Bug#803713: Elasticsearch should not be part of a Debian release

[Emmanuel Bourg]

Hi Hilko,

Do you think elasticsearch should be removed from unstable?

Emmanuel Bourg

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#844872: libreadline-java: FTBFS: org_gnu_readline_Readline.c:700:37: error: 'CPFunction' undeclared (first use in this function)

[tony mancill]

On Sat, Nov 19, 2016 at 07:45:27AM +0100, Lucas Nussbaum wrote:
> Source: libreadline-java
> Version: 0.8.0.1+dfsg-4
> Severity: serious
> Tags: stretch sid
> User: debian...@lists.debian.org
> Usertags: qa-ftbfs-20161118 qa-ftbfs
> Justification: FTBFS on amd64

Thank you for the bug report. There are some changes to header files
in readline 7.0 [1] that are causing this.  I will prepare a patch for
libreadline-java.

Cheers,
tony

[1] https://tracker.debian.org/news/802108

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: tagging 844872, owner 844872

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> tags 844872 + confirmed
Bug #844872 [src:libreadline-java] libreadline-java: FTBFS: 
org_gnu_readline_Readline.c:700:37: error: 'CPFunction' undeclared (first use 
in this function)
Added tag(s) confirmed.
> owner 844872 tmanc...@debian.org
Bug #844872 [src:libreadline-java] libreadline-java: FTBFS: 
org_gnu_readline_Readline.c:700:37: error: 'CPFunction' undeclared (first use 
in this function)
Owner recorded as tmanc...@debian.org.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
844872: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=844872
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

jruby 1.7.26-1 MIGRATED to testing

[Debian testing watch]

FYI: The status of the jruby source package
in Debian's testing distribution has changed.

  Previous version: 1.7.22-2
  Current version:  1.7.26-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

httpcomponents-asyncclient 4.1.2-1 MIGRATED to testing

[Debian testing watch]

FYI: The status of the httpcomponents-asyncclient source package
in Debian's testing distribution has changed.

  Previous version: 4.1-2
  Current version:  4.1.2-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

mina2 2.0.16-1 MIGRATED to testing

[Debian testing watch]

FYI: The status of the mina2 source package
in Debian's testing distribution has changed.

  Previous version: 2.0.15-1
  Current version:  2.0.16-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

java-string-similarity 0.19-1 MIGRATED to testing

[Debian testing watch]

FYI: The status of the java-string-similarity source package
in Debian's testing distribution has changed.

  Previous version: 0.18-1
  Current version:  0.19-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#803713: Elasticsearch should not be part of a Debian release

[Hilko Bengen]

control: severity -1 serious
control: retitle -1 Elasticsearch should not be part of a Debian release

At this point, there is no point in releasing with an elasticsearch
package.

There is no indication of a change in upstream security policy. In a
misguided attempt to slow down attackers, the upstream project has
actively refused to give specific information on how security bugs have
been fixed. This behavior is incompatible with promise #3 of our Social
Contract. See DSA-3389,
.

The open source core of Elasticsearch lacks features that are essential
for serious use in a datacenter or "cloud" setting: Encryption and
authentication/authorization for both client/server and inter-node
communication are only possible if a license for a non-free,
closed-source plug-in (formerly called "Shield", now "Security") has
been purchased. While there have been repeated enquiries and even pull
requests to add those features to the core, those have been constantly
ignored. See ,
.

In the space of cluster health monitoring utilities where Elastic has
started selling a non-free, closed-source plug-in called "Marvel", there
seem to be similar trends.

No Debian developer should feel obliged to put effort into supporting
packages for this software.

Users are better served using Elastic's "official" packages, even though
they would clearly not pass our packaging quality standards (Lintian
flags 10 errors in elasticsearch-5.0.1).

Cheers,
-Hilko

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Elasticsearch should not be part of a Debian release

[Debian Bug Tracking System]

Processing control commands:

> severity -1 serious
Bug #803713 [src:elasticsearch] re-assess possibility of security support 
before stretch freeze
Severity set to 'serious' from 'important'
> retitle -1 Elasticsearch should not be part of a Debian release
Bug #803713 [src:elasticsearch] re-assess possibility of security support 
before stretch freeze
Changed Bug title to 'Elasticsearch should not be part of a Debian release' 
from 're-assess possibility of security support before stretch freeze'.

-- 
803713: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=803713
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.