On 6/28/22 09:35, Vitaly Zaitsev via devel wrote: > On 28/06/2022 15:29, Zbigniew Jędrzejewski-Szmek wrote: >> We can treat this as an experiment. The hope is that Java upstream is >> big enough to be able to release updates for any CVEs in a timely manner, >> and that the RHEL/Fedora maintainers are able to provide updates in a timely >> manner. If it turns out this is not the case, we can unbundle again. > > Upstream doesn't care because their tests fails on modern libraries > versions. If the TCK fails with modern library versions, that is a problem with the TCK or with OpenJDK and needs to be fixed. Fedora should not ship outdated libraries because an upstream test suite is too restrictive. The main problem here is that the TCK is closed-source. If it were open to contributions, problems like this could be identified and fixed. Given the current situation, though, the best solution would be for Red Hat to create an alternate test suite that is free software. -- Sincerely, Demi Marie Obenour (she/her/hers)
Attachment:
OpenPGP_0xB288B55FFF9C22C1.asc
Description: OpenPGP public key
Attachment:
OpenPGP_signature
Description: OpenPGP digital signature
_______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
