Bug#698108: jdk7u11 not supported
Package: java-package Version: 0.50+nmu1 Severity: grave Tags: security Trying to install java 7u11 (to get rid of latest 0 day vulnerability), I get following output : make-jpkg ./jdk-7u11-linux-i586.tar.gz Creating temporary directory: /tmp/make-jpkg.PhqdadauR6 Loading plugins: /usr/share/java-package/common.sh /usr/share/java-package/j2re.sh /usr/share/java-package/j2sdk-doc.sh /usr/share/java-package/j2sdk.sh /usr/share/java-package/j2se.sh /usr/share/java-package/oracle-j2re.sh /usr/share/java-package/oracle-j2sdk-doc.sh /usr/share/java-package/oracle-j2sdk.sh Detected Debian build architecture: i386 Detected Debian GNU type: i486-linux-gnu No matching plugin was found. Removing temporary directory: done I'm creating the bug with severity grave because of this 0 day in Java. -- System Information: Debian Release: 7.0 APT prefers testing-proposed-updates APT policy: (900, 'testing-proposed-updates'), (900, 'testing'), (700, 'proposed-updates'), (600, 'stable'), (400, 'unstable') Architecture: i386 (i686) Kernel: Linux 3.2.0-4-686-pae (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages java-package depends on: ii debhelper 9.20120909 ii fakeroot1.18.4-2 ii libasound2 1.0.25-4 ii libx11-62:1.5.0-1 ii unzip 6.0-8 Versions of packages java-package recommends: ii dpkg-dev 1.16.9 ii gcc 4:4.7.2-1 Versions of packages java-package suggests: pn openjdk-6-jre none pn openjdk-7-jre none -- debconf information: * java-package/postinst-note: This message is confidential and intended only for the addressee. If you have received this message in error, please immediately notify the postmas...@nds.com and delete it from your system as well as any copies. The content of e-mails as well as traffic data may be monitored by NDS for employment and security purposes. To protect the environment please do not print this e-mail unless necessary. An NDS Group Limited company. www.nds.com __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
Bug#342341: eclipse: too many unneeded dependencies
Le Fri 16/12/2005, Michael Koch disait On Wed, Dec 14, 2005 at 09:32:11AM +0100, Erwan David wrote: Le Wed 14/12/2005, Michael Koch disait I would like that you check the facts before writing such words. You are free not to use the Eclipse packaged by Debian but e.g. the Help system which is a vital system for some users will not work. Other thinks don't work either. Upstream Eclipse 3.1.1 don't works with free java runtimes at all because of broken memory management in JDT. It works perfectly without mozilla. It needs a browser but that's why every browser package has a Provides: www-browser, so the dependency should be on www-browser, not mozilla-browser. Not all packages providing www-browser export the needed shared library for the embedded browser in Eclipse, which is the default and preferred way in Eclipse upstream as Billy wrote. And that doies not explain th gnome dependency, which is heavier, and tottaly inadequate and, I repeat DANGEROUS. Eclipse doesn't depend on gnome, just on some libraries gnome provides. Many applications do this. That is neither heavy nor totally inadequate. Our goal is to make Eclipse ready-to-use after a simple 'apt-get install eclipse' No eclipse (the software) depends on *gtk* libs. Even eclipse.org does not cite gnome as a requirements. *YOU* impose gnome. To make this happen we have to depend on some stuff that may not be needed but is needed in the default configuration of Eclipse. When you don't need this features, don't use them. It is definitely NOT DANGEROUS. Data loss would be DANGEROUS. Gnome IS a danger becaéuse its goal is to impose a tatlly inadequate way of using a computer to people who do not want it. Gnome is contrary to the freedom of the user. -- Erwan David ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers
Bug#342341: eclipse: too many unneeded dependencies
Le Fri 16/12/2005, Billy Biggs disait On 16-Dec-05, at 3:19 AM, Erwan David wrote: No eclipse (the software) depends on *gtk* libs. Even eclipse.org does not cite gnome as a requirements. *YOU* impose gnome. Erwan, what part about my description of our use of GNOME is confusing? We use GNOME-VFS to implement the Program API. It's used to: - determine what your system web browser is - determine what application should launch if you open the system editor in eclipse - actually run these programs Without GNOME-VFS, the preferences dialog that lists web browsers won't list anything, nor will the listing of external applications for file associations, nor will the open with system editor work, and any applications that depend on the SWT Program API will not work properly. Do you want me to change the Eclipse Platform 3.2 plan on eclipse.org to more clearly state that we depend on gnome-vfs I can do this if it would help! Yasd that would make easier for me to explain that eclipse is a windows only thing If you choose to make yoursellf dependant on people who claim that microsoft waéy is the only way to use a computer,be logical and make windows only software. -- Erwan David ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers
Bug#342341: eclipse: too many unneeded dependencies
Le Wed 14/12/2005, Billy Biggs disait It needs Mozilla for the embedded browser, as it uses the Gecko embedding API. Erwan is correct that if this is not available, the help system will launch in an external web browser. However, this is a degredation of functionality. We would like all distributions to ship an embeddable mozilla, or the xulrunner Mozilla runtime. Ok, so the mozilla part is a bug in the mozilla packaging which does not separate the browser from the GtkMozEmbed library. It lets the gnome problem (which is the most annoying dependency). eclipse uses gtk, not gnome, its different. -- Erwan ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers
Bug#342341: eclipse: too many unneeded dependencies
Le Wed 14/12/2005, Michael Koch disait I would like that you check the facts before writing such words. You are free not to use the Eclipse packaged by Debian but e.g. the Help system which is a vital system for some users will not work. Other thinks don't work either. Upstream Eclipse 3.1.1 don't works with free java runtimes at all because of broken memory management in JDT. It works perfectly without mozilla. It needs a browser but that's why every browser package has a Provides: www-browser, so the dependency should be on www-browser, not mozilla-browser. And that doies not explain th gnome dependency, which is heavier, and tottaly inadequate and, I repeat DANGEROUS. -- Erwan David ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers
Bug#342341: eclipse: too many unneeded dependencies
Le Sat 10/12/2005, Stephan Michels disait On 12/7/05, Erwan David [EMAIL PROTECTED] wrote: Package: eclipse Severity: normal sudo apt-get -u install eclipse Password: Reading package lists... Done Building dependency tree... Done The following extra packages will be installed: dbus-1 dbus-glib-1 eclipse-jdt eclipse-jdt-common eclipse-pde eclipse-pde-common eclipse-platform eclipse-platform-common eclipse-rcp eclipse-rcp-common eclipse-source gconf2 gconf2-common gnome-keyring gnome-mime-data junit libbcel-java libbonobo2-0 libbonobo2-common libbonoboui2-0 libbonoboui2-common libcommons-beanutils-java libcommons-collections-java libcommons-collections3-java libcommons-dbcp-java libcommons-digester-java libcommons-el-java libcommons-fileupload-java libcommons-launcher-java libcommons-logging-java libcommons-modeler-java libcommons-pool-java libfam0c102 libgconf2-4 libgnome-keyring0 libgnome2-0 libgnome2-common libgnomecanvas2-0 libgnomecanvas2-common libgnomeui-0 libgnomeui-common libgnomevfs2-0 libgnomevfs2-common libhal-storage0 libhal0 libjsch-java liblog4j1.2-java liblucene-java liblucene-java-doc libmx4j-java liborbit2 libregexp-java libscrollkeeper0 libservlet2.4-java libsmbclient libswt3.1-gtk-java libswt3.1-gtk-jni libtomcat5-java mozilla-browser scrollkeeper shared-mime-info zenity Which means 195 MB on disk... eclipse does not need gnome, so there is a dependency problem on this side. Same thing with mozilla-browser. The gnome libraries are needed for SWT, for example org.eclipse.swt.program.Program to get informations about the mine type and icons etc. for a given file. False, eclipse and swt work perfectly without gnome. It seems that the SWT libraries handle the case if the gnome libs doesn't exist properly. But I don't think it's a good idea to remove the dependencies. Maybe a solution is to use recommendations instead. Is it a good idea to impose gnome to those who do not want it ? And the dependency to mozila-broser is needed for the SWT Browser widget. You should be able to use firefox instead, but nevertheless a browser is needed. eclipse works without a browser installed. You put restrictions on its use... In any case this makes the package uninstallable here (no gnome). Sad to hear, but to be honest if you can't spare 195 MB of diskspace then you won't have much fun with Eclipse. Its more a matter of policy : you as maintainer put arbitrary restrictions on the use of the software. I tend to tag the report as WONTFIX, but wait on an opinion from Michael Koch. Do debian policy allow maintainers to include dependencies which are not upstream ? I do not want to use gnome, f I follow you I should stop using debian ? -- Erwan ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers
Bug#342341: eclipse: too many unneeded dependencies
Le Sat 10/12/2005, Michael Koch disait I agree with you, Stephan. Tagging it 'wontfix' is the best thing. Or just close it. We can either try to ship an Eclipse that works out of the box or a an Eclipse that needs much help from the admin to install additional stuff that Eclipse not depends on. I prefer to do the first as it helps more users then the second option hurts. When we 'fix' this bug and downgrade the Depends to Recommends or Suggests we will get bug reports from users complaining that Eclipse doesnt work out of the box. Cheers, Michael -- Escape the Java Trap with GNU Classpath! http://www.gnu.org/philosophy/java-trap.html Join the community at http://planet.classpath.org/ So you want to oblige people to use the pile of crap that gnome is. MY freedom is also to NOT use software I think is ill designed and is a danger. You deny me this right. And you're a liar, I can download upstream eclipse without using mozilla (you oblige people to install obsolete sqoftware by the way..) nor gnome. Imposing gnome for the mime stuff is either a lie or the proof of blatant incompetency. Mime is handled through the mailcap and mime.types definitions and the debian package to handle them is mime-support. PS: I was evaluating debian for the desktops at my work. I must now say that I cannot suggest it for the developers, we'll stick with other dsitributions which let people free to choose not to use some software. -- Erwan ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers
