maven-javadoc-plugin 3.0.0-3 MIGRATED to testing

2018-04-01 Thread Debian testing watch 
FYI: The status of the maven-javadoc-plugin source package
in Debian's testing distribution has changed.

  Previous version: 3.0.0-2
  Current version:  3.0.0-3

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

java3d 1.5.2+dfsg-14 MIGRATED to testing

2018-04-01 Thread Debian testing watch 
FYI: The status of the java3d source package
in Debian's testing distribution has changed.

  Previous version: 1.5.2+dfsg-13
  Current version:  1.5.2+dfsg-14

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

jboss-threads 2.3.2-1 MIGRATED to testing

2018-04-01 Thread Debian testing watch 
FYI: The status of the jboss-threads source package
in Debian's testing distribution has changed.

  Previous version: 2.3.1-2
  Current version:  2.3.2-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

kryo-serializers REMOVED from testing

2018-04-01 Thread Debian testing watch 
FYI: The status of the kryo-serializers source package
in Debian's testing distribution has changed.

  Previous version: 0.22-3
  Current version:  (not in testing)
  Hint: 
Bug #875594: FTBFS with Java 9: test failures around reflection on core 
classes

The script that generates this mail tries to extract removal
reasons from comments in the britney hint files. Those comments
were not originally meant to be machine readable, so if the
reason for removing your package seems to be nonsense, it is
probably the reporting script that got confused. Please check the
actual hints file before you complain about meaningless removals.

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

jexcelapi 2.6.12-3 MIGRATED to testing

2018-04-01 Thread Debian testing watch 
FYI: The status of the jexcelapi source package
in Debian's testing distribution has changed.

  Previous version: 2.6.12-2
  Current version:  2.6.12-3

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

libslf4j-java 1.7.25-3 MIGRATED to testing

2018-04-01 Thread Debian testing watch 
FYI: The status of the libslf4j-java source package
in Debian's testing distribution has changed.

  Previous version: 1.7.25-2
  Current version:  1.7.25-3

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

jackson-databind 2.9.5-1 MIGRATED to testing

2018-04-01 Thread Debian testing watch 
FYI: The status of the jackson-databind source package
in Debian's testing distribution has changed.

  Previous version: 2.9.4-1
  Current version:  2.9.5-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

jcodings_1.0.29-1_amd64.changes ACCEPTED into unstable

2018-04-01 Thread Debian FTP Masters 


Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Mon, 02 Apr 2018 09:50:57 +0900
Source: jcodings
Binary: libjcodings-java
Architecture: source all
Version: 1.0.29-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Hideki Yamane 
Description:
 libjcodings-java - Java-based codings helper classes for Joni and JRuby
Changes:
 jcodings (1.0.29-1) unstable; urgency=medium
 .
   * New upstream release
 .
   [ Thomas E. Enebo ]
   * [maven-release-plugin] prepare for next development iteration
 .
   [ Marcin Mielzynski ]
   * bump java version
   * do not load encodings reflectively
   * fix a typo
   * do not load transcoders reflectively
   * import cleanup
   * use getInstance
   * allow external encdings and transcoders for be in different packages
 .
   [ Thomas E. Enebo ]
   * [maven-release-plugin] prepare release jcodings-1.0.29
Checksums-Sha1:
 669912f231814e8ebfc7af870dc97d51cd1ed8ca 2088 jcodings_1.0.29-1.dsc
 8a38c68f63154405b17ae6db009355f57d72739e 1376129 jcodings_1.0.29.orig.tar.gz
 77278a336d21b4bdf6d36dc18d82b6e5d8149a7f 4524 jcodings_1.0.29-1.debian.tar.xz
 6920d0a455b60628b5760f4836a55ed325e95b7a 14985 
jcodings_1.0.29-1_amd64.buildinfo
 81d2566f7b75bd075abac9e11ecd22c4544c46b6 1403576 
libjcodings-java_1.0.29-1_all.deb
Checksums-Sha256:
 967aab073e7c812b21bf90a0a7f16e4095abdb469746686434dcbd5565f1812f 2088 
jcodings_1.0.29-1.dsc
 4c680e8d1e6ccac0eb548ca0f9fd32741d3c505557a9625cddc6be6660e839d6 1376129 
jcodings_1.0.29.orig.tar.gz
 28cc1c2441cd7708fc71e6a079be1ad9a10944fb48897f1c2780d581a185ab9c 4524 
jcodings_1.0.29-1.debian.tar.xz
 439c7103a0904a29f8d2a7487fe9cee9ed9c2365e827df29fc97e6e0a6b2c894 14985 
jcodings_1.0.29-1_amd64.buildinfo
 5bc9b994ab945e299e9846ea9e09ac604879a8558c2e45a13840026c2bcf0e3b 1403576 
libjcodings-java_1.0.29-1_all.deb
Files:
 214c8243e3bc75aff85eb2df0a1dcd25 2088 java optional jcodings_1.0.29-1.dsc
 301dae0de1e22c230f4f1d76ae459260 1376129 java optional 
jcodings_1.0.29.orig.tar.gz
 2d7aca10566052ea8b5c33370a48c2aa 4524 java optional 
jcodings_1.0.29-1.debian.tar.xz
 cab34d68eaae366793e8911f14c2f18c 14985 java optional 
jcodings_1.0.29-1_amd64.buildinfo
 3e2d2d53a9faef52e75ee423ba6e7ca5 1403576 java optional 
libjcodings-java_1.0.29-1_all.deb

-BEGIN PGP SIGNATURE-
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=uhDc
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Accepted jcodings 1.0.29-1 (source all) into unstable

2018-04-01 Thread Hideki Yamane 
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Mon, 02 Apr 2018 09:50:57 +0900
Source: jcodings
Binary: libjcodings-java
Architecture: source all
Version: 1.0.29-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Hideki Yamane 
Description:
 libjcodings-java - Java-based codings helper classes for Joni and JRuby
Changes:
 jcodings (1.0.29-1) unstable; urgency=medium
 .
   * New upstream release
 .
   [ Thomas E. Enebo ]
   * [maven-release-plugin] prepare for next development iteration
 .
   [ Marcin Mielzynski ]
   * bump java version
   * do not load encodings reflectively
   * fix a typo
   * do not load transcoders reflectively
   * import cleanup
   * use getInstance
   * allow external encdings and transcoders for be in different packages
 .
   [ Thomas E. Enebo ]
   * [maven-release-plugin] prepare release jcodings-1.0.29
Checksums-Sha1:
 669912f231814e8ebfc7af870dc97d51cd1ed8ca 2088 jcodings_1.0.29-1.dsc
 8a38c68f63154405b17ae6db009355f57d72739e 1376129 jcodings_1.0.29.orig.tar.gz
 77278a336d21b4bdf6d36dc18d82b6e5d8149a7f 4524 jcodings_1.0.29-1.debian.tar.xz
 6920d0a455b60628b5760f4836a55ed325e95b7a 14985 
jcodings_1.0.29-1_amd64.buildinfo
 81d2566f7b75bd075abac9e11ecd22c4544c46b6 1403576 
libjcodings-java_1.0.29-1_all.deb
Checksums-Sha256:
 967aab073e7c812b21bf90a0a7f16e4095abdb469746686434dcbd5565f1812f 2088 
jcodings_1.0.29-1.dsc
 4c680e8d1e6ccac0eb548ca0f9fd32741d3c505557a9625cddc6be6660e839d6 1376129 
jcodings_1.0.29.orig.tar.gz
 28cc1c2441cd7708fc71e6a079be1ad9a10944fb48897f1c2780d581a185ab9c 4524 
jcodings_1.0.29-1.debian.tar.xz
 439c7103a0904a29f8d2a7487fe9cee9ed9c2365e827df29fc97e6e0a6b2c894 14985 
jcodings_1.0.29-1_amd64.buildinfo
 5bc9b994ab945e299e9846ea9e09ac604879a8558c2e45a13840026c2bcf0e3b 1403576 
libjcodings-java_1.0.29-1_all.deb
Files:
 214c8243e3bc75aff85eb2df0a1dcd25 2088 java optional jcodings_1.0.29-1.dsc
 301dae0de1e22c230f4f1d76ae459260 1376129 java optional 
jcodings_1.0.29.orig.tar.gz
 2d7aca10566052ea8b5c33370a48c2aa 4524 java optional 
jcodings_1.0.29-1.debian.tar.xz
 cab34d68eaae366793e8911f14c2f18c 14985 java optional 
jcodings_1.0.29-1_amd64.buildinfo
 3e2d2d53a9faef52e75ee423ba6e7ca5 1403576 java optional 
libjcodings-java_1.0.29-1_all.deb

-BEGIN PGP SIGNATURE-
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=uhDc
-END PGP SIGNATURE-


__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of jcodings_1.0.29-1_amd64.changes

2018-04-01 Thread Debian FTP Masters 
jcodings_1.0.29-1_amd64.changes uploaded successfully to localhost
along with the files:
  jcodings_1.0.29-1.dsc
  jcodings_1.0.29.orig.tar.gz
  jcodings_1.0.29-1.debian.tar.xz
  jcodings_1.0.29-1_amd64.buildinfo
  libjcodings-java_1.0.29-1_all.deb

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

[libcommons-validator-java] annotated tag debian/1%1.6-1 created (now 561b876)

2018-04-01 Thread Emmanuel Bourg 
This is an automated email from the git hooks/post-receive script.

ebourg-guest pushed a change to annotated tag debian/1%1.6-1
in repository libcommons-validator-java.

at  561b876   (tag)
   tagging  43556504fdd565339a009904270e593d9a17f1ad (commit)
  replaces  debian/1%1.5.1-1
 tagged by  Emmanuel Bourg
on  Mon Apr 2 01:37:18 2018 +0200

- Log -
libcommons-validator-java Debian release 1:1.6-1
-BEGIN PGP SIGNATURE-
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=5h8p
-END PGP SIGNATURE-

Emmanuel Bourg (6):
  New upstream version 1.6
  Switch to debhelper level 10
  Wrap and sort
  Removed the build dependency on ant
  Merge tag 'upstream/1.6'
  New upstream release (1.6)

---

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on 
/srv/git.debian.org/git/pkg-java/libcommons-validator-java.git

___
pkg-java-commits mailing list
pkg-java-comm...@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits

[libcommons-validator-java] annotated tag upstream/1.6 created (now 0ed7870)

2018-04-01 Thread Emmanuel Bourg 
This is an automated email from the git hooks/post-receive script.

ebourg-guest pushed a change to annotated tag upstream/1.6
in repository libcommons-validator-java.

at  0ed7870   (tag)
   tagging  c20d129ecd6041cc3627b8d8dc85c8b9a299df68 (commit)
  replaces  upstream/1.5.1
 tagged by  Emmanuel Bourg
on  Mon Jun 19 17:09:25 2017 +0200

- Log -
Upstream version 1.6

Emmanuel Bourg (1):
  New upstream version 1.6

---

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on 
/srv/git.debian.org/git/pkg-java/libcommons-validator-java.git

___
pkg-java-commits mailing list
pkg-java-comm...@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits

Accepted jruby 1.5.6-5+deb7u1 (source all) into oldoldstable

2018-04-01 Thread Santiago R.R. 
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Sat, 31 Mar 2018 13:38:03 +0200
Source: jruby
Binary: jruby
Architecture: source all
Version: 1.5.6-5+deb7u1
Distribution: wheezy-security
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Santiago R.R. 
Description:
 jruby  - 100% pure-Java implementation of Ruby
Changes:
 jruby (1.5.6-5+deb7u1) wheezy-security; urgency=medium
 .
   * Non-maintainer upload by the LTS Team.
   * Fix CVE-2018-175: Strictly interpret octal fields in tar headers to
 avoid infinite loop
   * Fix CVE-2018-176: Raise a security error when there are duplicate
 files in a package
   * Fix CVE-2018-177: Enforce URL validation on spec homepage attribute.
   * Fix CVE-2018-178: Mitigate XSS vulnerability in homepage attribute
 when displayed via gem server.
Checksums-Sha1:
 708096db14106b0ec7b5c0c2d1e3129ed40c83d4 2308 jruby_1.5.6-5+deb7u1.dsc
 c18bb2df632fad19bf14b17674eb1e73d0615acb 5447477 jruby_1.5.6.orig.tar.gz
 1df17fa20408980363957f7adbdccb1a5b64fb2f 34120 
jruby_1.5.6-5+deb7u1.debian.tar.gz
 f11599513a2d3a3b26a500f7e219aa9f4f087b3c 8917748 jruby_1.5.6-5+deb7u1_all.deb
Checksums-Sha256:
 874dc5d6eba8a1345d7c9514ded80690d3b9828146bfd389fe0a0a92feab6589 2308 
jruby_1.5.6-5+deb7u1.dsc
 d101f8be5629f07909367b01deadcb87b6c338f96460ff9efd311ccfc0affb8f 5447477 
jruby_1.5.6.orig.tar.gz
 85ea2139d885d6e1b9ea9f055212ddd085273fbfd3aca1da9acb595b0a49d212 34120 
jruby_1.5.6-5+deb7u1.debian.tar.gz
 fefd684b3c15a89d451cd00e06836152e3dc3a1645b6d6f81601c887a5a10b66 8917748 
jruby_1.5.6-5+deb7u1_all.deb
Files:
 1fe1762658744702fe9ca5caf1ab1f86 2308 ruby optional jruby_1.5.6-5+deb7u1.dsc
 13175b01fd214cf56e8ea64c0dc05eae 5447477 ruby optional jruby_1.5.6.orig.tar.gz
 4a3155d0e97bac7aed5cb25dfb804396 34120 ruby optional 
jruby_1.5.6-5+deb7u1.debian.tar.gz
 0d770259bf08d9da27cca4c337fe94df 8917748 ruby optional 
jruby_1.5.6-5+deb7u1_all.deb

-BEGIN PGP SIGNATURE-
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=hsTU
-END PGP SIGNATURE-


__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#893288: marked as done (libfreemarker-java FTBFS with openjdk-9)

2018-04-01 Thread Debian Bug Tracking System 
Your message dated Sun, 01 Apr 2018 16:07:54 +
with message-id 
and subject line Bug#893288: fixed in libfreemarker-java 2.3.23-8
has caused the Debian Bug report #893288,
regarding libfreemarker-java FTBFS with openjdk-9
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
893288: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893288
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: libfreemarker-java
Version: 2.3.23-7
Severity: serious

https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/libfreemarker-java.html

...
BUILD FAILED
/build/1st/libfreemarker-java-2.3.23/build.xml:184: The 
"boot.classpath.j2se1.4" property value (${sun.boot.class.path}) seems to be an 
incorrect boot classpath. Please fix it in the /build.properties 
file, or wherever you set it.

Total time: 3 minutes 5 seconds
dh_auto_build: ant 
-Divy.settings.file=/usr/share/ivy-debian-helper/ivysettings.xml 
-Divy.default.ivy.user.dir=/build/1st/libfreemarker-java-2.3.23/.ivy2 
-Divy.default.ivy.user.dir=/build/1st/libfreemarker-java-2.3.23/.ivy 
-Dtitlebar.found=true -DTODAY= -DDSTAMP= -DTSTAMP= -DtimestampNice= 
-DtimestampInVersion= javacc jar javadoc returned exit code 1
make[1]: *** [debian/rules:12: override_dh_auto_build] Error 1
--- End Message ---
--- Begin Message ---
Source: libfreemarker-java
Source-Version: 2.3.23-8

We believe that the bug you reported is fixed in the latest version of
libfreemarker-java, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 893...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Markus Koschany  (supplier of updated libfreemarker-java 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Sun, 01 Apr 2018 17:48:41 +0200
Source: libfreemarker-java
Binary: libfreemarker-java libfreemarker-java-doc
Architecture: source
Version: 2.3.23-8
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Markus Koschany 
Description:
 libfreemarker-java - template engine written in Java
 libfreemarker-java-doc - template engine written in Java (documentation)
Closes: 889411 893288
Changes:
 libfreemarker-java (2.3.23-8) unstable; urgency=medium
 .
   * Team upload.
   * Switch to compat level 11.
   * Use https for Format field.
   * Declare compliance with Debian Policy 4.1.3.
   * Remove Damien Raude-Morvan from Uploaders. (Closes: #889411)
   * Fix FTBFS with Java 9. (Closes: #893288)
Checksums-Sha1:
 21c53f943336ef03439eed65a82883092658a1c0 2940 libfreemarker-java_2.3.23-8.dsc
 60e026b675278ba48324bb2d0f0346bc769aabf6 12008 
libfreemarker-java_2.3.23-8.debian.tar.xz
 048661a908d112feaa4e7aef5989d527b8a7b421 15052 
libfreemarker-java_2.3.23-8_amd64.buildinfo
Checksums-Sha256:
 10d3eb1077b3286ff90aa2f4e0b0b2e90687a10285d6643a7f7de31b32928ab9 2940 
libfreemarker-java_2.3.23-8.dsc
 bed7aebd84fcfeabe3406f6c353763e14db55454d96f96053b38857921371371 12008 
libfreemarker-java_2.3.23-8.debian.tar.xz
 e63b56dc7795224ccd8f6413266d44896984f7fe12a09fe39f01487643aca362 15052 
libfreemarker-java_2.3.23-8_amd64.buildinfo
Files:
 2ed59ddb5b6b6c135b817a3d256333ba 2940 java optional 
libfreemarker-java_2.3.23-8.dsc
 62f939287e821aae053c720d02250aef 12008 java optional 
libfreemarker-java_2.3.23-8.debian.tar.xz
 6a67f6ef0d4dcc9acad5dca5c3b35505 15052 java optional 
libfreemarker-java_2.3.23-8_amd64.buildinfo

-BEGIN PGP SIGNATURE-
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Bug#889411: marked as done (Updating the libfreemarker-java Uploaders list)

2018-04-01 Thread Debian Bug Tracking System 
Your message dated Sun, 01 Apr 2018 16:07:54 +
with message-id 
and subject line Bug#889411: fixed in libfreemarker-java 2.3.23-8
has caused the Debian Bug report #889411,
regarding Updating the libfreemarker-java Uploaders list
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
889411: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=889411
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: libfreemarker-java
Version: 2.3.20-4 2.3.23-7
Severity: minor
User: m...@qa.debian.org
Usertags: mia-teammaint

Damien Raude-Morvan  has not been working on
the libfreemarker-java package for quite some time.

We are tracking their status in the MIA team and would like to ask you
to remove them from the Uploaders list of the package so we can close
that part of the file.

(If the person is listed as Maintainer, what we are asking is to please
step in as a new maintainer.)

Thanks.
--- End Message ---
--- Begin Message ---
Source: libfreemarker-java
Source-Version: 2.3.23-8

We believe that the bug you reported is fixed in the latest version of
libfreemarker-java, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 889...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Markus Koschany  (supplier of updated libfreemarker-java 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Sun, 01 Apr 2018 17:48:41 +0200
Source: libfreemarker-java
Binary: libfreemarker-java libfreemarker-java-doc
Architecture: source
Version: 2.3.23-8
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Markus Koschany 
Description:
 libfreemarker-java - template engine written in Java
 libfreemarker-java-doc - template engine written in Java (documentation)
Closes: 889411 893288
Changes:
 libfreemarker-java (2.3.23-8) unstable; urgency=medium
 .
   * Team upload.
   * Switch to compat level 11.
   * Use https for Format field.
   * Declare compliance with Debian Policy 4.1.3.
   * Remove Damien Raude-Morvan from Uploaders. (Closes: #889411)
   * Fix FTBFS with Java 9. (Closes: #893288)
Checksums-Sha1:
 21c53f943336ef03439eed65a82883092658a1c0 2940 libfreemarker-java_2.3.23-8.dsc
 60e026b675278ba48324bb2d0f0346bc769aabf6 12008 
libfreemarker-java_2.3.23-8.debian.tar.xz
 048661a908d112feaa4e7aef5989d527b8a7b421 15052 
libfreemarker-java_2.3.23-8_amd64.buildinfo
Checksums-Sha256:
 10d3eb1077b3286ff90aa2f4e0b0b2e90687a10285d6643a7f7de31b32928ab9 2940 
libfreemarker-java_2.3.23-8.dsc
 bed7aebd84fcfeabe3406f6c353763e14db55454d96f96053b38857921371371 12008 
libfreemarker-java_2.3.23-8.debian.tar.xz
 e63b56dc7795224ccd8f6413266d44896984f7fe12a09fe39f01487643aca362 15052 
libfreemarker-java_2.3.23-8_amd64.buildinfo
Files:
 2ed59ddb5b6b6c135b817a3d256333ba 2940 java optional 
libfreemarker-java_2.3.23-8.dsc
 62f939287e821aae053c720d02250aef 12008 java optional 
libfreemarker-java_2.3.23-8.debian.tar.xz
 6a67f6ef0d4dcc9acad5dca5c3b35505 15052 java optional 
libfreemarker-java_2.3.23-8_amd64.buildinfo

-BEGIN PGP SIGNATURE-
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=jOp7
-END PGP SIGNATURE End

libfreemarker-java_2.3.23-8_source.changes ACCEPTED into unstable

2018-04-01 Thread Debian FTP Masters 


Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Sun, 01 Apr 2018 17:48:41 +0200
Source: libfreemarker-java
Binary: libfreemarker-java libfreemarker-java-doc
Architecture: source
Version: 2.3.23-8
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Markus Koschany 
Description:
 libfreemarker-java - template engine written in Java
 libfreemarker-java-doc - template engine written in Java (documentation)
Closes: 889411 893288
Changes:
 libfreemarker-java (2.3.23-8) unstable; urgency=medium
 .
   * Team upload.
   * Switch to compat level 11.
   * Use https for Format field.
   * Declare compliance with Debian Policy 4.1.3.
   * Remove Damien Raude-Morvan from Uploaders. (Closes: #889411)
   * Fix FTBFS with Java 9. (Closes: #893288)
Checksums-Sha1:
 21c53f943336ef03439eed65a82883092658a1c0 2940 libfreemarker-java_2.3.23-8.dsc
 60e026b675278ba48324bb2d0f0346bc769aabf6 12008 
libfreemarker-java_2.3.23-8.debian.tar.xz
 048661a908d112feaa4e7aef5989d527b8a7b421 15052 
libfreemarker-java_2.3.23-8_amd64.buildinfo
Checksums-Sha256:
 10d3eb1077b3286ff90aa2f4e0b0b2e90687a10285d6643a7f7de31b32928ab9 2940 
libfreemarker-java_2.3.23-8.dsc
 bed7aebd84fcfeabe3406f6c353763e14db55454d96f96053b38857921371371 12008 
libfreemarker-java_2.3.23-8.debian.tar.xz
 e63b56dc7795224ccd8f6413266d44896984f7fe12a09fe39f01487643aca362 15052 
libfreemarker-java_2.3.23-8_amd64.buildinfo
Files:
 2ed59ddb5b6b6c135b817a3d256333ba 2940 java optional 
libfreemarker-java_2.3.23-8.dsc
 62f939287e821aae053c720d02250aef 12008 java optional 
libfreemarker-java_2.3.23-8.debian.tar.xz
 6a67f6ef0d4dcc9acad5dca5c3b35505 15052 java optional 
libfreemarker-java_2.3.23-8_amd64.buildinfo

-BEGIN PGP SIGNATURE-

iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAlrBABZfFIAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD
RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp
YW4ub3JnAAoJENmtFLlRO1HkhmMP/jClCSle7ws7vv2aN36P+B7642XNT+4TNiz5
api4TUPA6kdm+AX8E3T7TbKgzozplYres+KAPIoQwdmhrnMdML9MqgU9TSOZkHCB
w/Vxd1mEXpus2Y5y0oJwFw9w42M36pq3e+tH+YAKfLZ5Q40Z27cxxOruX5YMqEp2
xy7dUtWjxOJz+63DkiqsIsGARLDpdGnlfL9/ju1giGuzMpaPRY8dFG5nIkk7pSiw
pjRwBrMzzq7h9NIFjzgTSUzrqAZURglO7CSG9o7YD/ylu1i0jEy5SKqJUePIOber
sYrfCJevF44A44N5NYyZcCXzQIkY6tShV+Zjdp+pNeFRk1bgMcEzzxiE/xeHeEMf
gCaJ22Hk6N6QKaDGuRsdQ+WO/SrccDCo9O045ZciIsrYbCVNqGINq+f779cib8Pl
A3tVcgr95E+utki8osbvt9J4/eW0DGSPShbuL+NrPfrcz7qBOCovdohLQsCHeENB
aHTFu8AjkHTPwn4D81mHVyrFOc1+7i0Hn0G0DtzB5A9haGfJ+xMbcmjf1OpkoYfM
TcaQpnfkSa8YGyQ5QBKENqn14JrGyTPPAZzJb9uscYBDeRR5ZS0/vjtslc/6S+IB
WsU2eREcehfUuOgd2+QkZvuDV+ju1qoEXifJ3v3JiTByMuQVKYQCxhVjUfHZWWwd
Lu1XAv5+
=jOp7
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Accepted libfreemarker-java 2.3.23-8 (source) into unstable

2018-04-01 Thread Markus Koschany 
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Sun, 01 Apr 2018 17:48:41 +0200
Source: libfreemarker-java
Binary: libfreemarker-java libfreemarker-java-doc
Architecture: source
Version: 2.3.23-8
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Markus Koschany 
Description:
 libfreemarker-java - template engine written in Java
 libfreemarker-java-doc - template engine written in Java (documentation)
Closes: 889411 893288
Changes:
 libfreemarker-java (2.3.23-8) unstable; urgency=medium
 .
   * Team upload.
   * Switch to compat level 11.
   * Use https for Format field.
   * Declare compliance with Debian Policy 4.1.3.
   * Remove Damien Raude-Morvan from Uploaders. (Closes: #889411)
   * Fix FTBFS with Java 9. (Closes: #893288)
Checksums-Sha1:
 21c53f943336ef03439eed65a82883092658a1c0 2940 libfreemarker-java_2.3.23-8.dsc
 60e026b675278ba48324bb2d0f0346bc769aabf6 12008 
libfreemarker-java_2.3.23-8.debian.tar.xz
 048661a908d112feaa4e7aef5989d527b8a7b421 15052 
libfreemarker-java_2.3.23-8_amd64.buildinfo
Checksums-Sha256:
 10d3eb1077b3286ff90aa2f4e0b0b2e90687a10285d6643a7f7de31b32928ab9 2940 
libfreemarker-java_2.3.23-8.dsc
 bed7aebd84fcfeabe3406f6c353763e14db55454d96f96053b38857921371371 12008 
libfreemarker-java_2.3.23-8.debian.tar.xz
 e63b56dc7795224ccd8f6413266d44896984f7fe12a09fe39f01487643aca362 15052 
libfreemarker-java_2.3.23-8_amd64.buildinfo
Files:
 2ed59ddb5b6b6c135b817a3d256333ba 2940 java optional 
libfreemarker-java_2.3.23-8.dsc
 62f939287e821aae053c720d02250aef 12008 java optional 
libfreemarker-java_2.3.23-8.debian.tar.xz
 6a67f6ef0d4dcc9acad5dca5c3b35505 15052 java optional 
libfreemarker-java_2.3.23-8_amd64.buildinfo

-BEGIN PGP SIGNATURE-
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=jOp7
-END PGP SIGNATURE-


__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#893663: freeplane: CVE-2018-1000069 XXE vulnerability

2018-04-01 Thread Markus Koschany 


Am 01.04.2018 um 17:57 schrieb Felix Natter:
[...]
> Thanks, done.
> BTW: Is it ok to close the bug with the stretch-security upload even if
> the jessie-security upload is still pending?

Yes, that's ok. You can close the bug with both uploads.

> What is there to do next?

As soon as the security team has approved the changes, I can upload your
packages to security-master.

>> Distribution should be stretch-security though and the urgency is high.
>> Similar for Jessie, jessie-security and the version is 1.3.12-1+deb8u1
> 
> I will do this soon, hopefully tomorrow.
> 
> Cheers and Best Regards,

Regards,

Markus



signature.asc
Description: OpenPGP digital signature
__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of libfreemarker-java_2.3.23-8_source.changes

2018-04-01 Thread Debian FTP Masters 
libfreemarker-java_2.3.23-8_source.changes uploaded successfully to localhost
along with the files:
  libfreemarker-java_2.3.23-8.dsc
  libfreemarker-java_2.3.23-8.debian.tar.xz
  libfreemarker-java_2.3.23-8_amd64.buildinfo

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#893663: freeplane: CVE-2018-1000069 XXE vulnerability

2018-04-01 Thread Felix Natter 
Markus Koschany  writes:

> Hi Felix,

hello Markus,

> Am 01.04.2018 um 16:23 schrieb Felix Natter:
>> hello Markus,
>> 
>> I have prepared the patched 1.5.18-1+deb9u1 for stretch
>> I hope I got the version number right? The changelog entry is probably
>> not correct either. Can you advice what to read?
>> 
>> I briefly tested saving+loading mindmaps.
>> 
>> Here it is:
>> https://anonscm.debian.org/cgit/pkg-java/freeplane.git/log/?h=stretch-CVE-2018-169
>> (branch stretch-CVE-2018-169 in the freeplane alioth repo).
>> 
>> I am in the process of setting up a vbox instance for jessie to address
>> the other update.
>> 
>> Cheers and Best Regards,
>
> The version is correct. I would write in your changelog:
>
> Fix CVE-2018-169: Wojciech Reguła discovered that FreePlane was
> affected by a XML External Entity (XXE) vulnerability in its mindmap
> loader that could compromise a user's machine by opening a specially
> crafted mind map file. (Closes: #893663)

Thanks, done.
BTW: Is it ok to close the bug with the stretch-security upload even if
the jessie-security upload is still pending?

What is there to do next?

> Distribution should be stretch-security though and the urgency is high.
> Similar for Jessie, jessie-security and the version is 1.3.12-1+deb8u1

I will do this soon, hopefully tomorrow.

Cheers and Best Regards,
-- 
Felix Natter
debian/rules!

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Pending fixes for bugs in the libfreemarker-java package

2018-04-01 Thread Debian Bug Tracking System 
Processing commands for cont...@bugs.debian.org:

> tag 889411 + pending
Bug #889411 [src:libfreemarker-java] Updating the libfreemarker-java Uploaders 
list
Added tag(s) pending.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
889411: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=889411
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Pending fixes for bugs in the libfreemarker-java package

2018-04-01 Thread Debian Bug Tracking System 
Processing commands for cont...@bugs.debian.org:

> tag 893288 + pending
Bug #893288 [src:libfreemarker-java] libfreemarker-java FTBFS with openjdk-9
Added tag(s) pending.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
893288: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893288
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#893288: Pending fixes for bugs in the libfreemarker-java package

2018-04-01 Thread pkg-java-maintainers 
tag 893288 + pending
thanks

Some bugs in the libfreemarker-java package are closed in revision
2f3cf662d62132d0bbe26d33fcf65c869a3f3dad in branch 'master' by Markus
Koschany

The full diff can be seen at
https://anonscm.debian.org/cgit/pkg-java/libfreemarker-java.git/commit/?id=2f3cf66

Commit message:

Fix FTBFS with Java 9.

Closes: #893288

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#889411: Pending fixes for bugs in the libfreemarker-java package

2018-04-01 Thread pkg-java-maintainers 
tag 889411 + pending
thanks

Some bugs in the libfreemarker-java package are closed in revision
13eb8684ba7342c8d5e5078c690544d2fc45460e in branch 'master' by Markus
Koschany

The full diff can be seen at
https://anonscm.debian.org/cgit/pkg-java/libfreemarker-java.git/commit/?id=13eb868

Commit message:

Remove Damien Raude-Morvan from Uploaders.

Closes: #889411

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

[freeplane] branch stretch-CVE-2018-1000069 updated (6073895 -> c358116)

2018-04-01 Thread Felix Natter 
This is an automated email from the git hooks/post-receive script.

fnatter-guest pushed a change to branch stretch-CVE-2018-169
in repository freeplane.

  from  6073895   change version number
   new  c358116   fix changelog entry

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


Summary of changes:
 debian/changelog | 9 ++---
 1 file changed, 6 insertions(+), 3 deletions(-)

-- 
Alioth's /usr/local/bin/git-commit-notice on 
/srv/git.debian.org/git/pkg-java/freeplane.git

___
pkg-java-commits mailing list
pkg-java-comm...@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits

[freeplane] 01/01: fix changelog entry

2018-04-01 Thread Felix Natter 
This is an automated email from the git hooks/post-receive script.

fnatter-guest pushed a commit to branch stretch-CVE-2018-169
in repository freeplane.

commit c358116cf3858f53a7f8e9b43f2bfc5a26515048
Author: Felix Natter 
Date:   Sun Apr 1 17:56:00 2018 +0200

fix changelog entry
---
 debian/changelog | 9 ++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index a591cc6..0fb9b24 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,8 +1,11 @@
-freeplane (1.5.18-1+deb9u1) unstable; urgency=medium
+freeplane (1.5.18-1+deb9u1) stretch-security; urgency=high
 
-  * fix CVE-2018-169
+  * Fix CVE-2018-169: Wojciech Reguła discovered that FreePlane was
+affected by a XML External Entity (XXE) vulnerability in its mindmap
+loader that could compromise a user's machine by opening a specially
+crafted mind map file. (Closes: #893663)
 
- -- Felix Natter   Sun, 01 Apr 2018 15:53:49 +0200
+ -- Felix Natter   Sun, 01 Apr 2018 17:55:27 +0200
 
 freeplane (1.5.18-1) unstable; urgency=medium
 

-- 
Alioth's /usr/local/bin/git-commit-notice on 
/srv/git.debian.org/git/pkg-java/freeplane.git

___
pkg-java-commits mailing list
pkg-java-comm...@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits

[libfreemarker-java] branch master updated (5deed6c -> e9481c3)

2018-04-01 Thread Markus Koschany 
This is an automated email from the git hooks/post-receive script.

apo pushed a change to branch master
in repository libfreemarker-java.

  from  5deed6c   Upload to unstable
   new  25d1ce0   Switch to compat level 11.
   new  5aa4144   Use https for Format field.
   new  f2b710a   Declare compliance with Debian Policy 4.1.3.
   new  13eb868   Remove Damien Raude-Morvan from Uploaders.
   new  2f3cf66   Fix FTBFS with Java 9.
   new  e9481c3   Update changelog

The 6 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


Summary of changes:
 debian/changelog   | 11 +++
 debian/compat  |  2 +-
 debian/control |  5 ++---
 debian/copyright   |  2 +-
 debian/patches/java9.patch | 34 ++
 debian/patches/series  |  1 +
 6 files changed, 50 insertions(+), 5 deletions(-)
 create mode 100644 debian/patches/java9.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on 
/srv/git.debian.org/git/pkg-java/libfreemarker-java.git

___
pkg-java-commits mailing list
pkg-java-comm...@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits

[libfreemarker-java] 02/06: Use https for Format field.

2018-04-01 Thread Markus Koschany 
This is an automated email from the git hooks/post-receive script.

apo pushed a commit to branch master
in repository libfreemarker-java.

commit 5aa4144e04bf2a22a721e9042e686fc6f28da51f
Author: Markus Koschany 
Date:   Sun Apr 1 17:40:06 2018 +0200

Use https for Format field.
---
 debian/copyright | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/debian/copyright b/debian/copyright
index de2cb12..8a58f8d 100644
--- a/debian/copyright
+++ b/debian/copyright
@@ -1,4 +1,4 @@
-Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
 Upstream-Name: FreeMarker
 Upstream-Contact: The Visigoth Software Society
 Source: http://freemarker.sourceforge.net/

-- 
Alioth's /usr/local/bin/git-commit-notice on 
/srv/git.debian.org/git/pkg-java/libfreemarker-java.git

___
pkg-java-commits mailing list
pkg-java-comm...@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits

[libfreemarker-java] 05/06: Fix FTBFS with Java 9.

2018-04-01 Thread Markus Koschany 
This is an automated email from the git hooks/post-receive script.

apo pushed a commit to branch master
in repository libfreemarker-java.

commit 2f3cf662d62132d0bbe26d33fcf65c869a3f3dad
Author: Markus Koschany 
Date:   Sun Apr 1 17:48:24 2018 +0200

Fix FTBFS with Java 9.

Closes: #893288
---
 debian/patches/java9.patch | 34 ++
 debian/patches/series  |  1 +
 2 files changed, 35 insertions(+)

diff --git a/debian/patches/java9.patch b/debian/patches/java9.patch
new file mode 100644
index 000..1413ab3
--- /dev/null
+++ b/debian/patches/java9.patch
@@ -0,0 +1,34 @@
+From: Markus Koschany 
+Date: Sun, 1 Apr 2018 17:47:49 +0200
+Subject: java9
+
+Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893288
+Forwarded: no
+---
+ build.xml | 13 -
+ 1 file changed, 13 deletions(-)
+
+diff --git a/build.xml b/build.xml
+index 86394f4..0ed2d61 100644
+--- a/build.xml
 b/build.xml
+@@ -181,19 +181,6 @@
+   
+
+   
+-The "boot.classpath.j2se1.4" property value 
(${boot.classpath.j2se1.4}) seems to be an incorrect boot classpath. Please fix it in the projectDir>/build.properties file, or wherever you set it.
+-The "boot.classpath.j2se1.5" property value 
(${boot.classpath.j2se1.5}) seems to be an incorrect boot classpath. Please fix it in the projectDir>/build.properties file, or wherever you set it.
+-Using boot classpaths: 1.4: ${boot.classpath.j2se1.4}; 
1.5: ${boot.classpath.j2se1.5}
+ 
+ 
+ 
diff --git a/debian/patches/series b/debian/patches/series
index fa10740..51789d3 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -9,3 +9,4 @@ ivy-configuration.patch
 exclude-avalon-logger.patch
 jython-compatibility.patch
 fix-tests-classpath.patch
+java9.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on 
/srv/git.debian.org/git/pkg-java/libfreemarker-java.git

___
pkg-java-commits mailing list
pkg-java-comm...@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits

[libfreemarker-java] 01/06: Switch to compat level 11.

2018-04-01 Thread Markus Koschany 
This is an automated email from the git hooks/post-receive script.

apo pushed a commit to branch master
in repository libfreemarker-java.

commit 25d1ce0f4e16e6333ad74e7c39b994cdd629f40a
Author: Markus Koschany 
Date:   Sun Apr 1 17:39:23 2018 +0200

Switch to compat level 11.
---
 debian/compat  | 2 +-
 debian/control | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/debian/compat b/debian/compat
index f599e28..b4de394 100644
--- a/debian/compat
+++ b/debian/compat
@@ -1 +1 @@
-10
+11
diff --git a/debian/control b/debian/control
index 1d29e5d..f760910 100644
--- a/debian/control
+++ b/debian/control
@@ -10,7 +10,7 @@ Build-Depends: ant,
ant-optional,
antlr3,
bnd,
-   debhelper (>= 10),
+   debhelper (>= 11),
default-jdk,
default-jdk-doc,
ivy,

-- 
Alioth's /usr/local/bin/git-commit-notice on 
/srv/git.debian.org/git/pkg-java/libfreemarker-java.git

___
pkg-java-commits mailing list
pkg-java-comm...@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits

[libfreemarker-java] annotated tag debian/2.3.23-8 created (now d9a9b74)

2018-04-01 Thread Markus Koschany 
This is an automated email from the git hooks/post-receive script.

apo pushed a change to annotated tag debian/2.3.23-8
in repository libfreemarker-java.

at  d9a9b74   (tag)
   tagging  e9481c3d5a72ca0af67f8a4f784d16df4b40dc61 (commit)
  replaces  debian/2.3.23-6
 tagged by  Markus Koschany
on  Sun Apr 1 17:52:41 2018 +0200

- Log -
Debian release 2.3.23-8
-BEGIN PGP SIGNATURE-
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=V6Hs
-END PGP SIGNATURE-

Emmanuel Bourg (4):
  Updated the Maven rule for ASM
  Standards-Version updated to 4.1.1
  Switch to debhelper level 10
  Upload to unstable

Markus Koschany (6):
  Switch to compat level 11.
  Use https for Format field.
  Declare compliance with Debian Policy 4.1.3.
  Remove Damien Raude-Morvan from Uploaders.
  Fix FTBFS with Java 9.
  Update changelog

---

This annotated tag includes the following new commits:

   new  25d1ce0   Switch to compat level 11.
   new  5aa4144   Use https for Format field.
   new  f2b710a   Declare compliance with Debian Policy 4.1.3.
   new  13eb868   Remove Damien Raude-Morvan from Uploaders.
   new  2f3cf66   Fix FTBFS with Java 9.
   new  e9481c3   Update changelog

The 6 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


-- 
Alioth's /usr/local/bin/git-commit-notice on 
/srv/git.debian.org/git/pkg-java/libfreemarker-java.git

___
pkg-java-commits mailing list
pkg-java-comm...@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits

[libfreemarker-java] 03/06: Declare compliance with Debian Policy 4.1.3.

2018-04-01 Thread Markus Koschany 
This is an automated email from the git hooks/post-receive script.

apo pushed a commit to branch master
in repository libfreemarker-java.

commit f2b710ae381ba397348909cc884c3e7ab6577474
Author: Markus Koschany 
Date:   Sun Apr 1 17:40:20 2018 +0200

Declare compliance with Debian Policy 4.1.3.
---
 debian/control | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/debian/control b/debian/control
index f760910..d080c50 100644
--- a/debian/control
+++ b/debian/control
@@ -44,7 +44,7 @@ Build-Depends: ant,
libxerces2-java,
libxerces2-java-doc,
maven-repo-helper
-Standards-Version: 4.1.1
+Standards-Version: 4.1.3
 Vcs-Git: https://anonscm.debian.org/git/pkg-java/libfreemarker-java.git
 Vcs-Browser: https://anonscm.debian.org/cgit/pkg-java/libfreemarker-java.git
 Homepage: http://www.freemarker.org

-- 
Alioth's /usr/local/bin/git-commit-notice on 
/srv/git.debian.org/git/pkg-java/libfreemarker-java.git

___
pkg-java-commits mailing list
pkg-java-comm...@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits

[libfreemarker-java] 04/06: Remove Damien Raude-Morvan from Uploaders.

2018-04-01 Thread Markus Koschany 
This is an automated email from the git hooks/post-receive script.

apo pushed a commit to branch master
in repository libfreemarker-java.

commit 13eb8684ba7342c8d5e5078c690544d2fc45460e
Author: Markus Koschany 
Date:   Sun Apr 1 17:41:16 2018 +0200

Remove Damien Raude-Morvan from Uploaders.

Closes: #889411
---
 debian/control | 1 -
 1 file changed, 1 deletion(-)

diff --git a/debian/control b/debian/control
index d080c50..94245f1 100644
--- a/debian/control
+++ b/debian/control
@@ -4,7 +4,6 @@ Priority: optional
 Maintainer: Debian Java Maintainers 

 Uploaders: Varun Hiremath ,
Torsten Werner ,
-   Damien Raude-Morvan ,
Emmanuel Bourg 
 Build-Depends: ant,
ant-optional,

-- 
Alioth's /usr/local/bin/git-commit-notice on 
/srv/git.debian.org/git/pkg-java/libfreemarker-java.git

___
pkg-java-commits mailing list
pkg-java-comm...@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits

[libfreemarker-java] 06/06: Update changelog

2018-04-01 Thread Markus Koschany 
This is an automated email from the git hooks/post-receive script.

apo pushed a commit to branch master
in repository libfreemarker-java.

commit e9481c3d5a72ca0af67f8a4f784d16df4b40dc61
Author: Markus Koschany 
Date:   Sun Apr 1 17:48:53 2018 +0200

Update changelog
---
 debian/changelog | 11 +++
 1 file changed, 11 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index 7fc99e7..2cb46cf 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,14 @@
+libfreemarker-java (2.3.23-8) unstable; urgency=medium
+
+  * Team upload.
+  * Switch to compat level 11.
+  * Use https for Format field.
+  * Declare compliance with Debian Policy 4.1.3.
+  * Remove Damien Raude-Morvan from Uploaders. (Closes: #889411)
+  * Fix FTBFS with Java 9. (Closes: #893288)
+
+ -- Markus Koschany   Sun, 01 Apr 2018 17:48:41 +0200
+
 libfreemarker-java (2.3.23-7) unstable; urgency=medium
 
   * Team upload.

-- 
Alioth's /usr/local/bin/git-commit-notice on 
/srv/git.debian.org/git/pkg-java/libfreemarker-java.git

___
pkg-java-commits mailing list
pkg-java-comm...@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits

Bug#894523: marked as done (liblayout build depends on java-gcj-compat-dev)

2018-04-01 Thread Debian Bug Tracking System 
Your message dated Sun, 01 Apr 2018 15:23:25 +
with message-id 
and subject line Bug#894523: fixed in liblayout 0.2.10-3
has caused the Debian Bug report #894523,
regarding liblayout build depends on java-gcj-compat-dev
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
894523: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=894523
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: liblayout
Version: 0.2.10-2
Severity: serious
Tags: buster sid

The following packages have unmet dependencies:
 builddeps:liblayout : Depends: java-gcj-compat-dev

gcj has been removed from Debian.
--- End Message ---
--- Begin Message ---
Source: liblayout
Source-Version: 0.2.10-3

We believe that the bug you reported is fixed in the latest version of
liblayout, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 894...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
tony mancill  (supplier of updated liblayout package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Sat, 31 Mar 2018 21:55:57 -0700
Source: liblayout
Binary: liblayout-java liblayout-java-doc
Architecture: source all
Version: 0.2.10-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: tony mancill 
Description:
 liblayout-java - Java layouting framework
 liblayout-java-doc - Java layouting framework -- documentation
Closes: 894523
Changes:
 liblayout (0.2.10-3) unstable; urgency=medium
 .
   * Team upload.
   * Replace build-dep on gcj with default-jdk (Closes: #894523)
   * Use debhelper 11
   * Bump Standards-Version to 4.1.3
   * Convert package from CDBS to DH sequencer
   * Add patch to target Java 1.8
Checksums-Sha1:
 dbbac10bc239365cedec6ddb2d4d396fbbd6afb0 2141 liblayout_0.2.10-3.dsc
 b4e5a5b98a8654f21541d00e6bc583fe74f7f0a4 2936 liblayout_0.2.10-3.debian.tar.xz
 e3682b567676afd0b84a1d0375573223102cf5b4 883576 
liblayout-java-doc_0.2.10-3_all.deb
 b61186a0e365a4b6abf4deef7275ca729181ac38 652776 liblayout-java_0.2.10-3_all.deb
 85e5b2d9bd83a09f1cc56bec86735fa1147c672d 12663 
liblayout_0.2.10-3_amd64.buildinfo
Checksums-Sha256:
 86a375b918cb5b405d2136647b1eb3d2b49902b36601228a01ff18fb3a9a2539 2141 
liblayout_0.2.10-3.dsc
 ad0d82a8e7cc420eb66ca560de68621dcc5d05bf7cb8eb6f244e43b15b53a160 2936 
liblayout_0.2.10-3.debian.tar.xz
 1e422ce99ab3d3cdcf681a652579ed1f5f99680ce85c66bbd607be21d1600306 883576 
liblayout-java-doc_0.2.10-3_all.deb
 d524ae536d23dc398850737246778360e1bfba1618f6da09fa5867ba584aa962 652776 
liblayout-java_0.2.10-3_all.deb
 6ceacb43846b8f5108e70ef591d643a570bfd26a0b9f612d6438caedee20f035 12663 
liblayout_0.2.10-3_amd64.buildinfo
Files:
 596f662c54df72a66c4f96cf454824b4 2141 libs optional liblayout_0.2.10-3.dsc
 59395cfb9be77fe8c08e6546cf0b3fcd 2936 libs optional 
liblayout_0.2.10-3.debian.tar.xz
 1115eb80095a4f235831158fb12ec8d1 883576 doc optional 
liblayout-java-doc_0.2.10-3_all.deb
 eb122834d0fde8a6446530c7b2d7a894 652776 java optional 
liblayout-java_0.2.10-3_all.deb
 9736531b8d790e94191ee4387d031c49 12663 libs optional 
liblayout_0.2.10-3_amd64.buildinfo

-BEGIN PGP SIGNATURE-
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=VPEh
-END PGP SIGNATURE End Message ---
__
This is the maintainer address of Debian's Java

Accepted liblayout 0.2.10-3 (source all) into unstable

2018-04-01 Thread tony mancill 
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Sat, 31 Mar 2018 21:55:57 -0700
Source: liblayout
Binary: liblayout-java liblayout-java-doc
Architecture: source all
Version: 0.2.10-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: tony mancill 
Description:
 liblayout-java - Java layouting framework
 liblayout-java-doc - Java layouting framework -- documentation
Closes: 894523
Changes:
 liblayout (0.2.10-3) unstable; urgency=medium
 .
   * Team upload.
   * Replace build-dep on gcj with default-jdk (Closes: #894523)
   * Use debhelper 11
   * Bump Standards-Version to 4.1.3
   * Convert package from CDBS to DH sequencer
   * Add patch to target Java 1.8
Checksums-Sha1:
 dbbac10bc239365cedec6ddb2d4d396fbbd6afb0 2141 liblayout_0.2.10-3.dsc
 b4e5a5b98a8654f21541d00e6bc583fe74f7f0a4 2936 liblayout_0.2.10-3.debian.tar.xz
 e3682b567676afd0b84a1d0375573223102cf5b4 883576 
liblayout-java-doc_0.2.10-3_all.deb
 b61186a0e365a4b6abf4deef7275ca729181ac38 652776 liblayout-java_0.2.10-3_all.deb
 85e5b2d9bd83a09f1cc56bec86735fa1147c672d 12663 
liblayout_0.2.10-3_amd64.buildinfo
Checksums-Sha256:
 86a375b918cb5b405d2136647b1eb3d2b49902b36601228a01ff18fb3a9a2539 2141 
liblayout_0.2.10-3.dsc
 ad0d82a8e7cc420eb66ca560de68621dcc5d05bf7cb8eb6f244e43b15b53a160 2936 
liblayout_0.2.10-3.debian.tar.xz
 1e422ce99ab3d3cdcf681a652579ed1f5f99680ce85c66bbd607be21d1600306 883576 
liblayout-java-doc_0.2.10-3_all.deb
 d524ae536d23dc398850737246778360e1bfba1618f6da09fa5867ba584aa962 652776 
liblayout-java_0.2.10-3_all.deb
 6ceacb43846b8f5108e70ef591d643a570bfd26a0b9f612d6438caedee20f035 12663 
liblayout_0.2.10-3_amd64.buildinfo
Files:
 596f662c54df72a66c4f96cf454824b4 2141 libs optional liblayout_0.2.10-3.dsc
 59395cfb9be77fe8c08e6546cf0b3fcd 2936 libs optional 
liblayout_0.2.10-3.debian.tar.xz
 1115eb80095a4f235831158fb12ec8d1 883576 doc optional 
liblayout-java-doc_0.2.10-3_all.deb
 eb122834d0fde8a6446530c7b2d7a894 652776 java optional 
liblayout-java_0.2.10-3_all.deb
 9736531b8d790e94191ee4387d031c49 12663 libs optional 
liblayout_0.2.10-3_amd64.buildinfo

-BEGIN PGP SIGNATURE-

iQJIBAEBCgAyFiEE5Qr9Va3SequXFjqLIdIFiZdLPpYFAlrA8e8UHHRtYW5jaWxs
QGRlYmlhbi5vcmcACgkQIdIFiZdLPpaBbQ/8Cjgv93bXUxmFbSahZgOLFSjjpkMX
ZiFUPUjWYa9Q4WO+wxLSazaQgzG5hfd4mUcfg0AxQUI3ApjkTSm4GgKwSZ0DhrfZ
ZrHK7Etf25/p/bT9Uy969nUo+L9z99S0ttlB0FnscbpSKyzC2hJzmEfowACWNyNV
Pvl7pcBxFKm2otitE1Aaz0gR3uvLj0rk7RvwCCSIoV5cl4Mu6J6FMeHjzoC4mzdv
PuKxIuQ7W7Je02piIyLJJ7xNjw/kbWDq1yMWpf9Riv27W48GKJ2dJE7CiI2WqVXa
n4UJZVbxgAD04L8B0IllhxSt2tWf3XdKfG/edCvMFYyDyruLBqML37k5MGD9UCfl
2xA03aS5N1V3IlvEPZotXHPL1+PQQ2Mnd5TmBIOHAEnc6GG/Nk+B0SNgHSt8/5MG
jZrQ0o+H7sQjDrNJMTIgM9ululcRoUVfRnLbYmgbk0yn7KPre4/Oj8ZLk0optYu3
3Kbd5uz3yPzCUpOcaGWlh0pbAPskOlrHhBHbjBselAV5sBPI+OP5gytojk+myiob
eZnuiIqYvTrlMKJB/uqIGa7DuGT6YKRKxaexD41pNvTs83eOI8uuVp6babopn0eE
gjEkfhIKN+IeQMYRTH9X6hVxC/xgCvR6n7sncfi4y+4frkcbtM6jWsJNOi8Qf/YK
j9PX3+9qpfVMlK4=
=VPEh
-END PGP SIGNATURE-


__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

liblayout_0.2.10-3_amd64.changes ACCEPTED into unstable

2018-04-01 Thread Debian FTP Masters 


Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Sat, 31 Mar 2018 21:55:57 -0700
Source: liblayout
Binary: liblayout-java liblayout-java-doc
Architecture: source all
Version: 0.2.10-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: tony mancill 
Description:
 liblayout-java - Java layouting framework
 liblayout-java-doc - Java layouting framework -- documentation
Closes: 894523
Changes:
 liblayout (0.2.10-3) unstable; urgency=medium
 .
   * Team upload.
   * Replace build-dep on gcj with default-jdk (Closes: #894523)
   * Use debhelper 11
   * Bump Standards-Version to 4.1.3
   * Convert package from CDBS to DH sequencer
   * Add patch to target Java 1.8
Checksums-Sha1:
 dbbac10bc239365cedec6ddb2d4d396fbbd6afb0 2141 liblayout_0.2.10-3.dsc
 b4e5a5b98a8654f21541d00e6bc583fe74f7f0a4 2936 liblayout_0.2.10-3.debian.tar.xz
 e3682b567676afd0b84a1d0375573223102cf5b4 883576 
liblayout-java-doc_0.2.10-3_all.deb
 b61186a0e365a4b6abf4deef7275ca729181ac38 652776 liblayout-java_0.2.10-3_all.deb
 85e5b2d9bd83a09f1cc56bec86735fa1147c672d 12663 
liblayout_0.2.10-3_amd64.buildinfo
Checksums-Sha256:
 86a375b918cb5b405d2136647b1eb3d2b49902b36601228a01ff18fb3a9a2539 2141 
liblayout_0.2.10-3.dsc
 ad0d82a8e7cc420eb66ca560de68621dcc5d05bf7cb8eb6f244e43b15b53a160 2936 
liblayout_0.2.10-3.debian.tar.xz
 1e422ce99ab3d3cdcf681a652579ed1f5f99680ce85c66bbd607be21d1600306 883576 
liblayout-java-doc_0.2.10-3_all.deb
 d524ae536d23dc398850737246778360e1bfba1618f6da09fa5867ba584aa962 652776 
liblayout-java_0.2.10-3_all.deb
 6ceacb43846b8f5108e70ef591d643a570bfd26a0b9f612d6438caedee20f035 12663 
liblayout_0.2.10-3_amd64.buildinfo
Files:
 596f662c54df72a66c4f96cf454824b4 2141 libs optional liblayout_0.2.10-3.dsc
 59395cfb9be77fe8c08e6546cf0b3fcd 2936 libs optional 
liblayout_0.2.10-3.debian.tar.xz
 1115eb80095a4f235831158fb12ec8d1 883576 doc optional 
liblayout-java-doc_0.2.10-3_all.deb
 eb122834d0fde8a6446530c7b2d7a894 652776 java optional 
liblayout-java_0.2.10-3_all.deb
 9736531b8d790e94191ee4387d031c49 12663 libs optional 
liblayout_0.2.10-3_amd64.buildinfo

-BEGIN PGP SIGNATURE-
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=VPEh
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#893663: freeplane: CVE-2018-1000069 XXE vulnerability

2018-04-01 Thread Markus Koschany 
Hi Felix,

Am 01.04.2018 um 16:23 schrieb Felix Natter:
> hello Markus,
> 
> I have prepared the patched 1.5.18-1+deb9u1 for stretch
> I hope I got the version number right? The changelog entry is probably
> not correct either. Can you advice what to read?
> 
> I briefly tested saving+loading mindmaps.
> 
> Here it is:
> https://anonscm.debian.org/cgit/pkg-java/freeplane.git/log/?h=stretch-CVE-2018-169
> (branch stretch-CVE-2018-169 in the freeplane alioth repo).
> 
> I am in the process of setting up a vbox instance for jessie to address
> the other update.
> 
> Cheers and Best Regards,

The version is correct. I would write in your changelog:

Fix CVE-2018-169: Wojciech Reguła discovered that FreePlane was
affected by a XML External Entity (XXE) vulnerability in its mindmap
loader that could compromise a user's machine by opening a specially
crafted mind map file. (Closes: #893663)

Distribution should be stretch-security though and the urgency is high.
Similar for Jessie, jessie-security and the version is 1.3.12-1+deb8u1


Cheers,

Markus



signature.asc
Description: OpenPGP digital signature
__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of liblayout_0.2.10-3_amd64.changes

2018-04-01 Thread Debian FTP Masters 
liblayout_0.2.10-3_amd64.changes uploaded successfully to localhost
along with the files:
  liblayout_0.2.10-3.dsc
  liblayout_0.2.10-3.debian.tar.xz
  liblayout-java-doc_0.2.10-3_all.deb
  liblayout-java_0.2.10-3_all.deb
  liblayout_0.2.10-3_amd64.buildinfo

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#893635: does not show up in GNOME's application menus

2018-04-01 Thread Felix Natter 
hello Antoine,

thank you for the report. I cannot reproduce this on stretch with
GNOME3: It shows up in the list of applications (super key), and in both
"menu editors". Can you provide your desktop environment (GNOME3?) and a
screenshot that shows the problem?

I will ask x...@lists.freedesktop.org.

Cheers and Best Regards,
-- 
Felix Natter
debian/rules!

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#893663: freeplane: CVE-2018-1000069 XXE vulnerability

2018-04-01 Thread Felix Natter 
hello Markus,

I have prepared the patched 1.5.18-1+deb9u1 for stretch
I hope I got the version number right? The changelog entry is probably
not correct either. Can you advice what to read?

I briefly tested saving+loading mindmaps.

Here it is:
https://anonscm.debian.org/cgit/pkg-java/freeplane.git/log/?h=stretch-CVE-2018-169
(branch stretch-CVE-2018-169 in the freeplane alioth repo).

I am in the process of setting up a vbox instance for jessie to address
the other update.

Cheers and Best Regards,
-- 
Felix Natter
debian/rules!

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

[freeplane] 01/01: change version number

2018-04-01 Thread Felix Natter 
This is an automated email from the git hooks/post-receive script.

fnatter-guest pushed a commit to branch stretch-CVE-2018-169
in repository freeplane.

commit 6073895b7909fefa5b9cc22d8f946ead834e21f0
Author: Felix Natter 
Date:   Sun Apr 1 15:56:54 2018 +0200

change version number
---
 debian/changelog | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index 75e11af..a591cc6 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,8 +1,8 @@
-freeplane (1.5.18-1+deb9u4) UNRELEASED; urgency=medium
+freeplane (1.5.18-1+deb9u1) unstable; urgency=medium
 
   * fix CVE-2018-169
 
- -- Felix Natter   Sat, 31 Mar 2018 17:27:23 +0200
+ -- Felix Natter   Sun, 01 Apr 2018 15:53:49 +0200
 
 freeplane (1.5.18-1) unstable; urgency=medium
 

-- 
Alioth's /usr/local/bin/git-commit-notice on 
/srv/git.debian.org/git/pkg-java/freeplane.git

___
pkg-java-commits mailing list
pkg-java-comm...@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits

[freeplane] branch stretch-CVE-2018-1000069 updated (331ea5f -> 6073895)

2018-04-01 Thread Felix Natter 
This is an automated email from the git hooks/post-receive script.

fnatter-guest pushed a change to branch stretch-CVE-2018-169
in repository freeplane.

  from  331ea5f   import patch for fixing CVE-2018-169
   new  6073895   change version number

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


Summary of changes:
 debian/changelog | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

-- 
Alioth's /usr/local/bin/git-commit-notice on 
/srv/git.debian.org/git/pkg-java/freeplane.git

___
pkg-java-commits mailing list
pkg-java-comm...@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits

Bug#894540: sbt FTBFS with openjdk-9

2018-04-01 Thread Adrian Bunk 
Source: sbt
Version: 0.13.13-2
Severity: serious

https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/sbt.html

...
error: error while loading package, Missing dependency 'object java.lang.Object 
in compiler mirror', required by 
/build/1st/sbt-0.13.13/debian/sbt_home/.sbt/boot/scala-2.10.6/lib/scala-library.jar(scala/package.class)
error: error while loading package, Missing dependency 'object java.lang.Object 
in compiler mirror', required by 
/build/1st/sbt-0.13.13/debian/sbt_home/.sbt/boot/scala-2.10.6/lib/scala-library.jar(scala/runtime/package.class)

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.