Your message dated Wed, 07 Oct 2015 15:57:19 +0000
with message-id <e1zjr5j-0000tg...@franck.debian.org>
and subject line Bug#800974: fixed in netbeans 8.0.2+dfsg1-5
has caused the Debian Bug report #800974,
regarding netbeans: depends on obsolete libcommons-httpclient-java library
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
800974: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=800974
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: netbeans
Severity: normal
User: pkg-java-maintainers@lists.alioth.debian.org
Usertags: oldlibs libcommons-httpclient-java

Hi,

netbeans depends on libcommons-httpclient-java, which is obsolete and was
replaced by libhttpclient-java. It has reached EOL status in 2011! It is no
longer supported upstream [1] and was affected by multiple security issues in
the recent past. netbeans should be ported to the new libhttpclient-java
version, so that we can remove the old, unmaintained one. Please forward this
issue upstream, if you can't migrate the package yourself.

We would like to see libcommons-httpclient-java removed during the Stretch
release cycle but due to the large number of reverse-dependencies the outcome
depends more than ever on your help.

Please help us to accomplish this goal. We will bump this issue to important
when the list of rdeps is getting smaller and we think that the removal is
possible. We will eventually raise the severity to serious when the number
of rdeps is small.

If you have any questions don't hesitate to ask and contact us on

debian-j...@list.debian.org

Regards,

Markus

[1] https://hc.apache.org/httpclient-3.x/

[2] 
https://security-tracker.debian.org/tracker/source-package/commons-httpclient

--- End Message ---
--- Begin Message ---
Source: netbeans
Source-Version: 8.0.2+dfsg1-5

We believe that the bug you reported is fixed in the latest version of
netbeans, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 800...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Markus Koschany <a...@gambaru.de> (supplier of updated netbeans package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 07 Oct 2015 16:53:28 +0200
Source: netbeans
Binary: libnb-absolutelayout-java libnb-apisupport3-java libnb-ide14-java 
libnb-java5-java netbeans
Architecture: source
Version: 8.0.2+dfsg1-5
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 
<pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <a...@gambaru.de>
Description:
 libnb-absolutelayout-java - Java LayoutManager to allow placement in absolute 
positions
 libnb-apisupport3-java - Common NetBeans Platform Development Related 
Libraries for NetBea
 libnb-ide14-java - Common Integrated Development Environment Libraries for 
NetBeans
 libnb-java5-java - Common Java Related Libraries for NetBeans
 netbeans   - Extensible Java IDE
Closes: 800974 801041
Changes:
 netbeans (8.0.2+dfsg1-5) unstable; urgency=medium
 .
   * orig-tar.sh: Remove embedded jquery.js files.
   * Vcs-Browser: Use https.
   * Tighten build-dependency on osgi-core and osgi-compendium.
   * netbeans: Tighten dependency on libnb-platform18-java.
   * netbeans: Add java8-jdk as an alternative dependency.
   * Switch to libhttpclient-java. (Closes: #800974)
   * Switch to libservlet3.1-java. (Closes: #801041)
Checksums-Sha1:
 e46318a2b0e25c1719ff99ca94b662121084f344 3551 netbeans_8.0.2+dfsg1-5.dsc
 d25b2b6918896130e6b495d06e2a17060038877f 60800 
netbeans_8.0.2+dfsg1-5.debian.tar.xz
Checksums-Sha256:
 f54b3c7eeee21744b98a2b14a1c0255b87828d3e609ed91fe4d668eeff354b0e 3551 
netbeans_8.0.2+dfsg1-5.dsc
 32e2e9748029b77379ab206749034c96a6757937c1dffb7664873e9706a77793 60800 
netbeans_8.0.2+dfsg1-5.debian.tar.xz
Files:
 fd3ed941899b82a31913c767e6b44b26 3551 java optional netbeans_8.0.2+dfsg1-5.dsc
 4c12dddea15be60abb7950095ea7d03a 60800 java optional 
netbeans_8.0.2+dfsg1-5.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=eSeD
-----END PGP SIGNATURE-----

--- End Message ---
__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Reply via email to