Bug#764191: eclipse: FTBFS on armel

2014-11-18 Thread Emmanuel Bourg
Hi Hector,

Thank you for the report. It looks like the VM crashed during the build.
Could you try again with OpenJDK 7u71 please?

Emmanuel Bourg

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Bug#762690: libhibernate-validator-java: affected by CVE-2014-3558

2014-11-18 Thread Raphael Hertzog
On Sun, 02 Nov 2014 23:38:30 +0100 Emmanuel Bourg ebo...@apache.org wrote:
 libhibernate-validator-java is only used as a build dependency of
 libhibernate3-java. No package depends on it at runtime, so the risk of
 being affected by this vulnerability is rather low, if not zero.

Thank you for this information but it's not really a satisfactory answer.

We can't knowingly ship libraries with serious security issues. It's not
the first time I see that kind of answers from the java team. Please
at least package new upstream versions with the appropriate security fixes.

I can understand that backporting security patches might be difficult but
packaging new upstream versions is the basis of our work in Debian. We
can't stay with outdated versions and known vulnerabilities for ever.

Please send a call for help on debian-devel(-announce) if you are not able
to do the basic work of keeping your packages up-to-date. Then the
publicity team might relay your message further... and maybe you'll find
some supplementary volunteers.

Cheers,
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#762690: libhibernate-validator-java: affected by CVE-2014-3558

2014-11-18 Thread Emmanuel Bourg
Le 18/11/2014 11:51, Raphael Hertzog a écrit :

 Thank you for this information but it's not really a satisfactory answer.

I understand your concerns and I'm not claiming that shipping vulnerable
libraries is a good thing. My answer was a factual evaluation of the
impact of this vulnerability on Debian, so people are at least informed
about the actual risks.


 Please send a call for help on debian-devel(-announce) if you are not able
 to do the basic work of keeping your packages up-to-date. Then the
 publicity team might relay your message further... and maybe you'll find
 some supplementary volunteers.

Updating packages is not always basic unfortunately, I wish it was though.




signature.asc
Description: OpenPGP digital signature
__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#766977: elasticsearch not starting

2014-11-18 Thread Hilko Bengen
* Philipp Hug:

 I suspect you did also run into the following problem, which is related:
 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=768178

Uh-oh, this is bad. I strongly suspect that elasticsearch is not the
only package that has this issue.

systemd's behavior is interesting, I suspect that there's room for
improvement for the init script. I'll definitely need to look more
closely into this.

Cheers,
-Hilko

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Bug#764191: eclipse: FTBFS on armel

2014-11-18 Thread Niels Thykier
On 2014-11-18 11:48, Emmanuel Bourg wrote:
 Hi Hector,
 
 Thank you for the report. It looks like the VM crashed during the build.
 Could you try again with OpenJDK 7u71 please?
 
 Emmanuel Bourg
 
 __
 This is the maintainer address of Debian's Java team
 http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers.
  Please use
 debian-j...@lists.debian.org for discussions and questions.
 

FTR, I requested the removal of eclipse on armel and kfreebsd because of
this (and kfreebsd using gcj, which is known not to work).

~Niels

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Bug#769693: Please giveback libjogl2-java

2014-11-18 Thread gregor herrmann
On Mon, 17 Nov 2014 21:46:18 -0800, tony mancill wrote:

  https://buildd.debian.org/status/logs.php?pkg=libjogl2-javaver=2.2.4%2Bdfsg-1

  arm64 fails but AFAICS differently than before. My assumptions are
  that
  - gluegen2/#769003 is ok
  - libjogl2-java has a different problem on arm64
  
  This probably needs some deeper Java knowledge ...
 
 Hmmm...  I installed the build-deps into an arm64 sid chroot on asachi
 (arm64 porterbox) to take a look, but it seems to build okay now.

Thanks for checking!
 
[..]

 Am I missing something, or can we try to run this through the buildd again?

Hmmm … do we have an idea why it failed twice (on two separate
machines) on 2014-11-15 and why it passes now an a third one?

I guess the buildd people would be interesting in the reasons for yet
another giveback :)


Cheers,
gregor

-- 
 .''`.  Homepage: http://info.comodo.priv.at/ - OpenPGP key 0xBB3A68018649AA06
 : :' : Debian GNU/Linux user, admin, and developer  -  http://www.debian.org/
 `. `'  Member of VIBE!AT  SPI, fellow of the Free Software Foundation Europe
   `-   NP: Rolling Stones: Samba


signature.asc
Description: Digital Signature
__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#762690: libhibernate-validator-java: affected by CVE-2014-3558

2014-11-18 Thread Emmanuel Bourg
Le 18/11/2014 20:28, Eugene Zhukov a écrit :

 I've been looking into upgrading it to version 4.2.1.Final. I will commit my 
 work in progress to a separate branch tomorrow. It needs a couple of new 
 dependencies, I will try to commit those tomorrow as well.

I have the upgrade ready Eugene, I'll upload it to experimental today if
I can resolve the last build failure.

Emmanuel Bourg

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Bug#762690: libhibernate-validator-java: affected by CVE-2014-3558

2014-11-18 Thread Eugene Zhukov
Hi,
I've been looking into upgrading it to version 4.2.1.Final. I will commit my 
work in progress to a separate branch tomorrow. It needs a couple of new 
dependencies, I will try to commit those tomorrow as well.

Eugene
__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Bug#762690: libhibernate-validator-java: affected by CVE-2014-3558

2014-11-18 Thread Eugene Zhukov

 On 18 Nov 2014, at 21:37, Emmanuel Bourg ebo...@apache.org wrote:
 
 Le 18/11/2014 20:28, Eugene Zhukov a écrit :
 
 I've been looking into upgrading it to version 4.2.1.Final. I will commit my 
 work in progress to a separate branch tomorrow. It needs a couple of new 
 dependencies, I will try to commit those tomorrow as well.
 
 I have the upgrade ready Eugene, I'll upload it to experimental today if
 I can resolve the last build failure.

OK, that's good news!

Thanks,
Eugene
__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: freemind: bogus french transation for find and replace

2014-11-18 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

 forwarded 720387 https://sourceforge.net/p/freemind/bugs/1218/
Bug #720387 [freemind] freemind: bogus french transation for find and replace
Set Bug forwarded-to-address to 'https://sourceforge.net/p/freemind/bugs/1218/'.
 tag 720387 confirmed upstream
Bug #720387 [freemind] freemind: bogus french transation for find and replace
Added tag(s) upstream and confirmed.
 thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
720387: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=720387
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Bug#720387: freemind: bogus french transation for find and replace

2014-11-18 Thread Adrien Grellier
forwarded 720387 https://sourceforge.net/p/freemind/bugs/1218/
tag 720387 confirmed upstream
thanks

Hi,

I just forward upstream your bug, as the bug is still valid (I am french too).

You may follow it here : 

https://sourceforge.net/p/freemind/bugs/1218/

Thanks for reporting bugs,

Adrien

signature.asc
Description: This is a digitally signed message part.
__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: bug 769698 is forwarded to https://jira.spring.io/browse/SPR-12354

2014-11-18 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

 forwarded 769698 https://jira.spring.io/browse/SPR-12354
Bug #769698 [src:libspring-java] libspring-java: CVE-2014-3625 Directory 
Traversal in Spring Framework
Set Bug forwarded-to-address to 'https://jira.spring.io/browse/SPR-12354'.
 thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
769698: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=769698
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Processing of fest-test_2.1.0-1_amd64.changes

2014-11-18 Thread Debian FTP Masters
fest-test_2.1.0-1_amd64.changes uploaded successfully to localhost
along with the files:
  fest-test_2.1.0-1.dsc
  fest-test_2.1.0.orig.tar.gz
  fest-test_2.1.0-1.debian.tar.xz
  libfest-test-java_2.1.0-1_all.deb
  libfest-test-java-doc_2.1.0-1_all.deb

Greetings,

Your Debian queue daemon (running on host franck.debian.org)

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


fest-test_2.1.0-1_amd64.changes is NEW

2014-11-18 Thread Debian FTP Masters
binary:libfest-test-java is NEW.
binary:libfest-test-java-doc is NEW.
source:fest-test is NEW.

Your package has been put into the NEW queue, which requires manual action
from the ftpteam to process. The upload was otherwise valid (it had a good
OpenPGP signature and file hashes are valid), so please be patient.

Packages are routinely processed through to the archive, and do feel
free to browse the NEW queue[1].

If there is an issue with the upload, you will recieve an email from a
member of the ftpteam.

If you have any questions, you may reply to this email.

[1]: https://ftp-master.debian.org/new.html

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.