single bug report about that in the Debian
tracker.   Looking at the Debian Java mailing list, there is not a single
posting from your side.  And I can't remember that being discussed on the ML
either.  Also not on the distro-pkg-dev ML.  Same thing for the Ubuntu bug
tracker.  So which channels are you using?

> Some people just don’t want help, at least not from some. And that’s fine.

I raised questions about the versioning on the jdk ML's multiple times.  Most of
those were ignored, or saw the versioning as being correct.  I brought up the
configuration issues at this year OpenJDK committers workshop, but it was voted
down because other topics seemed more pressing to discuss.

Matthias

Back to linux.debian.maint.java | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Re: Mystery meat OpenJDK builds strike again Matthias Klose <doko@ubuntu.com> - 2019-05-27 00:50 +0200
  Re: Mystery meat OpenJDK builds strike again Gil Tene <gil@azul.com> - 2019-05-27 02:10 +0200
    Re: Mystery meat OpenJDK builds strike again Thomas Stüfe <thomas.stuefe@gmail.com> - 2019-05-27 17:20 +0200
      Re: Mystery meat OpenJDK builds strike again Emmanuel Bourg <ebourg@apache.org> - 2019-05-27 17:40 +0200
      Re: Mystery meat OpenJDK builds strike again Matthias Klose <doko@ubuntu.com> - 2019-05-27 19:20 +0200
  Re: Mystery meat OpenJDK builds strike again Gil Tene <gil@azul.com> - 2019-05-27 03:30 +0200
    Re: Mystery meat OpenJDK builds strike again Martijn Verburg <martijnverburg@gmail.com> - 2019-05-27 12:20 +0200
      Re: Mystery meat OpenJDK builds strike again Florian Weimer <fweimer@redhat.com> - 2019-05-27 13:00 +0200
        Re: Mystery meat OpenJDK builds strike again Martijn Verburg <martijnverburg@gmail.com> - 2019-05-28 11:00 +0200
      Re: Mystery meat OpenJDK builds strike again Martijn Verburg <martijnverburg@gmail.com> - 2019-05-28 11:00 +0200
      Re: Mystery meat OpenJDK builds strike again Gil Tene <gil@azul.com> - 2019-05-28 18:10 +0200
    Re: Mystery meat OpenJDK builds strike again Martijn Verburg <martijnverburg@gmail.com> - 2019-05-27 12:20 +0200
      OpenJDK upstream ↔ Debian packages mapping (was Re: Mystery meat OpenJDK builds strike again) Thorsten Glaser <t.glaser@tarent.de> - 2019-05-27 18:30 +0200
        Re: OpenJDK upstream ↔ Debian packages mapping (was Re: Mystery meat OpenJDK builds strike again) Martijn Verburg <martijnverburg@gmail.com> - 2019-05-28 12:00 +0200
    Re: Mystery meat OpenJDK builds strike again Florian Weimer <fweimer@redhat.com> - 2019-05-27 12:40 +0200
      Re: Mystery meat OpenJDK builds strike again Gil Tene <gil@azul.com> - 2019-05-28 18:00 +0200

csiph-web