freeplane_1.5.16-2_amd64.changes ACCEPTED into unstable

2016-11-22 Thread Debian FTP Masters
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 22 Nov 2016 19:49:17 +0100 Source: freeplane Binary: freeplane freeplane-scripting-api Architecture: source all Version: 1.5.16-2 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers

Processing of freeplane_1.5.16-2_amd64.changes

2016-11-22 Thread Debian FTP Masters
freeplane_1.5.16-2_amd64.changes uploaded successfully to localhost along with the files: freeplane_1.5.16-2.dsc freeplane_1.5.16-2.debian.tar.xz freeplane-scripting-api_1.5.16-2_all.deb freeplane_1.5.16-2_all.deb freeplane_1.5.16-2_amd64.buildinfo Greetings, Your Debian queue

uncommons-watchmaker_0.7.1-1_amd64.changes is NEW

2016-11-22 Thread Debian FTP Masters
binary:libuncommons-watchmaker-framework-java is NEW. binary:libuncommons-watchmaker-swing-java is NEW. binary:uncommons-watchmaker-doc is NEW. binary:libuncommons-watchmaker-framework-java is NEW. binary:uncommons-watchmaker-doc is NEW. binary:libuncommons-watchmaker-swing-java is NEW.

Processing of uncommons-watchmaker_0.7.1-1_amd64.changes

2016-11-22 Thread Debian FTP Masters
uncommons-watchmaker_0.7.1-1_amd64.changes uploaded successfully to localhost along with the files: uncommons-watchmaker_0.7.1-1.dsc uncommons-watchmaker_0.7.1.orig.tar.xz uncommons-watchmaker_0.7.1-1.debian.tar.xz libuncommons-watchmaker-framework-java_0.7.1-1_all.deb

Bug#845385: Privilege escalation via removal

2016-11-22 Thread paul . szabo
Dear Emmanuel, > Do you think running something like "chmod -R 640 /etc/tomcat8" right > before the chown is an appropriate solution to this issue? Might protect against "static" things, but vulnerable to a race. Your postrm script might want to kill all tomcat8 processes, also. That might be a

reproducible.debian.net status changes for libcommons-jexl2-java

2016-11-22 Thread Reproducible builds folks
2016-11-22 16:01 https://tests.reproducible-builds.org/debian/unstable/amd64/libcommons-jexl2-java changed from reproducible -> FTBFS __ This is the maintainer address of Debian's Java team . Please use

Bug#845393: Privilege escalation via upgrade

2016-11-22 Thread Paul Szabo
Package: tomcat8 Version: 8.0.14-1+deb8u4 Severity: critical Tags: security Having installed tomcat8, the directory /etc/tomcat8/Catalina is set writable by group tomcat8, as per the postinst script. Then the tomcat8 user, in the situation envisaged in DSA-3670 and DSA-3720, see also

Bug#845385: Privilege escalation via removal

2016-11-22 Thread Paul Szabo
Package: tomcat8 Version: 8.0.14-1+deb8u4 Severity: critical Tags: security Having installed tomcat8, the directory /etc/tomcat8/Catalina is set writable by group tomcat8, as per the postinst script. Then the tomcat8 user, in the situation envisaged in DSA-3670 and DSA-3720, see also

Bug#845270: jython: /usr/bin/jython sets broken python.home property

2016-11-22 Thread Gilles Filippini
On Tue, 22 Nov 2016 00:03:48 +0100 Gilles Filippini wrote: > Package: jython > Version: 2.5.3-11 > Severity: normal > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Hi, > > /usr/bin/jython should set python.home = '/usr/share/jython', but it uses >

Bug#845360: jython: the default cachedir path should be set at the library intialization step

2016-11-22 Thread Gilles Filippini
Package: jython Version: 2.5.3-11 Severity: normal Tags: patch -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, The jython launcher currently forces the cachedir to $HOME/.jython-cache. But when the library is used directly the cachedir is still set from the upstream default in

shiro 1.3.2-1 MIGRATED to testing

2016-11-22 Thread Debian testing watch
FYI: The status of the shiro source package in Debian's testing distribution has changed. Previous version: 1.2.5-2 Current version: 1.3.2-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will receive

tomcat7 7.0.73-1 MIGRATED to testing

2016-11-22 Thread Debian testing watch
FYI: The status of the tomcat7 source package in Debian's testing distribution has changed. Previous version: 7.0.72-4 Current version: 7.0.73-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will

libspring-java 4.3.4-2 MIGRATED to testing

2016-11-22 Thread Debian testing watch
FYI: The status of the libspring-java source package in Debian's testing distribution has changed. Previous version: 4.3.3-1 Current version: 4.3.4-2 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will

libxml-security-java 1.5.8-1 MIGRATED to testing

2016-11-22 Thread Debian testing watch
FYI: The status of the libxml-security-java source package in Debian's testing distribution has changed. Previous version: 1.5.6-1 Current version: 1.5.8-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day

javassist 1:3.21.0-1 MIGRATED to testing

2016-11-22 Thread Debian testing watch
FYI: The status of the javassist source package in Debian's testing distribution has changed. Previous version: 1:3.20.0-2 Current version: 1:3.21.0-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you

tomcat7_7.0.73-1~bpo8+1_amd64.changes ACCEPTED into jessie-backports

2016-11-22 Thread Debian FTP Masters
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Format: 1.8 Date: Tue, 22 Nov 2016 13:16:38 +0100 Source: tomcat7 Binary: tomcat7-common tomcat7 tomcat7-user libtomcat7-java libservlet3.0-java libservlet3.0-java-doc tomcat7-admin tomcat7-examples tomcat7-docs Architecture: source all

Processing of tomcat7_7.0.73-1~bpo8+1_amd64.changes

2016-11-22 Thread Debian FTP Masters
tomcat7_7.0.73-1~bpo8+1_amd64.changes uploaded successfully to localhost along with the files: tomcat7_7.0.73-1~bpo8+1.dsc tomcat7_7.0.73-1~bpo8+1.debian.tar.xz tomcat7-common_7.0.73-1~bpo8+1_all.deb tomcat7_7.0.73-1~bpo8+1_all.deb tomcat7-user_7.0.73-1~bpo8+1_all.deb

tomcat8_8.0.39-1~bpo8+1_amd64.changes ACCEPTED into jessie-backports

2016-11-22 Thread Debian FTP Masters
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Format: 1.8 Date: Tue, 22 Nov 2016 11:26:17 +0100 Source: tomcat8 Binary: tomcat8-common tomcat8 tomcat8-user libtomcat8-java libtomcat8-embed-java libservlet3.1-java libservlet3.1-java-doc tomcat8-admin tomcat8-examples tomcat8-docs

Processing of tomcat8_8.0.39-1~bpo8+1_amd64.changes

2016-11-22 Thread Debian FTP Masters
tomcat8_8.0.39-1~bpo8+1_amd64.changes uploaded successfully to localhost along with the files: tomcat8_8.0.39-1~bpo8+1.dsc tomcat8_8.0.39-1~bpo8+1.debian.tar.xz tomcat8-common_8.0.39-1~bpo8+1_all.deb tomcat8_8.0.39-1~bpo8+1_all.deb tomcat8-user_8.0.39-1~bpo8+1_all.deb