http://bugzilla.suse.com/show_bug.cgi?id=1026102 Andreas Schneider changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |asn@cryptomilk.org, | |fstrba@suse.com, | |wolfgang@rosenauer.org -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1026102 http://bugzilla.suse.com/show_bug.cgi?id=1026102#c1 --- Comment #1 from Andreas Schneider --- Created attachment 714737 --> http://bugzilla.suse.com/attachment.cgi?id=714737&action=edit TestECDSA.java $ javac -d . TestECDSA.java $ java TestECDSA Exception in thread "main" java.security.NoSuchAlgorithmException: EC KeyPairGenerator not available at java.security.KeyPairGenerator.getInstance(KeyPairGenerator.java:218) at TestECDSA.main(TestECDSA.java:29) -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1026102 Andreas Schneider changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner@suse.com -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1026102 http://bugzilla.suse.com/show_bug.cgi?id=1026102#c4 Marcus Meissner changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dimstar@opensuse.org --- Comment #4 from Marcus Meissner --- Dominique, openjdk seems to be a direct rebuild dependency of mozilla-nss -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1026102 http://bugzilla.suse.com/show_bug.cgi?id=1026102#c6 --- Comment #6 from Dominique Leuenberger --- (In reply to Marcus Meissner from comment #4)

Dominique, openjdk seems to be a direct rebuild dependency of mozilla-nss

If this needs constant rebuilds on version changes of mozilla-nss, then oenjdk has to express this with a corresponding requires on the version of mozilla-nss. Then auto-rebuilds are triggered for Tumbleweed; For now, I trigger a manual rebuild for openjdk -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1026102 http://bugzilla.suse.com/show_bug.cgi?id=1026102#c8 --- Comment #8 from Dominique Leuenberger --- There is something 'stranger' happening; java-1_8_0-openjdk had been rebuilt in oS:F shortly after mozilla-nss update landed:

mozilla-nss 3.28.2 was checked in on 2017-02-13 23:39:41 java-1_8_0-openjdk was built on 2017-02-14 01:34:27 This java package was published as version 1.8.0.121-2.2

-- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1026102 http://bugzilla.suse.com/show_bug.cgi?id=1026102#c10 Dominique Leuenberger changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(asn@cryptomilk.or | |g) --- Comment #10 from Dominique Leuenberger --- Andreas: can you please provide information about your installed java package? rpm -qi java-1_8_0-openjdk java-1_8_0-openjdk-headless -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1026102 http://bugzilla.suse.com/show_bug.cgi?id=1026102#c12 --- Comment #12 from Wolfgang Rosenauer --- https://build.opensuse.org/request/show/459222 -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1026102 http://bugzilla.suse.com/show_bug.cgi?id=1026102#c14 Dominique Leuenberger changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(asn@cryptomilk.or | |g) | --- Comment #14 from Dominique Leuenberger --- (In reply to Andreas Schneider from comment #13)

rpm -q java-1_8_0-openjdk java-1_8_0-openjdk-1.8.0.121-2.2.x86_64

Interesting then - as you can see using

rpm -qR java-1_8_0-openjdk-headless | grep nss mozilla-nss = 3.28.2

There us a fully versioned dependency in place which is added during build - requiring the same version that was used during build So, as this does still not work, I'm not so convinced that another rebuild of java-1_8_0-openjdk will have any effect -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1026102 http://bugzilla.suse.com/show_bug.cgi?id=1026102#c16 --- Comment #16 from Andreas Schneider --- FYI: I've installed the new mozilla-nss packages: rpm -q mozilla-nss mozilla-nss-3.28.3-238.1.x86_64 asn~ > java TestECDSA Exception in thread "main" java.security.NoSuchAlgorithmException: EC KeyPairGenerator not available at java.security.KeyPairGenerator.getInstance(KeyPairGenerator.java:218) at TestECDSA.main(TestECDSA.java:29) -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1026102 http://bugzilla.suse.com/show_bug.cgi?id=1026102#c18 --- Comment #18 from Bernhard Wiedemann --- This is an autogenerated message for OBS integration: This bug (1026102) was mentioned in https://build.opensuse.org/request/show/461282 Factory / java-1_8_0-openjdk -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1026102 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |ibs:running:4301:low -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1026102 http://bugzilla.suse.com/show_bug.cgi?id=1026102#c30 --- Comment #30 from Swamp Workflow Management --- openSUSE-RU-2017:1195-1: An update that has one recommended fix can now be installed. Category: recommended (low) Bug References: 1026102 CVE References: Sources used: openSUSE Leap 42.2 (src): java-1_8_0-openjdk-1.8.0.121-10.5.1 openSUSE Leap 42.1 (src): java-1_8_0-openjdk-1.8.0.121-28.1 -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1026102 http://bugzilla.suse.com/show_bug.cgi?id=1026102#c31 --- Comment #31 from Swamp Workflow Management --- SUSE-SU-2017:1248-1: An update that fixes 29 vulnerabilities is now available. Category: security (important) Bug References: 1015499,1015547,1021636,1026102,1030071,1035082,983639 CVE References: CVE-2016-1950,CVE-2016-2834,CVE-2016-8635,CVE-2016-9574,CVE-2017-5429,CVE-2017-5432,CVE-2017-5433,CVE-2017-5434,CVE-2017-5435,CVE-2017-5436,CVE-2017-5437,CVE-2017-5438,CVE-2017-5439,CVE-2017-5440,CVE-2017-5441,CVE-2017-5442,CVE-2017-5443,CVE-2017-5444,CVE-2017-5445,CVE-2017-5446,CVE-2017-5447,CVE-2017-5448,CVE-2017-5459,CVE-2017-5460,CVE-2017-5461,CVE-2017-5462,CVE-2017-5464,CVE-2017-5465,CVE-2017-5469 Sources used: SUSE Linux Enterprise Software Development Kit 12-SP2 (src): MozillaFirefox-45.9.0esr-105.1, mozilla-nspr-4.13.1-18.1, mozilla-nss-3.29.5-57.1 SUSE Linux Enterprise Software Development Kit 12-SP1 (src): MozillaFirefox-45.9.0esr-105.1, mozilla-nspr-4.13.1-18.1, mozilla-nss-3.29.5-57.1 SUSE Linux Enterprise Server for SAP 12 (src): MozillaFirefox-45.9.0esr-105.1, mozilla-nspr-4.13.1-18.1, mozilla-nss-3.29.5-57.1 SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (src): MozillaFirefox-45.9.0esr-105.1, java-1_8_0-openjdk-1.8.0.121-23.4, mozilla-nspr-4.13.1-18.1, mozilla-nss-3.29.5-57.1 SUSE Linux Enterprise Server 12-SP2 (src): MozillaFirefox-45.9.0esr-105.1, java-1_8_0-openjdk-1.8.0.121-23.4, mozilla-nspr-4.13.1-18.1, mozilla-nss-3.29.5-57.1 SUSE Linux Enterprise Server 12-SP1 (src): MozillaFirefox-45.9.0esr-105.1, java-1_8_0-openjdk-1.8.0.121-23.4, mozilla-nspr-4.13.1-18.1, mozilla-nss-3.29.5-57.1 SUSE Linux Enterprise Server 12-LTSS (src): MozillaFirefox-45.9.0esr-105.1, mozilla-nspr-4.13.1-18.1, mozilla-nss-3.29.5-57.1 SUSE Linux Enterprise Desktop 12-SP2 (src): MozillaFirefox-45.9.0esr-105.1, java-1_8_0-openjdk-1.8.0.121-23.4, mozilla-nspr-4.13.1-18.1, mozilla-nss-3.29.5-57.1 SUSE Linux Enterprise Desktop 12-SP1 (src): MozillaFirefox-45.9.0esr-105.1, java-1_8_0-openjdk-1.8.0.121-23.4, mozilla-nspr-4.13.1-18.1, mozilla-nss-3.29.5-57.1 -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1026102 http://bugzilla.suse.com/show_bug.cgi?id=1026102#c32 Victor Pereira changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED CC| |vpereira@microfocus.com Resolution|--- |FIXED --- Comment #32 from Victor Pereira --- fixed and released -- You are receiving this mail because: You are on the CC list for the bug.