Your message dated Tue, 05 Apr 2016 06:35:36 +0000 with message-id <e1ankao-0005q8...@franck.debian.org> and subject line Bug#801003: fixed in libspring-java 4.0.9-2 has caused the Debian Bug report #801003, regarding libspring-java: depends on obsolete libcommons-httpclient-java library to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 801003: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=801003 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: libspring-java Severity: normal User: pkg-java-maintainers@lists.alioth.debian.org Usertags: oldlibs libcommons-httpclient-java Hi, libspring-java depends on libcommons-httpclient-java, which is obsolete and was replaced by libhttpclient-java. It has reached EOL status in 2011! It is no longer supported upstream [1] and was affected by multiple security issues in the recent past. libspring-java should be ported to the new libhttpclient-java version, so that we can remove the old, unmaintained one. Please forward this issue upstream, if you can't migrate the package yourself. We would like to see libcommons-httpclient-java removed during the Stretch release cycle but due to the large number of reverse-dependencies the outcome depends more than ever on your help. Please help us to accomplish this goal. We will bump this issue to important when the list of rdeps is getting smaller and we think that the removal is possible. We will eventually raise the severity to serious when the number of rdeps is small. If you have any questions don't hesitate to ask and contact us on debian-j...@list.debian.org Regards, Markus [1] https://hc.apache.org/httpclient-3.x/ [2] https://security-tracker.debian.org/tracker/source-package/commons-httpclient
--- End Message ---
--- Begin Message ---Source: libspring-java Source-Version: 4.0.9-2 We believe that the bug you reported is fixed in the latest version of libspring-java, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 801...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Emmanuel Bourg <ebo...@apache.org> (supplier of updated libspring-java package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 05 Apr 2016 08:26:30 +0200 Source: libspring-java Binary: libspring-core-java libspring-beans-java libspring-aop-java libspring-context-java libspring-context-support-java libspring-web-java libspring-web-servlet-java libspring-web-portlet-java libspring-test-java libspring-transaction-java libspring-jdbc-java libspring-jms-java libspring-orm-java libspring-expression-java libspring-oxm-java libspring-instrument-java Architecture: source all Version: 4.0.9-2 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Emmanuel Bourg <ebo...@apache.org> Description: libspring-aop-java - modular Java/J2EE application framework - AOP libspring-beans-java - modular Java/J2EE application framework - Beans libspring-context-java - modular Java/J2EE application framework - Context libspring-context-support-java - modular Java/J2EE application framework - Context Support libspring-core-java - modular Java/J2EE application framework - Core libspring-expression-java - modular Java/J2EE application framework - Expression language libspring-instrument-java - modular Java/J2EE application framework - Instrumentation libspring-jdbc-java - modular Java/J2EE application framework - JDBC tools libspring-jms-java - modular Java/J2EE application framework - JMS tools libspring-orm-java - modular Java/J2EE application framework - ORM tools libspring-oxm-java - modular Java/J2EE application framework - Object/XML Mapping libspring-test-java - modular Java/J2EE application framework - Test helpers libspring-transaction-java - modular Java/J2EE application framework - transaction libspring-web-java - modular Java/J2EE application framework - Web libspring-web-portlet-java - modular Java/J2EE application framework - Portlet MVC libspring-web-servlet-java - modular Java/J2EE application framework - Web Portlet Closes: 801003 801016 Changes: libspring-java (4.0.9-2) unstable; urgency=medium . * Team upload. * Enabled the jcache support * Fixed the versioned dependency on libquartz-java * Updated the versioned dependencies on libjdo-api-java for libspring-orm-java and on libtiles-java for libspring-web-servlet-java * Removed the unused Maven rule for javax.activation * Updated the Maven poms * Depend on libasm-java (>= 5.0) instead of libasm4-java * Depend on libcglib-java (>= 3.1) instead of libcglib3-java * Removed the unused dependencies on ivy, libjavassist-java, libaxis-java, libibatis-java, libjboss-vfs-java, libspring-build-java and spring-build-scripts * Removed the unused suggested dependency on libcommons-httpclient-java for libspring-web-java (Closes: #801003) * Changed the priority from extra to optional . libspring-java (4.0.9-1) unstable; urgency=medium . * Team upload. * New upstream release - Updated the dependencies (Closes: #801016) - Refreshed the patches - Removed 0007_remove_backport_util_concurrent.patch (fixed upstream) - Removed 0010_velocity_17.diff (fixed upstream) - Removed 0026-derby-compatibility.patch (fixed upstream) - Removed 0032-missing-tiles-dependency.patch (fixed upstream) - Removed 0033-missing-taglibs-dependency.patch - Added a patch fixing the compatibility with velocity-tools 2.0 - Added a patch to ignore the asciidoctor plugin - Added a patch to stop failing the build on compilation warnings - Ignore the new websocket and messaging modules * Standards-Version updated to 3.9.7 (no changes) * Use secure Vcs-* URLs * Added a lintian overide for the warnings about Spring.js Checksums-Sha1: 08bc376d847a4bd5a11b34cb73715c53b3c6e85a 4923 libspring-java_4.0.9-2.dsc 74b84016d915bc15ae8b1c0bb41c12d6f80101bc 17844 libspring-java_4.0.9-2.debian.tar.xz 20100c94367b1145172a2599b5b074cb8a767109 352292 libspring-aop-java_4.0.9-2_all.deb b60605735bc9bd4329d2d5060ef8dd654b1dcebd 603012 libspring-beans-java_4.0.9-2_all.deb 7a9462c44c8de4a67a12a3c074a070c28774a447 848008 libspring-context-java_4.0.9-2_all.deb b2e6035aca9ce743594ad1af4403551f6144e235 131444 libspring-context-support-java_4.0.9-2_all.deb f8e554fd0e0313584ee9a8409a0f35b346d7b193 900550 libspring-core-java_4.0.9-2_all.deb 2427bc630a29ec2cdfc27f36f846de2a7e22313b 194060 libspring-expression-java_4.0.9-2_all.deb fe79d69654ed96fdef5a38a9e4ae0e9169eb3d85 20240 libspring-instrument-java_4.0.9-2_all.deb 28ddc8710f22fb258c6706b84b17482afe299273 379206 libspring-jdbc-java_4.0.9-2_all.deb 23dd7c4e26d9b5c612fdf6a5777c9c526a0157c8 196302 libspring-jms-java_4.0.9-2_all.deb bc3a470e70d250f43b2c96d65d6c03b0a80f8033 258374 libspring-orm-java_4.0.9-2_all.deb 1674e9753f988b6a9828daff0fdd10fb234b8605 82526 libspring-oxm-java_4.0.9-2_all.deb 4a9abdc582036f3d3838732c1ad4271b67e5afa3 396840 libspring-test-java_4.0.9-2_all.deb ae2ae0e9e8201679fc0cdba60b8c467842921c51 212640 libspring-transaction-java_4.0.9-2_all.deb 49619fefd2750ff5d63a0abc5e56b4b2e5fc0d15 596062 libspring-web-java_4.0.9-2_all.deb a3b40fc826e9170a52f92fc992a63232e0a06251 164542 libspring-web-portlet-java_4.0.9-2_all.deb 8516fd17ab04eb1b6b7fba0de0fef39172a42ae2 589532 libspring-web-servlet-java_4.0.9-2_all.deb Checksums-Sha256: b2d6cf969daa7dd2b41c382b368c6ae39e1616afc4206e8f199bf90a658f96c4 4923 libspring-java_4.0.9-2.dsc fc1b8069895202fb79bed1f0211081d1f30164a106e4d8fb34d39bb8132c2bc0 17844 libspring-java_4.0.9-2.debian.tar.xz cd5bb3fbe6258d6c0162c6969700922ec7c339aae368fd47a24e6bfac884c755 352292 libspring-aop-java_4.0.9-2_all.deb 0385fb22c99482647e047f1864a94707c63fb087b2146a1c47498e05a08cd42d 603012 libspring-beans-java_4.0.9-2_all.deb 75c77b706ad00915d73fa60d645c10b9c31d86794ae501972d05b034137de66c 848008 libspring-context-java_4.0.9-2_all.deb bbe1503155bbebbabb533e8d07e90b51b6fea1879548459d02bf38277d6d36fd 131444 libspring-context-support-java_4.0.9-2_all.deb 27228e02319982eaacba68e8d6e733e122d65aa8cf3f7c945152b7c3a9194a24 900550 libspring-core-java_4.0.9-2_all.deb 9e4ee4c8a4857601d9a5c4b3895741a85d6dbf30ec62a16425829d871ae97479 194060 libspring-expression-java_4.0.9-2_all.deb 31aac64704a81a9cbca020eb85bfa43921fbe3ca367d18e275ce251058652664 20240 libspring-instrument-java_4.0.9-2_all.deb 8a9b6dda6b3c562479f1e40fa10b58109ea70f856d2e0c79637c59bda9566d8e 379206 libspring-jdbc-java_4.0.9-2_all.deb d08622c28fa0c4cefe9b849cbcd4eb83b77806b2d084a5ae9d872414f87664aa 196302 libspring-jms-java_4.0.9-2_all.deb d31527db8ece8dcd73ef12a15dc5e614b948e53a4b152a9953a0efcb95fa8098 258374 libspring-orm-java_4.0.9-2_all.deb e0f8852408185c50486f8936eaaf4c010e9bb6976e7f8fd7da922f98aaee210c 82526 libspring-oxm-java_4.0.9-2_all.deb 17c822c8c1d14bb7f71484ea4778ea700389e5402fd6bb4d14951574345f4872 396840 libspring-test-java_4.0.9-2_all.deb 287fada42f8153daf1e0c73cc9710dc48e839984185062d8a0043dd6cf56fdf8 212640 libspring-transaction-java_4.0.9-2_all.deb 9c1f336265a1453e871acf46f8cfd5bdbecdd5d8d53fd565cfe10954b6332860 596062 libspring-web-java_4.0.9-2_all.deb d9ffc183aa440d167223569663c30963498a14a49b90bb481dedf7a79af5150c 164542 libspring-web-portlet-java_4.0.9-2_all.deb 8de03d0b0c2fb77518445392b1a0c6d32f5b354b1f25709d8843039637fedf89 589532 libspring-web-servlet-java_4.0.9-2_all.deb Files: b6f0bef11ab032119b535cccb95c91ab 4923 java optional libspring-java_4.0.9-2.dsc 17c86b5efabb198cc63395a2c997feb8 17844 java optional libspring-java_4.0.9-2.debian.tar.xz 495bab0d781c7cb4f675f756f005a647 352292 java optional libspring-aop-java_4.0.9-2_all.deb e19799b0a52ec8f37558ae60cdb02f93 603012 java optional libspring-beans-java_4.0.9-2_all.deb cd360a3e4a7bc579c73b6db25684d6e4 848008 java optional libspring-context-java_4.0.9-2_all.deb 8cc662289c33c93238f0e87bba00fb30 131444 java optional libspring-context-support-java_4.0.9-2_all.deb 70a5fc07c1be4e75f5ac406e801cce60 900550 java optional libspring-core-java_4.0.9-2_all.deb fd704ccba0a8507041220cddac9eb08d 194060 java optional libspring-expression-java_4.0.9-2_all.deb 2588498239f748e665513a64f4dba1a5 20240 java optional libspring-instrument-java_4.0.9-2_all.deb d19f890b1ea5bb18ff7aec4802697caa 379206 java optional libspring-jdbc-java_4.0.9-2_all.deb 8bd50299117873312a398175945e232a 196302 java optional libspring-jms-java_4.0.9-2_all.deb 2555d430d2dbb4d588c706d16ad224cd 258374 java optional libspring-orm-java_4.0.9-2_all.deb 234175f07ceae71b5fae0a0c275e8b88 82526 java optional libspring-oxm-java_4.0.9-2_all.deb 74f79b0dcf340ffe62de1ee125f851ab 396840 java optional libspring-test-java_4.0.9-2_all.deb 16259440d5467264a34ec9481e7848cb 212640 java optional libspring-transaction-java_4.0.9-2_all.deb bf3af6e3e34000d160cfabaddb174f74 596062 java optional libspring-web-java_4.0.9-2_all.deb 7f8baa3b82151ee4e55490454a651f48 164542 java optional libspring-web-portlet-java_4.0.9-2_all.deb 410d29def0837910892f973a49fb6b03 589532 java optional libspring-web-servlet-java_4.0.9-2_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJXA1tKAAoJEPUTxBnkudCsleEP/0xfq+zJtftegcnQ/T/nLtSS uESEAPbrlXrF1ogGS26byzGcFFEWli1SoH49T2X+MEaqQqBz69QrHLpXGrrEs9D2 0moJ6IC66ux1CnveUH+deIGaeZMZa1peELG7IbrSeRLS6xgg2pYz+HJokaz+k9Sb ZDhV0rKCQ1zAQj7pSLr8BIF74WX9N3XdCgmNouraCmAbi+7b8jC2O2Qab4E2Bhzy thbssF0wolFOQciJ7+eMG5B1BRNaANX4rNLiz8iOGA6bZYAuqt1F6shRSHQwhKKr A3iD9rTHye+IwZufenwplAbB2xbbgpz3V67zSDJhQy5gU+krm8PLew7NYFBG10/i Zhhu/JU+opumjuk7e9ED073Xi3CjlxsqEQmXLxp9ThTANgbyNJb7UNv7OU6dUc5c EWSimDvJSjgwyvi/3TMOy5IUKdT599mu5B06s4J6sGMA3dKI9PwDFsKorKgV6N5h Vn8JDi4U8Y5+XsV/Y2PgDejEQiwcVkOkN7SCP4RZh3QiFk+LCat6euxMhO5tCnEp EGlvs/GlygZ7XNskrk/GVTYg2v/s3qhgeNGiYd4oWJE8stVFf9c9bH1CUqAESduz TAfzVRm1nZtfD2nrolHbNjFJkM2cqyJKzDa3U5BXKUrmET3ucB3CFb+n0uCg3PlZ d4SZ4WiDCBASh75GkSxE =1uvI -----END PGP SIGNATURE-----
--- End Message ---
__ This is the maintainer address of Debian's Java team <http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. Please use debian-j...@lists.debian.org for discussions and questions.
