Bug#703024: libsaxon-java: maven artifacts are not installed to /usr/share/maven-repo

2013-03-14 Thread Eugene Zhukov
Package: libsaxon-java
Version: 1:6.5.5-8
Severity: wishlist

Dear Maintainer,

Please, consider adding maven artifacts to /usr/share/maven-repo,
it will make building dependent packages easier with maven-debian-helper.

-- System Information:
Debian Release: wheezy/sid
  APT prefers precise-updates
  APT policy: (500, 'precise-updates'), (500, 'precise-security'), (500, 
'precise')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-38-generic (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

libsaxon-java depends on no packages.

libsaxon-java recommends no packages.

Versions of packages libsaxon-java suggests:
pn  libjdom1-java  1.1.2+dfsg-2
pn  libsaxon-java-doc  none

-- no debconf information

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Processed: saxon != saxonb

2013-03-14 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

 tags 661097 wontfix
Bug #661097 [libsaxon-java] libsaxon-java: new upstream version
Added tag(s) wontfix.
 thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
661097: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661097
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Bug#661097: marked as done (libsaxon-java: new upstream version)

2013-03-14 Thread Debian Bug Tracking System
Your message dated Thu, 14 Mar 2013 12:52:21 +0100
with message-id 
ca+7wuswuhhkbpiak9dsay0nekzj7ctpxx_omu1x2lrx7iwx...@mail.gmail.com
and subject line saxon != saxonb
has caused the Debian Bug report #661097,
regarding libsaxon-java: new upstream version
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
661097: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661097
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: libsaxon-java
Version: 1:6.5.5-7
Severity: wishlist


There is a new upstream version of saxon.
It is at version 9 now, and Debian uses 1:6.5.5-8.

I feel this important, as saxon 9 supports XSLT 2.0, for which Debian support 
is somewhat lacking.

-- System Information:
Debian Release: wheezy/sid
  APT prefers oneiric-updates
  APT policy: (500, 'oneiric-updates'), (500, 'oneiric-security'), (500, 
'oneiric')
Architecture: amd64 (x86_64)

Kernel: Linux 3.0.0-14-generic (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

libsaxon-java depends on no packages.

libsaxon-java recommends no packages.

Versions of packages libsaxon-java suggests:
pn  libjdom1-java none (no description available)
pn  libsaxon-java-doc none (no description available)

-- no debconf information


---End Message---
---BeginMessage---
tags 661097 wontfix
thanks

See:

http://packages.qa.debian.org/s/saxonb.html---End Message---
__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#625945: Patch: javahelper: jh_installjavadoc creates doc-base file with empty Author

2013-03-14 Thread Markus Koschany
tags 625945 patch
thanks

Hi,

i have attached a small patch which sets the $AUTHOR variable to a
default value if it is empty and also adds the missing is in Abstract.

Regards,

Markus

From: Markus Koschany a...@gambaru.de
Date: Thu, 14 Mar 2013 17:17:49 +0100
Subject: jh_installjavadoc default author

---
 jh_installjavadoc |5 -
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/jh_installjavadoc b/jh_installjavadoc
index 52ebf6b..be848be 100755
--- a/jh_installjavadoc
+++ b/jh_installjavadoc
@@ -35,6 +35,9 @@ function installjavadoc()
 	src=$2
 	target=$3
 
+	if [ -z $AUTHOR ]; then
+		AUTHOR=The authors of $package
+	fi
 	if [ -z $src ]; then
 		echo Error: trying to install from empty source
 		exit 1
@@ -65,7 +68,7 @@ function installjavadoc()
 Document: $package
 Title: API JavaDoc for $package
 Author: $AUTHOR
-Abstract: This the API JavaDoc for $package
+Abstract: This is the API JavaDoc for $package
 Section: Programming/Java
 
 Format: HTML


signature.asc
Description: OpenPGP digital signature
__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Patch: javahelper: jh_installjavadoc creates doc-base file with empty Author

2013-03-14 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

 tags 625945 patch
Bug #625945 [javahelper] javahelper: jh_installjavadoc creates doc-base file 
with empty Author
Added tag(s) patch.
 thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
625945: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=625945
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Processing of libjgrapht0.8-java_0.8.3-2_amd64.changes

2013-03-14 Thread Debian FTP Masters
libjgrapht0.8-java_0.8.3-2_amd64.changes uploaded successfully to localhost
along with the files:
  libjgrapht0.8-java_0.8.3-2.dsc
  libjgrapht0.8-java_0.8.3-2.debian.tar.gz
  libjgrapht0.8-java_0.8.3-2_all.deb
  libjgrapht0.8-java-doc_0.8.3-2_all.deb

Greetings,

Your Debian queue daemon (running on host franck.debian.org)

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


libjgrapht0.8-java_0.8.3-2_amd64.changes ACCEPTED into experimental

2013-03-14 Thread Debian FTP Masters


Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Thu, 14 Mar 2013 19:14:28 +0100
Source: libjgrapht0.8-java
Binary: libjgrapht0.8-java libjgrapht0.8-java-doc
Architecture: source all
Version: 0.8.3-2
Distribution: experimental
Urgency: low
Maintainer: Debian Java Maintainers 
pkg-java-maintainers@lists.alioth.debian.org
Changed-By: Giovanni Mascellani g...@debian.org
Description: 
 libjgrapht0.8-java - mathematical graph theory library for Java
 libjgrapht0.8-java-doc - javadoc-generated API for libjgrapht0.8-java
Changes: 
 libjgrapht0.8-java (0.8.3-2) experimental; urgency=low
 .
   * Force generation of 1.6-compatible Java classes (LP: #1049716).
Checksums-Sha1: 
 7b6c2f47174d695039164bb4d05276278aa3c70a 1553 libjgrapht0.8-java_0.8.3-2.dsc
 da296f14b99dc518dabb5db736c47bd4985ce5b0 4440 
libjgrapht0.8-java_0.8.3-2.debian.tar.gz
 8f9206ffaad64982a94d33b1c5e3872b3dbfdfde 219030 
libjgrapht0.8-java_0.8.3-2_all.deb
 54acfa5d93cd876fd93bb2a1336ecf09db42ea6f 266342 
libjgrapht0.8-java-doc_0.8.3-2_all.deb
Checksums-Sha256: 
 94d0a774345e55b3674cfcf0a01e78a745ada06fb9b8f82093c3939ddf4630e7 1553 
libjgrapht0.8-java_0.8.3-2.dsc
 4ea3a223e25f2b2e29a4a4c2f4931c9811db441a143c12bdafc83b8fa33eaa2d 4440 
libjgrapht0.8-java_0.8.3-2.debian.tar.gz
 dddbddcdd229884bff63491f7246f9fa1d0249106fab6fdc04adc0cb8c66bcd8 219030 
libjgrapht0.8-java_0.8.3-2_all.deb
 9a0842fc904ab9aa46b5f285b7f3dc62acffee7d537cdbe83231a7b6147b36e6 266342 
libjgrapht0.8-java-doc_0.8.3-2_all.deb
Files: 
 30173f6523ca50eed3a62cd47e434aff 1553 java optional 
libjgrapht0.8-java_0.8.3-2.dsc
 75b0228a3cd21e10c115ead98be37cd2 4440 java optional 
libjgrapht0.8-java_0.8.3-2.debian.tar.gz
 8152d5cac3edeeb5bee13b1723bc1f55 219030 java optional 
libjgrapht0.8-java_0.8.3-2_all.deb
 568ab7951d0b15eb762fe5f3027ca291 266342 doc optional 
libjgrapht0.8-java-doc_0.8.3-2_all.deb

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iF4EAREKAAYFAlFCFcgACgkQBIoTAU7n/+NPYgEApVXs4YckxhLnuWmA8gvrhWhs
GhhP44vGgpEvvmIEKTkBAJ0/i7xTfX7nnkhvl6OKBo3w96d9goCws9Gp5yNLtlMt
=H9v4
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Re: Bug#701991: maven3: CVE-2013-0253

2013-03-14 Thread Arnaud Fontaine
Control: reassign -1 src:wagon2
Control: tags -1 + patch

Hello,

This security issue is actually  affecting libwagon2-java as, besides of
build improvements,  maven 3.0.5 only  bumps wagon2 version from  2.2 to
2.4  (should   maven  be   rebuilt  when  a   fixed  version   has  been
uploaded?). Therefore, I'm reassigning this issue to wagon2 instead.

According  to [0],  it  is recommended  to upgrade  to  Maven Wagon  2.4
however this  is not  really possible  as the  new version  requires (at
least,  when  testing by  changing  the  required  version, I  got  more
dependency  errors later  on) libmaven-parent-java  = 23  which is  not
available in the archive.  Moreover, there are many unrelated changes so
the only  solution is  probably to  backport the  patches. The  issue on
Maven Wagon BTS seems to be:

https://jira.codehaus.org/browse/WAGON-385

And the patches (quite small indeed):

https://git-wip-us.apache.org/repos/asf?p=maven-wagon.git;a=commit;h=2f7bb33852cbb9ddb4e1abaa37f282b67bf72af5
https://git-wip-us.apache.org/repos/asf?p=maven-wagon.git;a=commit;h=b5a0839e312345499c811b6eff8f9029118ca8d5

As I  don't know anything  about Maven (I'm  just hunting RC  bugs ;-)),
could you please confirm that these patches fix this issue?  I can later
NMU if it helps.

Also,  there seems  to  have  been several  other  bug fixes  (including
security-related  ones), not  sure  if they  are  really critical,  just
pointing out  what I have found  so far while checking  git history from
Maven Wagon 2.2 to 2.4:

https://git-wip-us.apache.org/repos/asf?p=maven-wagon.git;a=commit;h=f1298163ebb9f72c618c69140f6b47c7ad6c32e5
https://git-wip-us.apache.org/repos/asf?p=maven-wagon.git;a=commit;h=31a5772aeffa38ed50355ad488f741cf48c4960a
https://git-wip-us.apache.org/repos/asf?p=maven-wagon.git;a=commit;h=d95189d00ab1e7ac79bd5b9f7d20525c2776a6a2
https://git-wip-us.apache.org/repos/asf?p=maven-wagon.git;a=commit;h=6b664d691c9a0fec8a09b77a0f57c1945691db8a
https://git-wip-us.apache.org/repos/asf?p=maven-wagon.git;a=commit;h=81c5ebb0efc4c9803a32fa81d390dc60da8905ac

Cheers,
-- 
Arnaud Fontaine

[0] http://maven.apache.org/security.html


pgp0kgRrm2IdH.pgp
Description: PGP signature
__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.